Commit graph

264 commits

Author SHA1 Message Date
Matteo Biscosi
f992492445 Added order by in flow sankey 2025-08-11 11:28:08 +02:00
Luca Deri
cd9a9c23c0 Added /lua/pro/rest/v2/set/nedge/interface/drop_host_flows.lua 2025-08-09 17:28:24 +02:00
Luca Deri
11358965b0 Added ASN agrgegation table 2025-07-28 12:14:10 +02:00
Alfredo Cardigliano
ed1c0ae14b Change hourly schema: order by first seen first 2025-07-17 16:56:55 +02:00
GabrieleDeri
cd1d2340b2
Implement Peer (src/dst) ASN in Historical Flows #9337
* Added peer src dst asn

* Fixed asn typo
2025-07-03 12:34:01 +02:00
GabrieleDeri
e912af1b17
Added peer asn in clickhouse (#9328)
* Added peer asn in clickhouse

* Added peer asn to all versions

* Readded en string
2025-07-01 13:09:13 +02:00
Alfredo Cardigliano
4faddbb050 Add notes and macros 2025-06-11 11:42:50 +02:00
Alfredo Cardigliano
a13eb41e81 Replace NULL with default values (CH optimization) 2025-05-19 18:47:53 +02:00
Alfredo Cardigliano
821efd53d0 Cleanup schema (NOT NULL is not required - default) 2025-05-19 17:56:22 +02:00
Alfredo Cardigliano
5f1af930fb Change flows table schema (order by FIRST_SEEN first) 2025-05-16 18:12:40 +02:00
Matteo Biscosi
c0d42f2343 Fixes issues with npm 2025-05-16 10:13:21 +02:00
Matteo Biscosi
fcdc6b7a03 Added packets to hourly flows 2025-05-14 16:23:05 +02:00
Matteo Biscosi
5fbe4dff79 Fixes filters request in reports dashboard (#9205) 2025-05-13 16:22:29 +02:00
Alfredo Cardigliano
4e0c1e3be7 Fix endpoint 2025-04-02 10:04:11 +02:00
Alfredo Cardigliano
6d8b6e74e9 Update nedge API doc 2025-04-01 18:29:54 +02:00
Alfredo Cardigliano
48de1e9e9a Remove unused tags 2025-03-31 18:27:42 +02:00
Alfredo Cardigliano
59da543ab2 Add nEdge REST API doc 2025-03-31 13:04:44 +02:00
Luca Deri
cb03021f4e Updated DB asset schema
Fixed URL in host details
2025-03-27 19:36:56 +01:00
Alfredo Cardigliano
41f122097e Move all asset endpoints to pro 2025-03-19 17:11:28 +01:00
Alfredo Cardigliano
b246fe94b0 Cleanup old flow_alerts table schema 2025-03-19 16:00:13 +01:00
Alfredo Cardigliano
97ca40a349 Add ja4 client fingerprint and custom queries 2025-03-12 16:57:10 +01:00
Alfredo Cardigliano
bb9216ba7b Add QOE_SCORE column 2025-02-25 09:39:05 +01:00
Matteo Biscosi
db787a01c0 Removed deprecated blacklist (#8900) 2025-01-22 18:00:12 +01:00
Matteo Biscosi
3150761f26 Added first implementation of Assets 2025-01-21 12:30:56 +01:00
Matteo Biscosi
bf6d02902d Added rest api doc for inactive assets (#6794) 2025-01-15 10:01:53 +01:00
Matteo Biscosi
5c4509c62e Removed unused tables 2025-01-14 17:59:48 +01:00
YellowMan
3969fc9d9e
added rest API mac traffic information (#8885)
* added asset management utils

* added rest API mac traffic information
2025-01-13 17:56:27 +01:00
Alfredo Cardigliano
a4b7228a3a Cleanup CH schema 2024-12-31 10:23:23 +01:00
Alfredo Cardigliano
db4810a1e6 Cleanup schema for sqlite (remove backticks creating issues, indentation) 2024-12-31 10:15:34 +01:00
Matteo Biscosi
a63dec0dcc Reworked assets table 2024-12-30 12:37:54 +01:00
Alfredo Cardigliano
ae5128c620 Split protocol and alert info from ALERT_JSON: new PROTOCOL_INFO_JSON column 2024-12-05 15:13:16 +01:00
Alfredo Cardigliano
8c0094f354 Fix flow alerts lookup for non predominant alerts (alerts_map_h/alerts_map_l integer columns) 2024-11-20 11:44:06 +01:00
Alfredo Cardigliano
0447fe89a7 Fix asset_management schema 2024-11-19 13:05:47 +01:00
Alfredo Cardigliano
27d5a80ff9 Fix sqlite schema 2024-11-13 15:00:22 +01:00
Alfredo Cardigliano
6cfd45b648 Update sqlite schema 2024-11-13 14:42:49 +01:00
Alfredo Cardigliano
173e0aaca0 Add in-memory tables for all alert families. Add aggregated views for all families. 2024-11-12 09:57:02 +01:00
Alfredo Cardigliano
f412a7dc5e Add require_attention to all alert families on CH Cluster 2024-11-11 18:30:50 +01:00
Alfredo Cardigliano
12407d6604 Add require_attention to all alert families on CH 2024-11-11 18:23:21 +01:00
Alfredo Cardigliano
6f9d0690c6 Add require_attention to all alert families on SQLite. Cleanup SQLite schema 2024-11-11 18:12:27 +01:00
Alfredo Cardigliano
2da5925181 Fix all alerts page. Fix require attention results. 2024-11-11 15:59:58 +01:00
Alfredo Cardigliano
f3963c9eb1 Split alert_status (engaged, historical, acknowledged) and require_attention flag 2024-11-11 12:46:25 +01:00
Alfredo Cardigliano
009288bdc2 Add schema for in-memory engaged_host_alerts table and host_alerts_view aggregated view on ClickHouse Cluster 2024-11-08 12:48:46 +01:00
Alfredo Cardigliano
7dedfa1a8c Add schema for in-memory engaged_host_alerts table and host_alerts_view aggregated view on ClickHouse 2024-11-08 12:46:41 +01:00
Alfredo Cardigliano
64028e3f8b Add/remove engaged alerts from the in-memory db (currently working on SQLite) 2024-11-08 09:07:56 +01:00
Alfredo Cardigliano
b48c0e0d1d Add schema for in-memory mem_db.engaged_host_alerts table and host_alerts_view aggregated view on SQLite 2024-11-07 10:58:48 +01:00
Luca Deri
5e3c7c2721 SQlite schema split with '@' to avoid long queries that can fail 2024-11-05 19:04:36 +01:00
Matteo Biscosi
679ef8edab Possible fix for asset management not working 2024-11-05 15:51:03 +01:00
Matteo Biscosi
6ab628cab9 Added missing schema to ch cluster 2024-11-05 14:34:42 +01:00
Matteo Biscosi
df4344273c Moved asset management table 2024-11-05 13:47:20 +01:00
Matteo Biscosi
20ed95fcb0 Added asset management table 2024-11-05 13:46:57 +01:00