2016-08-22 17:12:24 +00:00
< md-content ng-if = "submenuNavItem == 'overview'" ng-show = "_agent" class = "md-padding" >
< div ng-controller = "agentsController" >
2016-08-23 14:27:42 +00:00
2016-08-31 13:40:04 +00:00
< md-content layout = "row" layout-align = "end start" >
2016-08-23 14:27:42 +00:00
< md-content layout = "row" layout-align = "end start" >
2016-08-30 12:44:19 +00:00
< md-button class = "md-primary" md-colors = "::{background: 'primary-100', color: 'background-900'}" ng-href = "{{getDiscoverByAgent(_agent)}}"
target="_blank">< i class = "fa fa-external-link" aria-hidden = "true" > < / i > Discover alerts< / md-button >
< div class = "statusBox" md-colors = "::{background: 'primary-100'}" ng-class = "_agent.status == 'Active' ? null : (_agent.status == 'Never connected' ? 'extraLarge' : 'large')"
layout="row" layout-align="space-between center">< span > {{_agent.status}}< / span > < span ng-class = "getAgentStatusClass(_agent.status)" class = "round status" > < / span > < / div >
2016-08-23 14:27:42 +00:00
< / md-content >
2016-08-22 17:12:24 +00:00
< / md-content >
< md-card >
< md-card-title >
< md-card-title-text >
2016-08-23 14:27:42 +00:00
< span class = "md-headline" > Agent alerts< / span >
2016-08-22 17:12:24 +00:00
< / md-card-title-text >
< / md-card-title >
< md-card-content >
< kbn-vis vis-height = "200px;" vis-type = "histogram" vis-index-pattern = "ossec-*" vis-a = "(filters:!(),linked:!f,query:(query_string:(analyze_wildcard:!t,query:'*')),uiState:(vis:(legendOpen:!f)),vis:(aggs:!((enabled:!t,id:'1',params:(),schema:metric,type:count),(enabled:!t,id:'2',params:(customInterval:'1h',customLabel:'Agent alerts last 7 days',extended_bounds:(),field:'@timestamp',interval:h,min_doc_count:1),schema:segment,type:date_histogram)),listeners:(),params:(addLegend:!t,addTimeMarker:!f,addTooltip:!t,defaultYExtents:!f,mode:stacked,scale:linear,setYExtents:!f,shareYAxis:!t,times:!(),yAxis:()),title:'Agentbalerts last 7 days',type:histogram))"
vis-g="(refreshInterval:(display:Off,pause:!f,value:0),time:(from:now-7d,mode:quick,to:now))" vis-filter="{{_agent.name ? 'AgentName:'+_agent.name : '*'}}">
< / kbn-vis >
< / md-card-content >
< / md-card >
< md-content layout = "row" >
< md-card flex = "40" >
< md-card-content >
< div layout = "column" flex >
< p > < b style = "margin-right: 5px;" > Hostname:< / b > {{_agent.name ? _agent.name : '-'}}< / p >
< p > < b style = "margin-right: 5px;" > IP address:< / b > {{_agent.ip ? _agent.ip : '-'}}< / p >
< p > < b style = "margin-right: 5px;" > Agent version:< / b > {{agentInfo.version ? agentInfo.version : '-'}}< / p >
< p > < b style = "margin-right: 5px;" > Operating system:< / b > {{agentInfo.os ? agentInfo.os : '-'}}< / p >
2016-08-23 14:27:42 +00:00
< p > < b style = "margin-right: 5px;" > Last file integrity scan:< / b > {{agentInfo.syscheckEndTime ? agentInfo.syscheckEndTime
: '-' }}< / p >
< p > < b style = "margin-right: 5px;" > Last rootcheck scan:< / b > {{agentInfo.rootcheckEndTime ? agentInfo.rootcheckEndTime :
'-'}}
< / p >
2016-08-22 17:12:24 +00:00
< p ng-show = "_agent.id != '000'" > < b style = "margin-right: 5px;" > Last keep alive:< / b > {{agentInfo.lastKeepAlive ? agentInfo.lastKeepAlive : '-'}}< / p >
< p ng-show = "_agent.id != '000'" ng-click = "showKey = !showKey" > < b style = "margin-right: 5px;" > Agent key < i ng-show = "!showKey" class = "fa fa-caret-down" aria-hidden = "true" > < / i > < i ng-show = "showKey" class = "fa fa-caret-up" aria-hidden = "true" > < / i > < / b > < / p >
2016-08-24 14:13:53 +00:00
< pre ng-if = "showKey && _agent.id != '000'" flex = "80" > {{agentInfo.key}}< / pre >
2016-08-22 17:12:24 +00:00
< / div >
< / md-card-content >
< / md-card >
2016-08-23 14:27:42 +00:00
< md-card flex = "60" >
2016-08-22 17:12:24 +00:00
< md-card-title >
< md-card-title-text >
2016-08-30 12:44:19 +00:00
< span class = "md-headline" > Alert level evolution< / span >
2016-08-22 17:12:24 +00:00
< / md-card-title-text >
< / md-card-title >
< md-card-content >
2016-08-30 12:44:19 +00:00
< kbn-vis vis-height = "200px;" vis-type = "line" vis-index-pattern = "ossec-*" vis-a = "(filters:!(),linked:!f,query:(query_string:(analyze_wildcard:!t,query:'*')),uiState:(vis:(legendOpen:!f)),vis:(aggs:!((enabled:!t,id:'1',params:(),schema:metric,type:count),(enabled:!t,id:'2',params:(customInterval:'1h',extended_bounds:(),field:'@timestamp',interval:h,min_doc_count:1),schema:segment,type:date_histogram),(enabled:!t,id:'3',params:(field:rule.AlertLevel,order:desc,orderBy:'1',size:10),schema:group,type:terms)),listeners:(),params:(addLegend:!t,addTimeMarker:!f,addTooltip:!t,defaultYExtents:!f,drawLinesBetweenPoints:!t,interpolate:linear,radiusRatio:9,scale:linear,setYExtents:!f,shareYAxis:!t,showCircles:!t,smoothLines:!f,times:!(),yAxis:()),title:'Alert level evolution',type:line))"
2016-08-22 17:12:24 +00:00
vis-g="(refreshInterval:(display:Off,pause:!f,value:0),time:(from:now-7d,mode:quick,to:now))" vis-filter="{{_agent.name ? 'AgentName:'+_agent.name : '*'}}">
< / kbn-vis >
< / md-card-content >
< / md-card >
< / md-content >
< md-content layout = "row" >
2016-08-23 14:27:42 +00:00
< md-card flex = "33" >
2016-08-22 17:12:24 +00:00
< md-card-title >
< md-card-title-text >
2016-08-23 14:27:42 +00:00
< span class = "md-headline" > Top 10 alerts by type< / span >
2016-08-22 17:12:24 +00:00
< / md-card-title-text >
< / md-card-title >
< md-card-content >
2016-08-30 18:18:15 +00:00
< kbn-vis vis-height = "200px;" vis-type = "pie" vis-index-pattern = "ossec-*" vis-a = "(filters:!(),linked:!f,query:(query_string:(analyze_wildcard:!t,query:'*')),uiState:(),vis:(aggs:!((enabled:!t,id:'1',params:(),schema:metric,type:count),(enabled:!t,id:'2',params:(field:rule.description,order:desc,orderBy:'1',size:10),schema:segment,type:terms)),listeners:(),params:(addLegend:!t,addTooltip:!t,isDonut:!f,shareYAxis:!t),title:'Top 10 alerts by type',type:pie))"
2016-08-22 17:12:24 +00:00
vis-g="(refreshInterval:(display:Off,pause:!f,value:0),time:(from:now-7d,mode:quick,to:now))" vis-filter="{{_agent.name ? 'AgentName:'+_agent.name : '*'}}">
< / kbn-vis >
< / md-card-content >
< / md-card >
2016-08-23 14:27:42 +00:00
< md-card flex = "33" >
2016-08-22 17:12:24 +00:00
< md-card-title >
< md-card-title-text >
2016-08-23 14:27:42 +00:00
< span class = "md-headline" > Top 10 file changes< / span >
2016-08-22 17:12:24 +00:00
< / md-card-title-text >
< / md-card-title >
< md-card-content >
2016-08-30 18:18:15 +00:00
< kbn-vis vis-height = "200px;" vis-type = "pie" vis-index-pattern = "ossec-*" vis-a = "(filters:!(),linked:!f,query:(query_string:(analyze_wildcard:!t,query:'*')),uiState:(),vis:(aggs:!((enabled:!t,id:'1',params:(),schema:metric,type:count),(enabled:!t,id:'2',params:(field:SyscheckFile.path,order:desc,orderBy:'1',size:10),schema:segment,type:terms)),listeners:(),params:(addLegend:!t,addTooltip:!t,isDonut:!f,shareYAxis:!t),title:'Top 10 file changes',type:pie))"
2016-08-22 17:12:24 +00:00
vis-g="(refreshInterval:(display:Off,pause:!f,value:0),time:(from:now-7d,mode:quick,to:now))" vis-filter="{{_agent.name ? 'AgentName:'+_agent.name : '*'}}">
< / kbn-vis >
< / md-card-content >
< / md-card >
2016-08-23 14:27:42 +00:00
< md-card flex = "33" >
2016-08-22 17:12:24 +00:00
< md-card-title >
< md-card-title-text >
2016-08-23 14:27:42 +00:00
< span class = "md-headline" > Top 10 source IP< / span >
2016-08-22 17:12:24 +00:00
< / md-card-title-text >
< / md-card-title >
< md-card-content >
2016-08-30 18:18:15 +00:00
< kbn-vis vis-height = "200px;" vis-type = "histogram" vis-index-pattern = "ossec-*" vis-a = "(filters:!(),linked:!f,query:(query_string:(analyze_wildcard:!t,query:'*')),uiState:(),vis:(aggs:!((enabled:!t,id:'1',params:(),schema:metric,type:count),(enabled:!t,id:'2',params:(field:srcip,order:desc,orderBy:'1',size:10),schema:segment,type:terms)),listeners:(),params:(addLegend:!t,addTooltip:!t,isDonut:!f,shareYAxis:!t),title:'Top 10 source IP',type:pie))"
2016-08-22 17:12:24 +00:00
vis-g="(refreshInterval:(display:Off,pause:!f,value:0),time:(from:now-7d,mode:quick,to:now))" vis-filter="{{_agent.name ? 'AgentName:'+_agent.name : '*'}}">
< / kbn-vis >
< / md-card-content >
< / md-card >
< / md-content >
2016-08-23 14:27:42 +00:00
2016-08-22 17:12:24 +00:00
< / div >
< / md-content >