52 commits

Author	SHA1	Message	Date
Luca Deri	11358965b0	Added ASN agrgegation table	2025-07-28 12:14:10 +02:00
Alfredo Cardigliano	ed1c0ae14b	Change hourly schema: order by first seen first	2025-07-17 16:56:55 +02:00
GabrieleDeri	e912af1b17	Added peer asn in clickhouse (#9328) ... * Added peer asn in clickhouse * Added peer asn to all versions * Readded en string	2025-07-01 13:09:13 +02:00
Alfredo Cardigliano	a13eb41e81	Replace NULL with default values (CH optimization)	2025-05-19 18:47:53 +02:00
Alfredo Cardigliano	821efd53d0	Cleanup schema (NOT NULL is not required - default)	2025-05-19 17:56:22 +02:00
Alfredo Cardigliano	5f1af930fb	Change flows table schema (order by FIRST_SEEN first)	2025-05-16 18:12:40 +02:00
Matteo Biscosi	fcdc6b7a03	Added packets to hourly flows	2025-05-14 16:23:05 +02:00
Luca Deri	cb03021f4e	Updated DB asset schema ... Fixed URL in host details	2025-03-27 19:36:56 +01:00
Alfredo Cardigliano	b246fe94b0	Cleanup old flow_alerts table schema	2025-03-19 16:00:13 +01:00
Alfredo Cardigliano	97ca40a349	Add ja4 client fingerprint and custom queries	2025-03-12 16:57:10 +01:00
Alfredo Cardigliano	bb9216ba7b	Add QOE_SCORE column	2025-02-25 09:39:05 +01:00
Alfredo Cardigliano	a4b7228a3a	Cleanup CH schema	2024-12-31 10:23:23 +01:00
Matteo Biscosi	a63dec0dcc	Reworked assets table	2024-12-30 12:37:54 +01:00
Alfredo Cardigliano	ae5128c620	Split protocol and alert info from ALERT_JSON: new PROTOCOL_INFO_JSON column	2024-12-05 15:13:16 +01:00
Alfredo Cardigliano	173e0aaca0	Add in-memory tables for all alert families. Add aggregated views for all families.	2024-11-12 09:57:02 +01:00
Alfredo Cardigliano	f412a7dc5e	Add require_attention to all alert families on CH Cluster	2024-11-11 18:30:50 +01:00
Alfredo Cardigliano	2da5925181	Fix all alerts page. Fix require attention results.	2024-11-11 15:59:58 +01:00
Alfredo Cardigliano	f3963c9eb1	Split alert_status (engaged, historical, acknowledged) and require_attention flag	2024-11-11 12:46:25 +01:00
Alfredo Cardigliano	009288bdc2	Add schema for in-memory engaged_host_alerts table and host_alerts_view aggregated view on ClickHouse Cluster	2024-11-08 12:48:46 +01:00
Matteo Biscosi	679ef8edab	Possible fix for asset management not working	2024-11-05 15:51:03 +01:00
Matteo Biscosi	6ab628cab9	Added missing schema to ch cluster	2024-11-05 14:34:42 +01:00
Alfredo Cardigliano	89f59cde5a	Migrate local networks type from 16 to 32 bit	2024-10-29 15:31:37 +01:00
Alfredo Cardigliano	fb30f7592f	Fix schema. Add DOMAIN_NAME.	2024-10-28 11:22:36 +01:00
Alfredo Cardigliano	1eab4beac5	Restore SRC_NETWORK_ID DST_NETWORK_ID data type to UInt16 for the time being	2024-10-25 11:59:17 +02:00
Alfredo Cardigliano	d25e23a599	Remove SRC_NETWORK_ID DST_NETWORK_ID type change from init (to be moved to the startup script)	2024-10-25 11:55:17 +02:00
Alfredo Cardigliano	5fd9b1c1f6	Change SRC_NETWORK_ID DST_NETWORK_ID from UInt16 to UInt32	2024-10-25 11:05:41 +02:00
Alfredo Cardigliano	d9057e8236	Add WLAN_SSID WTP_MAC_ADDRESS to hourly_flows	2024-09-19 12:39:22 +02:00
Alfredo Cardigliano	7b291f5fca	Dump WLAN_SSID and WTP_MAC_ADDRESS in historical flows	2024-09-16 18:31:42 +02:00
GabrieleDeri	12c0d7fa32	Fixed score filter alerts page, updated dist, removed logging (#8648) ... * Fixed score filter alerts page, updated dist, removed logging * Reverted to correct version	2024-08-21 09:25:01 +02:00
GabrieleDeri	438cf9861d	Update db_schema_clickhouse_cluster.sql	2024-08-19 18:13:47 +02:00
DGabri	869fcbf626	Added useful columns in table, removed unnecessary columns	2024-08-19 18:11:40 +02:00
Alfredo Cardigliano	5768dd88d6	Add mitre table and flow/host alerts views on clickhouse cluster	2024-08-19 09:00:41 +02:00
Matteo Biscosi	7e4ff509de	Fixes missing columns to CH cluster	2024-06-24 15:33:56 +02:00
Nicolò Maio	2d150103b7	Add TCP flow connection state (#8210) ... * Add TCP flow connection state (#8140) * Add Major and Minor connection states (#8140) * Remove ZMQ connection state parsing. (#8140) * Update doc with major and minor conn states. (#8140)	2024-02-28 14:45:49 +01:00
Nicolo Maio	c17db2e3b3	Add INTERFACE_ID in hourly_flows table. (#8197)	2024-02-01 12:38:06 +01:00
Alfredo Cardigliano	1a7bfc96d0	Fix end of statement in cluster schema	2024-01-17 09:34:54 +01:00
Alfredo Cardigliano	41a972db7f	Fix MergeTree in cluster schema	2024-01-17 09:30:11 +01:00
Nicolo Maio	58709eab5c	Fix the creation of the all_alerts_view in the ClickHouse cluster SQL script.	2024-01-03 12:13:28 +01:00
Nicolo Maio	58badd86a2	Fix the partition parameter in the ClickHouse cluster SQL database schema.	2024-01-03 10:35:28 +01:00
Luca Deri	bb61ac57ad	SQL fixes	2023-11-27 10:56:15 +01:00
Nicolo Maio	7dc3ec89ec	[VS] Rename INFO and REPORT_INFO columns into JSON_INFO and REPORT_JSON_INFO.	2023-11-20 17:55:02 +01:00
Nicolo Maio	34f7a42308	[VS] Add historical reports. (#8015) (#7950)	2023-11-20 17:06:23 +01:00
Alfredo Cardigliano	98504cc1b4	Add SRC_LABEL/DST_LABEL to hourly flows	2023-08-23 10:12:27 +02:00
Alfredo Cardigliano	246e5a5142	Add alert_category column	2023-06-20 17:25:54 +02:00
Luca Deri	2d90099c1e	Modified SNMP alerts table	2023-06-07 16:13:56 +02:00
Luca Deri	4c66ddebbf	Reworked clickhouse aggregated flows table	2023-06-05 12:21:05 +02:00
Luca Deri	2b5027e136	Updated table name	2023-05-19 16:37:13 +02:00
Luca Deri	dba12047e3	Added creation of clickhouse aggregated flows table	2023-05-19 16:17:09 +02:00
Luca Deri	a7aa8bcbc0	Updated schema with parametric cluster name	2023-01-19 08:50:22 +01:00
Luca Deri	a1b9c31e6d	Updated tables defnition for cluster	2023-01-17 13:31:34 +01:00