225 commits

Author	SHA1	Message	Date
Alfredo Cardigliano	6f9d7cd14f	Major code rework to fully use the clickhouse API in place of Mysql	2025-06-09 15:33:57 +02:00
Alfredo Cardigliano	bb810adeff	Add native clickhouse support for queries	2025-05-16 11:14:18 +02:00
Matteo Biscosi	a251974b21	Fixes misstyping	2025-02-28 11:18:23 +01:00
Matteo Biscosi	fb44f88f34	Fixes missing where and query not working (#8999)	2025-02-28 11:15:41 +01:00
GabrieleDeri	117b6e3f0c	Added documentation for duplicate alerts silencing logic (#8992)	2025-02-25 09:26:46 +01:00
Alfredo Cardigliano	d0d724ac80	Do not add is_engaged field for flow alerts as it is not required	2025-01-03 12:20:34 +01:00
Alfredo Cardigliano	24c3745810	Fix engaged alerts rendering for all families	2024-12-30 12:24:23 +01:00
Alfredo Cardigliano	25ee73bbe3	Fix alerts chart for alerts engaged before the time interval (#8795)	2024-12-30 12:02:54 +01:00
Alfredo Cardigliano	a5c59a2c48	Check max alert engage time to optimize queries (#8795)	2024-12-27 18:45:55 +01:00
Alfredo Cardigliano	e242395dd2	Show engaged time interval in alerts	2024-12-20 12:44:21 +01:00
Alfredo Cardigliano	8c0094f354	Fix flow alerts lookup for non predominant alerts (alerts_map_h/alerts_map_l integer columns)	2024-11-20 11:44:06 +01:00
Alfredo Cardigliano	2aa46f98ac	Implement aggregated page for all alert families	2024-11-12 16:22:06 +01:00
Alfredo Cardigliano	2da5925181	Fix all alerts page. Fix require attention results.	2024-11-11 15:59:58 +01:00
Alfredo Cardigliano	6bde30030d	Check engaged alerts up to 1 day before to avoid full db scan	2024-11-11 10:50:58 +01:00
Alfredo Cardigliano	959f8b25cb	Remove useless condition for engaged alerts on flow alerts	2024-11-11 09:46:49 +01:00
Alfredo Cardigliano	7f8fd301aa	Show engaged alerts also in the Require Attention tab	2024-11-08 17:10:13 +01:00
Alfredo Cardigliano	04d2649911	Add comment on chart function	2024-11-08 17:00:41 +01:00
Alfredo Cardigliano	299057f119	Add ability to filter on alert status (#8795)	2024-11-08 16:16:56 +01:00
Alfredo Cardigliano	42dc80aa06	Fix tstamp condition to handle engaged alerts	2024-11-08 15:35:41 +01:00
Alfredo Cardigliano	ac48c01f57	Fix query count in case of no result	2024-11-08 09:52:48 +01:00
Alfredo Cardigliano	64028e3f8b	Add/remove engaged alerts from the in-memory db (currently working on SQLite)	2024-11-08 09:07:56 +01:00
Alfredo Cardigliano	b235b2412a	Add stub for insert/delete engaged	2024-11-07 12:16:28 +01:00
Alfredo Cardigliano	bc26f3f5eb	Exclude no (empty or zero) mitre from results	2024-08-12 15:19:31 +02:00
Alfredo Cardigliano	939df53237	Add Top Mitre in flow and host alerts. Optimize alert Tops computation. Add Security report.	2024-08-07 11:17:06 +02:00
GabrieleDeri	edf2be3079	Implemented: 8553, 8535, 8551, 8517 (#8555) ... * Implemented: 8553, 8535, 8551, 8517 * Restore with origin	2024-07-23 17:18:24 +02:00
DGabri	85c11aa725	Applied PR suggestion	2024-07-23 11:39:36 +02:00
DGabri	81c696aef7	Cleaned alerts REST for telemetry host, flow	2024-07-23 11:00:23 +02:00
Matteo Biscosi	183c528b01	Removed mitre info from alerts	2024-07-19 12:40:09 +02:00
Matteo Biscosi	ab76ff4ef2	Added mitre_info to alerts in sql and partially in CH	2024-07-05 13:46:33 +02:00
Matteo Biscosi	5dfd5df448	Fixes location filter not working for sqllite (#8470)	2024-06-25 18:31:24 +02:00
Alfredo Cardigliano	e0db423933	Fix retrieval of system alerts	2024-06-03 15:55:13 +02:00
Matteo Biscosi	00cb3604b1	Fixes filters sorting (#8361)	2024-05-02 03:59:51 -04:00
Alfredo Cardigliano	e709a6818e	Limit results to the max set in the backend	2024-04-19 15:51:17 +02:00
Alfredo Cardigliano	d7415c156d	Add option to limit rows	2024-04-19 15:41:27 +02:00
Nicolo Maio	b34a674427	Fix usage of COLLATE option.	2024-04-18 12:19:11 +02:00
Matteo Biscosi	d326926680	Removed cpu and time intensive query	2024-04-12 09:11:12 -04:00
Matteo Biscosi	afe48631e6	Fixes missing filter alert on remote/local host	2024-04-03 09:47:25 -04:00
Alfredo Cardigliano	eb69c20864	Debug tracing	2024-04-02 16:44:30 +02:00
Nicolo Maio	dd7b184691	Add filter for the alert description. (#7660)	2024-03-25 14:46:50 +01:00
Alfredo Cardigliano	2d22a636a7	Honour no-html flag	2024-03-04 09:49:30 +01:00
Alfredo Cardigliano	19a53092f4	Handle format=json in rest/v2/get/xxx/alert/list.lua	2024-02-28 16:14:29 +01:00
Matteo Biscosi	29a28ea203	Fixes circular dependency when filtering	2024-02-20 09:34:21 +00:00
Matteo Biscosi	e243f7c826	Fixes some lua requires	2024-02-20 08:57:48 +00:00
Nicolo Maio	55bbf18aaf	Various fixes on the SNMP engaged alerts page. (#8187)	2024-01-26 16:19:38 +01:00
Nicolo Maio	2193fa286b	Fix IP filter in SNMP engaged alerts explorer. (#8108)	2024-01-25 09:56:24 +01:00
Luca Deri	55870e97b9	(C) Update	2024-01-12 11:44:18 +01:00
Matteo Biscosi	35b7ab5943	Removed duplicated field	2023-11-02 13:20:38 +00:00
Alfredo Cardigliano	4614ea3ea3	Fix comment	2023-10-16 11:46:20 +02:00
Alfredo Cardigliano	c0ec94edc6	Code rework	2023-10-04 15:16:39 +02:00
Alfredo Cardigliano	c6458dbc29	Fix flow alert queries on SQLite (#7869)	2023-10-03 15:24:35 +02:00