add more fields

This commit is contained in:
larssand
2026-06-21 14:59:47 +02:00
parent 5e257b7d47
commit 4594d080c3
4 changed files with 100 additions and 0 deletions

View File

@@ -56,6 +56,8 @@ def build_status(
"anomaly_summary": anomaly_summary(anomalies),
"diagnostics": {
"top_source_ips": top_field_values(events, "srcip", limit=10),
"top_destination_ports": top_field_values(events, "dstport", limit=10),
"top_source_ports": top_field_values(events, "srcport", limit=10),
"top_services": top_field_values(events, "service", limit=10),
"top_actions": top_field_values(events, "action", limit=10),
"top_subtypes": top_field_values(events, "subtype", limit=10),