add more fields
This commit is contained in:
@@ -56,6 +56,8 @@ def build_status(
|
||||
"anomaly_summary": anomaly_summary(anomalies),
|
||||
"diagnostics": {
|
||||
"top_source_ips": top_field_values(events, "srcip", limit=10),
|
||||
"top_destination_ports": top_field_values(events, "dstport", limit=10),
|
||||
"top_source_ports": top_field_values(events, "srcport", limit=10),
|
||||
"top_services": top_field_values(events, "service", limit=10),
|
||||
"top_actions": top_field_values(events, "action", limit=10),
|
||||
"top_subtypes": top_field_values(events, "subtype", limit=10),
|
||||
|
||||
Reference in New Issue
Block a user