Commit Graph

92 Commits

Author SHA256 Message Date
larssand
fde165d79b fix restart issue 2026-07-06 09:22:13 +02:00
larssand
1ced15e08f Fixed the incident ack/resolve behavior. 2026-07-02 21:20:13 +02:00
larssand
97d017e43c add timeout mcp poll 2026-07-02 21:17:50 +02:00
larssand
f45c275e20 change poll mcp again status 2026-07-02 21:14:43 +02:00
larssand
7d1bdd35c9 fix poll mcp 2026-07-02 21:03:37 +02:00
larssand
825bd0247a mcp status 2026-07-02 20:52:04 +02:00
larssand
0a9a3d3dd2 Fixed both issues 2026-07-02 20:37:39 +02:00
larssand
5e14104f0a Entity labels now resolve like this for IP-based entities: 2026-07-02 20:30:33 +02:00
larssand
48b56852cf fix entriy view UI 2026-07-02 20:26:42 +02:00
larssand
e260e51e67 fix entity dsiplay names instead of ip 2026-07-02 20:18:55 +02:00
larssand
19c3dd7e54 UI-spåret med bättre correlation/evidence. 2026-07-02 19:53:24 +02:00
larssand
7568767946 första UI/operatörs-pass 2026-07-02 19:47:09 +02:00
larssand
009c54b206 fix relation - 2026-07-02 16:16:30 +02:00
larssand
7d0e66c239 add relationship fields 2026-07-02 15:07:15 +02:00
larssand
d48d34f96c keep discoverds fileds in separate sqlite 2026-07-02 12:51:36 +02:00
larssand
8be716b0b9 fix 2026-07-02 11:01:27 +02:00
larssand
a8c00c35b2 add test to see if fail for streams and evetns 2026-07-02 10:51:56 +02:00
larssand
7c0b482a22 improve find fileds for default profiles 2026-07-02 09:51:25 +02:00
larssand
53437a3952 uopdate doc 2026-07-01 09:15:14 +02:00
larssand
a3cfab1f5a fix advisor and drop down refresh 2026-07-01 08:56:08 +02:00
larssand
fcfbe04a58 fix refresh of mcp con 2026-07-01 00:17:54 +02:00
larssand
24561ac984 mcp connect issue cert 2026-06-30 21:37:17 +02:00
larssand
6a63de0e37 add mcp fix 2026-06-30 21:30:30 +02:00
larssand
baa3bb95e8 add find deluta fields in diffrent streams add in profile 2026-06-30 21:27:01 +02:00
larssand
81c0ba34a6 fix recon mcp 2026-06-30 21:20:59 +02:00
larssand
5a9588fe31 Fixed the bad classification issue. 2026-06-30 16:49:11 +02:00
larssand
78f11af302 Added the Profile Discovery report. 2026-06-30 16:15:54 +02:00
larssand
4a441bf443 MCP sample fetch now asks for common Winlogbeat/ECS fields before 2026-06-30 15:10:47 +02:00
larssand
f9137bfa6c fix dash 2026-06-30 12:49:33 +02:00
larssand
c76e260516 mcp issues 2026-06-30 12:47:31 +02:00
larssand
86065eca59 fix mcp 2026-06-30 12:46:09 +02:00
larssand
90076aa95a cache issues 2026-06-30 12:36:11 +02:00
larssand
de4e77d524 fix cache and restart 2026-06-30 12:33:44 +02:00
larssand
f95a861eb6 remove the group in raw 2026-06-30 12:30:50 +02:00
larssand
4f968eeed5 fix group agg 2026-06-30 12:27:16 +02:00
larssand
e144cd8258 add more stats and fix 2026-06-30 12:23:23 +02:00
larssand
4af316c739 improve agregate with status 2026-06-30 12:16:42 +02:00
larssand
1b38aa5704 fix aggregate search 2026-06-30 11:47:47 +02:00
larssand
4d669be66d add agregated search 2026-06-30 11:34:11 +02:00
larssand
2aaa2e28f3 add chache for last known good in sqlite.. 2026-06-30 10:30:59 +02:00
larssand
50463aa4d6 Fixed the MCP error handling for large pulls. 2026-06-30 10:15:06 +02:00
larssand
31ac3c25d2 Improved the overview graphs. and MCP fetching poll 2026-06-30 09:40:20 +02:00
larssand
9c6c08b5ec Added local Ollama model listing in the U 2026-06-30 09:15:03 +02:00
larssand
d7b8c494e9 Added the optional Ollama profile advisor 2026-06-30 09:09:04 +02:00
larssand
f2385a00a9 Profile recommendations 2026-06-30 08:55:15 +02:00
larssand
d99fe24b84 Looks at observed logs per stream.
Finds common denominators:
2026-06-29 21:38:11 +02:00
larssand
d540b8a77d Implemented cleanup/triage direction. ui, and baselinbe days 2026-06-29 20:20:00 +02:00
larssand
d764c5a038 Implemented the baseline/noise and SQLite growth improvements. 2026-06-29 19:58:49 +02:00
larssand
6ea8bfd714 investigation export. 2026-06-29 19:48:29 +02:00
larssand
16b5bbdd63 Graylog query details 2026-06-29 19:26:16 +02:00