mirror of
https://github.com/valitydev/wazuh-kibana-app.git
synced 2024-11-07 18:28:55 +00:00
368 lines
14 KiB
JavaScript
368 lines
14 KiB
JavaScript
/*
|
|
* Wazuh app - Ruleset controllers
|
|
* Copyright (C) 2018 Wazuh, Inc.
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* Find more information about this on the LICENSE file.
|
|
*/
|
|
import * as modules from 'ui/modules'
|
|
import * as FileSaver from '../services/file-saver'
|
|
|
|
const app = modules.get('app/wazuh', []);
|
|
|
|
app.controller('rulesController', function ($timeout, $scope, $rootScope, $sce, Rules, RulesRelated, RulesAutoComplete, errorHandler, genericReq, appState, csvReq) {
|
|
|
|
$scope.setRulesTab = tab => $rootScope.globalsubmenuNavItem2 = tab;
|
|
|
|
//Initialization
|
|
$scope.searchTerm = '';
|
|
$scope.loading = true;
|
|
$scope.viewingDetail = false;
|
|
$scope.rules = Rules;
|
|
$scope.rulesRelated = RulesRelated;
|
|
$scope.rulesAutoComplete = RulesAutoComplete;
|
|
$scope.setRulesTab('rules');
|
|
$scope.isArray = angular.isArray;
|
|
|
|
const colors = [
|
|
'#004A65', '#00665F', '#BF4B45', '#BF9037', '#1D8C2E', 'BB3ABF',
|
|
'#00B1F1', '#00F2E2', '#7F322E', '#7F6025', '#104C19', '7C267F',
|
|
'#0079A5', '#00A69B', '#FF645C', '#FFC04A', '#2ACC43', 'F94DFF',
|
|
'#0082B2', '#00B3A7', '#401917', '#403012', '#2DD947', '3E1340',
|
|
'#00668B', '#008C83', '#E55A53', '#E5AD43', '#25B23B', 'E045E5'
|
|
];
|
|
|
|
$scope.colorRuleArg = ruleArg => {
|
|
ruleArg = ruleArg.toString();
|
|
let valuesArray = ruleArg.match(/\$\(((?!<\/span>).)*?\)(?!<\/span>)/gmi);
|
|
let coloredString = ruleArg;
|
|
|
|
// If valuesArray is empty, means that the description doesn't have any arguments
|
|
// In this case, then simply return the string
|
|
// In other case, then colour the string and return
|
|
if (valuesArray && valuesArray.length) {
|
|
for (let i = 0, len = valuesArray.length; i < len; i++) {
|
|
coloredString = coloredString.replace(/\$\(((?!<\/span>).)*?\)(?!<\/span>)/mi, '<span style="color: ' + colors[i] + ' ">' + valuesArray[i] + '</span>');
|
|
}
|
|
}
|
|
|
|
return $sce.trustAsHtml(coloredString);
|
|
};
|
|
|
|
// Reloading event listener
|
|
$scope.$on('rulesetIsReloaded',() => {
|
|
$scope.viewingDetail = false;
|
|
if(!$scope.$$phase) $scope.$digest();
|
|
});
|
|
|
|
$scope.analyzeRules = async search => {
|
|
|
|
try {
|
|
if(search && search.length <= 1) return $scope.rulesAutoComplete.items;
|
|
await $timeout(200);
|
|
$scope.rulesAutoComplete.filters = [];
|
|
|
|
if(search.startsWith('group:') && search.split('group:')[1].trim()) {
|
|
await $scope.rulesAutoComplete.addFilter('group',search.split('group:')[1].trim());
|
|
} else if(search.startsWith('level:') && search.split('level:')[1].trim()) {
|
|
await $scope.rulesAutoComplete.addFilter('level',search.split('level:')[1].trim());
|
|
} else if(search.startsWith('pci:') && search.split('pci:')[1].trim()) {
|
|
await $scope.rulesAutoComplete.addFilter('pci',search.split('pci:')[1].trim());
|
|
} else if(search.startsWith('gdpr:') && search.split('gdpr:')[1].trim()) {
|
|
await $scope.rulesAutoComplete.addFilter('gdpr',search.split('gdpr:')[1].trim());
|
|
} else if(search.startsWith('file:') && search.split('file:')[1].trim()) {
|
|
await $scope.rulesAutoComplete.addFilter('file',search.split('file:')[1].trim());
|
|
} else {
|
|
await $scope.rulesAutoComplete.addFilter('search',search);
|
|
}
|
|
|
|
if(!$scope.$$phase) $scope.$digest();
|
|
return $scope.rulesAutoComplete.items;
|
|
} catch (error){
|
|
errorHandler.handle(error,'Ruleset');
|
|
}
|
|
return;
|
|
}
|
|
|
|
$scope.checkEnter = search => {
|
|
$scope.searchTerm = '';
|
|
angular.element(document.querySelector('#autocomplete')).blur();
|
|
if(search.startsWith('group:') && search.split('group:')[1].trim()) {
|
|
$scope.rules.addFilter('group',search.split('group:')[1].trim());
|
|
} else if(search.startsWith('level:') && search.split('level:')[1].trim()) {
|
|
$scope.rules.addFilter('level',search.split('level:')[1].trim());
|
|
} else if(search.startsWith('pci:') && search.split('pci:')[1].trim()) {
|
|
$scope.rules.addFilter('pci',search.split('pci:')[1].trim());
|
|
} else if(search.startsWith('gdpr:') && search.split('gdpr:')[1].trim()) {
|
|
$scope.rules.addFilter('gdpr',search.split('gdpr:')[1].trim());
|
|
} else if(search.startsWith('file:') && search.split('file:')[1].trim()) {
|
|
$scope.rules.addFilter('file',search.split('file:')[1].trim());
|
|
} else if(search.startsWith('path:') && search.split('path:')[1].trim()) {
|
|
$scope.rules.addFilter('path',search.split('path:')[1].trim());
|
|
} else {
|
|
$scope.rules.addFilter('search',search.trim());
|
|
}
|
|
};
|
|
|
|
$scope.downloadCsv = async () => {
|
|
try {
|
|
errorHandler.info('Your download should begin automatically...', 'CSV')
|
|
const currentApi = JSON.parse(appState.getCurrentAPI()).id;
|
|
const output = await csvReq.fetch('/rules', currentApi, $scope.rules ? $scope.rules.filters : null);
|
|
const blob = new Blob([output], {type: 'text/csv'});
|
|
|
|
FileSaver.saveAs(blob, 'rules.csv');
|
|
|
|
return;
|
|
|
|
} catch (error) {
|
|
errorHandler.handle(error,'Download CSV');
|
|
}
|
|
return;
|
|
}
|
|
|
|
/**
|
|
* This function takes back to the list but adding a filter from the detail view
|
|
*/
|
|
$scope.addDetailFilter = (name, value) => {
|
|
// Remove all previous filters and then add it
|
|
$scope.rules.removeAllFilters();
|
|
$scope.rules.addFilter(name, value);
|
|
|
|
// Clear the autocomplete component
|
|
$scope.searchTerm = '';
|
|
angular.element(document.querySelector('#autocomplete')).blur();
|
|
|
|
// Go back to the list
|
|
$scope.closeDetailView();
|
|
}
|
|
|
|
/**
|
|
* This function changes to the rule detail view
|
|
*/
|
|
$scope.openDetailView = (rule) => {
|
|
// Clear current rule variable and assign the new one
|
|
$scope.currentRule = false;
|
|
$scope.currentRule = rule;
|
|
|
|
// Create the related rules list, resetting it in first place
|
|
$scope.rulesRelated.reset();
|
|
$scope.rulesRelated.ruleID = $scope.currentRule.id;
|
|
$scope.rulesRelated.addFilter('file', $scope.currentRule.file);
|
|
|
|
// Enable the Detail view
|
|
$scope.viewingDetail = true;
|
|
if(!$scope.$$phase) $scope.$digest();
|
|
}
|
|
|
|
/**
|
|
* This function changes to the rules list view
|
|
*/
|
|
$scope.closeDetailView = () => {
|
|
$scope.viewingDetail = false;
|
|
$scope.currentRule = false;
|
|
$scope.rulesRelated.reset();
|
|
if(!$scope.$$phase) $scope.$digest();
|
|
}
|
|
|
|
const load = async () => {
|
|
try {
|
|
await Promise.all([
|
|
$scope.rules.nextPage(),
|
|
$scope.rulesAutoComplete.nextPage()
|
|
]);
|
|
$scope.loading = false;
|
|
if(!$scope.$$phase) $scope.$digest();
|
|
return;
|
|
} catch (error) {
|
|
errorHandler.handle('Unexpected exception loading controller','Ruleset');
|
|
}
|
|
return;
|
|
}
|
|
|
|
//Load
|
|
load();
|
|
|
|
//Destroy
|
|
$scope.$on('$destroy', () => {
|
|
$scope.rules.reset();
|
|
$scope.rulesRelated.reset();
|
|
$scope.rulesAutoComplete.reset();
|
|
});
|
|
});
|
|
|
|
app.controller('decodersController', function ($timeout, $scope, $rootScope, $sce, Decoders, DecodersRelated, DecodersAutoComplete, errorHandler, genericReq, appState, csvReq) {
|
|
$scope.setRulesTab = tab => $rootScope.globalsubmenuNavItem2 = tab;
|
|
|
|
//Initialization
|
|
$scope.searchTerm = '';
|
|
$scope.loading = true;
|
|
$scope.viewingDetail = false;
|
|
$scope.decoders = Decoders;
|
|
$scope.decodersRelated = DecodersRelated;
|
|
$scope.decodersAutoComplete = DecodersAutoComplete;
|
|
$scope.typeFilter = "all";
|
|
$scope.setRulesTab('decoders');
|
|
$scope.isArray = angular.isArray;
|
|
|
|
const colors = [
|
|
'#004A65', '#00665F', '#BF4B45', '#BF9037', '#1D8C2E', 'BB3ABF',
|
|
'#00B1F1', '#00F2E2', '#7F322E', '#7F6025', '#104C19', '7C267F',
|
|
'#0079A5', '#00A69B', '#FF645C', '#FFC04A', '#2ACC43', 'F94DFF',
|
|
'#0082B2', '#00B3A7', '#401917', '#403012', '#2DD947', '3E1340',
|
|
'#00668B', '#008C83', '#E55A53', '#E5AD43', '#25B23B', 'E045E5'
|
|
];
|
|
|
|
$scope.colorRegex = regex => {
|
|
regex = regex.toString();
|
|
let valuesArray = regex.match(/\(((?!<\/span>).)*?\)(?!<\/span>)/gmi);
|
|
let coloredString = regex;
|
|
for (let i = 0, len = valuesArray.length; i < len; i++) {
|
|
coloredString = coloredString.replace(/\(((?!<\/span>).)*?\)(?!<\/span>)/mi, '<span style="color: ' + colors[i] + ' ">' + valuesArray[i] + '</span>');
|
|
}
|
|
return $sce.trustAsHtml(coloredString);
|
|
};
|
|
|
|
$scope.colorOrder = order => {
|
|
order = order.toString();
|
|
let valuesArray = order.split(',');
|
|
let coloredString = order;
|
|
for (let i = 0, len = valuesArray.length; i < len; i++) {
|
|
coloredString = coloredString.replace(valuesArray[i], '<span style="color: ' + colors[i] + ' ">' + valuesArray[i] + '</span>');
|
|
}
|
|
return $sce.trustAsHtml(coloredString);
|
|
};
|
|
|
|
// Reloading event listener
|
|
$scope.$on('rulesetIsReloaded',() => {
|
|
$scope.viewingDetail = false;
|
|
if(!$scope.$$phase) $scope.$digest();
|
|
});
|
|
|
|
$scope.checkEnter = search => {
|
|
$scope.searchTerm = '';
|
|
angular.element(document.querySelector('#autocomplete')).blur();
|
|
if(search.startsWith('path:') && search.split('path:')[1].trim()) {
|
|
$scope.decoders.addFilter('path',search.split('path:')[1].trim());
|
|
} else if(search.startsWith('file:') && search.split('file:')[1].trim()) {
|
|
$scope.decoders.addFilter('file',search.split('file:')[1].trim());
|
|
} else {
|
|
$scope.decoders.addFilter('search',search.trim());
|
|
}
|
|
};
|
|
|
|
$scope.analyzeDecoders = async search => {
|
|
try {
|
|
if(search && search.length <= 1) return $scope.decodersAutoComplete.items;
|
|
await $timeout(200);
|
|
|
|
$scope.decodersAutoComplete.filters = [];
|
|
|
|
if(search.startsWith('path:') && search.split('path:')[1].trim()) {
|
|
await $scope.decodersAutoComplete.addFilter('path',search.split('path:')[1].trim());
|
|
} else if(search.startsWith('file:') && search.split('file:')[1].trim()) {
|
|
await $scope.decodersAutoComplete.addFilter('file',search.split('file:')[1].trim());
|
|
} else {
|
|
await $scope.decodersAutoComplete.addFilter('search',search);
|
|
}
|
|
|
|
if(!$scope.$$phase) $scope.$digest();
|
|
return $scope.decodersAutoComplete.items;
|
|
} catch (error){
|
|
errorHandler.handle(error,'Ruleset');
|
|
}
|
|
return;
|
|
}
|
|
|
|
$scope.downloadCsv = async () => {
|
|
try {
|
|
const currentApi = JSON.parse(appState.getCurrentAPI()).id;
|
|
const output = await csvReq.fetch('/decoders', currentApi, $scope.decoders ? $scope.decoders.filters : null);
|
|
const blob = new Blob([output], {type: 'text/csv'});
|
|
|
|
FileSaver.saveAs(blob, 'decoders.csv');
|
|
|
|
return;
|
|
|
|
} catch (error) {
|
|
errorHandler.handle(error,'Download CSV');
|
|
}
|
|
return;
|
|
}
|
|
|
|
/**
|
|
* This function takes back to the list but adding a filter from the detail view
|
|
*/
|
|
$scope.addDetailFilter = (name, value) => {
|
|
// Remove all previous filters and then add it
|
|
$scope.decoders.removeAllFilters();
|
|
$scope.decoders.addFilter(name, value);
|
|
|
|
// Clear the autocomplete component
|
|
$scope.searchTerm = '';
|
|
angular.element(document.querySelector('#autocomplete')).blur();
|
|
|
|
// Go back to the list
|
|
$scope.closeDetailView();
|
|
}
|
|
|
|
/**
|
|
* This function changes to the decoder detail view
|
|
*/
|
|
$scope.openDetailView = (decoder) => {
|
|
// Clear current decoder variable and assign the new one
|
|
$scope.currentDecoder = false;
|
|
$scope.currentDecoder = decoder;
|
|
|
|
// Create the related decoders list, resetting it in first place
|
|
$scope.decodersRelated.reset();
|
|
$scope.decodersRelated.path = `/decoders/${$scope.currentDecoder.name}`;
|
|
$scope.decodersRelated.decoderPosition = $scope.currentDecoder.position;
|
|
$scope.decodersRelated.nextPage('');
|
|
|
|
// Enable the Detail view
|
|
$scope.viewingDetail = true;
|
|
if(!$scope.$$phase) $scope.$digest();
|
|
}
|
|
|
|
/**
|
|
* This function changes to the decoders list view
|
|
*/
|
|
$scope.closeDetailView = () => {
|
|
$scope.viewingDetail = false;
|
|
$scope.currentDecoder = false;
|
|
$scope.decodersRelated.reset();
|
|
if(!$scope.$$phase) $scope.$digest();
|
|
}
|
|
|
|
const load = async () => {
|
|
try {
|
|
await Promise.all([
|
|
$scope.decoders.nextPage(),
|
|
$scope.decodersAutoComplete.nextPage()
|
|
]);
|
|
|
|
$scope.loading = false;
|
|
if(!$scope.$$phase) $scope.$digest();
|
|
return;
|
|
} catch (error) {
|
|
errorHandler.handle(error,'Ruleset');
|
|
}
|
|
return;
|
|
}
|
|
|
|
//Load
|
|
load();
|
|
|
|
//Destroy
|
|
$scope.$on("$destroy", () => {
|
|
$scope.decoders.reset();
|
|
$scope.decodersRelated.reset();
|
|
$scope.decodersAutoComplete.reset();
|
|
});
|
|
});
|