Commit Graph

77 Commits

Author SHA256 Message Date
larssand
8be716b0b9 fix 2026-07-02 11:01:27 +02:00
larssand
a8c00c35b2 add test to see if fail for streams and evetns 2026-07-02 10:51:56 +02:00
larssand
7c0b482a22 improve find fileds for default profiles 2026-07-02 09:51:25 +02:00
larssand
53437a3952 uopdate doc 2026-07-01 09:15:14 +02:00
larssand
a3cfab1f5a fix advisor and drop down refresh 2026-07-01 08:56:08 +02:00
larssand
fcfbe04a58 fix refresh of mcp con 2026-07-01 00:17:54 +02:00
larssand
24561ac984 mcp connect issue cert 2026-06-30 21:37:17 +02:00
larssand
6a63de0e37 add mcp fix 2026-06-30 21:30:30 +02:00
larssand
baa3bb95e8 add find deluta fields in diffrent streams add in profile 2026-06-30 21:27:01 +02:00
larssand
81c0ba34a6 fix recon mcp 2026-06-30 21:20:59 +02:00
larssand
5a9588fe31 Fixed the bad classification issue. 2026-06-30 16:49:11 +02:00
larssand
78f11af302 Added the Profile Discovery report. 2026-06-30 16:15:54 +02:00
larssand
4a441bf443 MCP sample fetch now asks for common Winlogbeat/ECS fields before 2026-06-30 15:10:47 +02:00
larssand
f9137bfa6c fix dash 2026-06-30 12:49:33 +02:00
larssand
c76e260516 mcp issues 2026-06-30 12:47:31 +02:00
larssand
86065eca59 fix mcp 2026-06-30 12:46:09 +02:00
larssand
90076aa95a cache issues 2026-06-30 12:36:11 +02:00
larssand
de4e77d524 fix cache and restart 2026-06-30 12:33:44 +02:00
larssand
f95a861eb6 remove the group in raw 2026-06-30 12:30:50 +02:00
larssand
4f968eeed5 fix group agg 2026-06-30 12:27:16 +02:00
larssand
e144cd8258 add more stats and fix 2026-06-30 12:23:23 +02:00
larssand
4af316c739 improve agregate with status 2026-06-30 12:16:42 +02:00
larssand
1b38aa5704 fix aggregate search 2026-06-30 11:47:47 +02:00
larssand
4d669be66d add agregated search 2026-06-30 11:34:11 +02:00
larssand
2aaa2e28f3 add chache for last known good in sqlite.. 2026-06-30 10:30:59 +02:00
larssand
50463aa4d6 Fixed the MCP error handling for large pulls. 2026-06-30 10:15:06 +02:00
larssand
31ac3c25d2 Improved the overview graphs. and MCP fetching poll 2026-06-30 09:40:20 +02:00
larssand
9c6c08b5ec Added local Ollama model listing in the U 2026-06-30 09:15:03 +02:00
larssand
d7b8c494e9 Added the optional Ollama profile advisor 2026-06-30 09:09:04 +02:00
larssand
f2385a00a9 Profile recommendations 2026-06-30 08:55:15 +02:00
larssand
d99fe24b84 Looks at observed logs per stream.
Finds common denominators:
2026-06-29 21:38:11 +02:00
larssand
d540b8a77d Implemented cleanup/triage direction. ui, and baselinbe days 2026-06-29 20:20:00 +02:00
larssand
d764c5a038 Implemented the baseline/noise and SQLite growth improvements. 2026-06-29 19:58:49 +02:00
larssand
6ea8bfd714 investigation export. 2026-06-29 19:48:29 +02:00
larssand
16b5bbdd63 Graylog query details 2026-06-29 19:26:16 +02:00
larssand
4a85e53869 multi-entity stream profiles. 2026-06-29 19:20:08 +02:00
larssand
aab9f15c6d multi-entity stream profiles. 2026-06-29 19:18:11 +02:00
larssand
68370217da Fortsatte roadmapen med multi-entity stream profiles 2026-06-29 19:08:23 +02:00
larssand
20b0e0a92e Ny central normalisering 2026-06-29 18:55:18 +02:00
larssand
0b31e6c55e stream_coverage i status-API. 2026-06-29 18:36:50 +02:00
larssand
0e41e00ebc sequence detection 2026-06-25 22:05:04 +02:00
larssand
9da1aedf52 configurable per-field detector weights är klart. 2026-06-25 19:36:08 +02:00
larssand
899dbdfc84 Fixat orsaken till att Findings/Correlation blinkade bort. 2026-06-25 18:51:04 +02:00
larssand
7e6b510b9e fix 2026-06-25 18:47:27 +02:00
larssand
c6274f840a fix stream name 2026-06-25 18:43:00 +02:00
larssand
b6560d64f7 Implemented the next roadmap step: direct Graylog MCP replay with temporary baselines. 2026-06-25 18:34:51 +02:00
larssand
ea4aaf57ed Continued the Detection Quality roadmap. 2026-06-24 21:32:18 +02:00
larssand
cdef3e1355 Continued the Detection Quality roadmap milestone. 2026-06-24 21:14:07 +02:00
larssand
223b2a013e Implemented the UI improvements. and roadmap 2026-06-24 20:43:40 +02:00
larssand
868022008a Implemented the next multi-source detection layer in this repository. 2026-06-24 19:16:16 +02:00