Feature #7678
closed
Added by Jakub Judiny 9 months ago.
Updated about 2 months ago.
Category:
Development - GUI
Estimated time:
(Total: 0.00 h)
Description
Multiple fields from IDEA are not displayed in the event view. It would be great to add at least the most used ones, so users do not have to go to JSON view.
Mainly:
- attachments
- refs
- counts (ConnCount/FlowCount...)
- AggrWin in Nodes
Files
- Status changed from New to In Progress
- Related to Bug #7561: Inconsistent quotation in YAML representation of event added
Added #7561 as related. We might be actually able to get rid of that YAML altogether and close #7561 after we have nicer and more useful Idea view, as YAML was just a crutch for a bit better Idea view than pure JSON.
Just note: cz.cesnet.ftas content type is fixed (from text/csv to text/plain)
- Status changed from In Progress to Resolved
- Related to Feature #7685: Implement hostname context search and additional data loading in event view added
- Target version changed from Backlog to 2.12
- Status changed from Resolved to Feedback
- Status changed from Feedback to Resolved
Rajmund Hruska wrote in #note-7:
In fc7bdcc9, why did you set self.csag = {} in lib/hawat/base.py, when it was already set to an empty dictionary a few lines before that?
Documentation for events blueprint is now (or will be, after merge) outdated - https://713.gitlab-pages.cesnet.cz/mentat/mentat/devel/html/_doclib/hawat_plugin_events.html#section-hawat-plugin-events. But it would be nice to update the documentation in general.
Other than that, LGTM.
self.csag = {} was not intentional, so I removed it. I also added some missing fields from FTAS events. I am planning to update the documentation, but it would be great to deploy this on alt before I update it, so we can test it more.
Also, while working on #7685, I merged branch 'judiny-bugfix-#7683-passivedns-hostname' into 'judiny-feature-#7678-better-event-view', so when you merge this branch into devel, you don't need to merge 'judiny-bugfix-#7683-passivedns-hostname' into devel anymore.
- Status changed from Resolved to In Review
In Czech, the Detectors section is translated as "Detektorů". It's the same in the current production version, but I have only noticed now and it makes sense to fix it in this issue.
- Status changed from In Review to Closed
Also available in: Atom
PDF
