| + | ++ - - - - + | ++ + | ++ + | ++ + | +
|---|---|---|---|---|
|
+
+
+ No items found
+
+
+ |
+ ||||
|
+
+
+
+
+
+ + Network ports + + (0) + ++
+
+
- |
- - - | -- - | -
+
- |
- - - | -
|---|---|---|---|---|
|
-
-
+
-
- No items found
-
+
+
+
+
+
+
+
+
+ |
- ||||
| + + + Local port + + + | ++ + + Local IP address + + + | +
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
-
-
-
-
+ |
+ |
|---|---|---|---|
|
+
+
+ No items found
+
+
+ |
+ |||
| - - - Local port - - - | -- - - Local IP address - - - | -- - | -- - | -
|---|---|---|---|
|
-
-
- No items found
-
-
- |
- |||
| + + | +
+
-
-
-
-
-
-
-
| ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| + | +
+
-
-
-
-
-
-
-
| ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| + | +
+
-
-
-
-
-
-
-
| |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| + | +
+
-
-
-
-
-
-
-
| |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| - - - Local port - - - | -- - - Local IP address - - - | -
-
-
+ |
- Process
-
-
- |
-
-
-
+
+ Local port
+
+
+ |
+
- PID
-
-
- |
-
- |
+
- State
+
+ Process
+
-
-
- |
-
- |
- |
-
-
+
- No items found
-
-
- | | |||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
+
+
- |
- - - | -- - | -
+
- |
- - - | -
|---|---|---|---|---|
|
-
-
- No items found
-
-
- |
- ||||
| + | +
+
-
-
-
-
-
-
-
| ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
-
- |
-
+
+
+
+
+
+
- |
-
+
- |
-
+
+
+
+
+
+
+
+
+
- |
- + + | - | +||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
+
+
+ No items found
+
+
+ |
+ |||||||||||
| + | +
+
-
-
-
-
-
-
-
| ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| - - - Local port - - - | -- - - Local IP address - - - | -- |
|---|
| + | +
+
-
-
-
-
-
-
-
| ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| - - - - + | +
|---|
|
+
+
+ No items found
+
+
+ |
+
| - - | -
|---|
|
-
-
- No items found
-
-
- |
-
| + | +
+
-
-
-
-
-
-
-
| ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| + | +
+
-
-
-
-
-
-
-
| ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Empty field',
- );
- return container;
- },
-};
-
-// Method to enhance a cell of discover table
-export const enhanceDiscoverEventsCell = (
- field,
- content,
- rowData,
- element,
- options,
-) => {
- if (
- !EventsEnhanceDiscoverCell[field] ||
- !element ||
- element.attributes[CUSTOM_ATTRIBUTE_ENHANCED_DISCOVER_FIELD]
- ) {
- return;
- }
- const elementCellEnhanced = EventsEnhanceDiscoverCell[field](
- content,
- rowData,
- element,
- options,
- );
- if (elementCellEnhanced) {
- elementCellEnhanced.setAttribute(
- CUSTOM_ATTRIBUTE_ENHANCED_DISCOVER_FIELD,
- '',
- ); // Set a custom attribute to indentify that element was enhanced
- element.replaceWith(elementCellEnhanced);
- }
-};
diff --git a/plugins/main/public/components/common/modules/events-selected-fields.js b/plugins/main/public/components/common/modules/events-selected-fields.js
deleted file mode 100644
index ee685c42e7..0000000000
--- a/plugins/main/public/components/common/modules/events-selected-fields.js
+++ /dev/null
@@ -1,169 +0,0 @@
-/*
- * Wazuh app - Simple description for each App tabs
- * Copyright (C) 2015-2022 Wazuh, Inc.
- *
- * This program is free software; you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation; either version 2 of the License, or
- * (at your option) any later version.
- *
- * Find more information about this on the LICENSE file.
- */
-export const EventsSelectedFiles = {
- fim: [
- 'agent.name',
- 'syscheck.path',
- 'syscheck.event',
- 'rule.description',
- 'rule.level',
- 'rule.id'
- ],
- mitre: [
- 'agent.name',
- 'rule.mitre.id',
- 'rule.mitre.tactic',
- 'rule.description',
- 'rule.level',
- 'rule.id'
- ],
- sca: [
- 'data.sca.check.title',
- 'data.sca.check.file',
- 'data.sca.check.result',
- 'data.sca.policy',
- ],
- general: [
- 'agent.name',
- 'rule.description',
- 'rule.level',
- 'rule.id',
- ],
- aws: [
- 'data.aws.source',
- 'rule.description',
- 'rule.level',
- 'rule.id',
- ],
- gcp: [
- 'agent.name',
- 'data.gcp.jsonPayload.vmInstanceName',
- 'data.gcp.resource.labels.location',
- 'data.gcp.resource.labels.project_id',
- 'data.gcp.resource.type',
- 'data.gcp.severity',
- ],
- pm: [
- 'agent.name',
- 'data.title',
- 'rule.description',
- 'rule.level',
- 'rule.id',
- ],
- audit: [
- 'agent.name',
- 'data.audit.command',
- 'data.audit.pid',
- 'rule.description',
- 'rule.level',
- 'rule.id',
- ],
- oscap: [
- 'agent.name',
- 'data.oscap.check.title',
- 'data.oscap.check.description',
- 'data.oscap.check.result',
- 'data.oscap.check.severity',
- ],
- ciscat: [
- 'agent.name',
- 'data.cis.benchmark',
- 'data.cis.group',
- 'data.cis.pass',
- 'data.cis.fail',
- 'data.cis.unknown',
- 'data.cis.result',
- ],
- vuls: [
- 'agent.name',
- 'data.vulnerability.package.name',
- 'data.vulnerability.cve',
- 'data.vulnerability.severity',
- 'data.vulnerability.status'
- ],
- virustotal: [
- 'agent.name',
- 'data.virustotal.source.file',
- 'data.virustotal.permalink',
- 'data.virustotal.malicious',
- 'data.virustotal.positives',
- 'data.virustotal.total',
- ],
- osquery: [
- 'agent.name',
- 'data.osquery.name',
- 'data.osquery.pack',
- 'data.osquery.action',
- 'data.osquery.subquery',
- ],
- docker: [
- 'agent.name',
- 'data.docker.from',
- 'data.docker.Type',
- 'data.docker.Action',
- 'rule.description',
- 'rule.level',
- ],
- pci: [
- 'agent.name',
- 'rule.pci_dss',
- 'rule.description',
- 'rule.level',
- 'rule.id'
- ],
- gdpr: [
- 'agent.name',
- 'rule.gdpr',
- 'rule.description',
- 'rule.level',
- 'rule.id'
- ],
- hipaa: [
- 'agent.name',
- 'rule.hipaa',
- 'rule.description',
- 'rule.level',
- 'rule.id'
- ],
- nist: [
- 'agent.name',
- 'rule.nist_800_53',
- 'rule.description',
- 'rule.level',
- 'rule.id'
- ],
- tsc: [
- 'agent.name',
- 'rule.tsc',
- 'rule.description',
- 'rule.level',
- 'rule.id'
- ],
- office: [
- 'data.office365.Subscription',
- 'data.office365.Operation',
- 'data.office365.UserId',
- 'data.office365.ClientIP',
- 'rule.level',
- 'rule.id'
- ],
- github: [
- 'agent.id',
- 'data.github.repo',
- 'data.github.actor',
- 'data.github.org',
- 'rule.description',
- 'rule.level',
- 'rule.id'
- ],
-
-};
diff --git a/plugins/main/public/components/common/modules/events.tsx b/plugins/main/public/components/common/modules/events.tsx
deleted file mode 100644
index 0005eeb9d6..0000000000
--- a/plugins/main/public/components/common/modules/events.tsx
+++ /dev/null
@@ -1,354 +0,0 @@
-/*
- * Wazuh app - Integrity monitoring components
- * Copyright (C) 2015-2022 Wazuh, Inc.
- *
- * This program is free software; you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation; either version 2 of the License, or
- * (at your option) any later version.
- *
- * Find more information about this on the LICENSE file.
- */
-
-import React, { Component, Fragment } from 'react';
-import { getAngularModule, getToasts } from '../../../kibana-services';
-import { EventsSelectedFiles } from './events-selected-fields';
-import { ModulesHelper } from './modules-helper';
-import store from '../../../redux/store';
-import {
- EuiButton,
- EuiFlexGroup,
- EuiFlexItem,
- EuiOverlayMask,
- EuiOutsideClickDetector,
-} from '@elastic/eui';
-import { PatternHandler } from '../../../react-services/pattern-handler';
-import { enhanceDiscoverEventsCell } from './events-enhance-discover-fields';
-import { toMountPoint } from '../../../../../../src/plugins/opensearch_dashboards_react/public';
-import { withAgentSupportModule, withModuleTabLoader } from '../hocs';
-import { compose } from 'redux';
-import { UI_LOGGER_LEVELS } from '../../../../common/constants';
-import { UI_ERROR_SEVERITIES } from '../../../react-services/error-orchestrator/types';
-import { getErrorOrchestrator } from '../../../react-services/common-services';
-
-export const Events = compose(
- withAgentSupportModule,
- withModuleTabLoader
-)(
- class Events extends Component {
- intervalCheckExistsDiscoverTableTime: number = 200;
- isMount: boolean;
- hasRefreshedKnownFields: boolean;
- isRefreshing: boolean;
- state: {
- flyout: false | { component: any; props: any };
- discoverRowsData: any[];
- };
- constructor(props) {
- super(props);
- this.isMount = true;
- this.hasRefreshedKnownFields = false;
- this.isRefreshing = false;
- this.state = {
- flyout: false,
- discoverRowsData: [],
- };
- }
-
- async componentDidMount() {
- document.body.scrollTop = 0; // For Safari
- document.documentElement.scrollTop = 0; // For Chrome, Firefox, IE and Opera
- const app = getAngularModule();
- this.$rootScope = app.$injector.get('$rootScope');
- this.$rootScope.showModuleEvents = this.props.section;
- const scope = await ModulesHelper.getDiscoverScope();
- if (this.isMount) {
- this.$rootScope.moduleDiscoverReady = true;
- this.$rootScope.$applyAsync();
- const fields = [...EventsSelectedFiles[this.props.section]];
- const index = fields.indexOf('agent.name');
- if (index > -1 && store.getState().appStateReducers.currentAgentData.id) {
- //if an agent is pinned we don't show the agent.name column
- fields.splice(index, 1);
- }
- if (fields) {
- scope.state.columns = fields;
- scope.addColumn(false);
- scope.removeColumn(false);
- }
- this.fetchWatch = scope.$watchCollection('fetchStatus', (fetchStatus) => {
- if (scope.fetchStatus === 'complete') {
- setTimeout(() => {
- ModulesHelper.cleanAvailableFields();
- }, 1000);
- // Check the discover table is in the DOM and enhance the initial table cells
- this.intervalCheckExistsDiscoverTable = setInterval(() => {
- const discoverTableTBody = document.querySelector('.kbn-table tbody');
- if (discoverTableTBody) {
- const options = { setFlyout: this.setFlyout, closeFlyout: this.closeFlyout };
- this.enhanceDiscoverTableCurrentRows(this.state.discoverRowsData, options, true);
- this.enhanceDiscoverTableAddObservers(options);
- clearInterval(this.intervalCheckExistsDiscoverTable);
- }
- }, this.intervalCheckExistsDiscoverTableTime);
- }
- this.setState({ discoverRowsData: scope.rows });
- });
- }
- }
-
- componentWillUnmount() {
- this.isMount = false;
- if (this.fetchWatch) this.fetchWatch();
- this.$rootScope.showModuleEvents = false;
- this.$rootScope.moduleDiscoverReady = false;
- this.$rootScope.$applyAsync();
- this.discoverTableRowsObserver && this.discoverTableRowsObserver.disconnect();
- this.discoverTableColumnsObserver && this.discoverTableColumnsObserver.disconnect();
- this.intervalCheckExistsDiscoverTableTime &&
- clearInterval(this.intervalCheckExistsDiscoverTable);
- }
-
- enhanceDiscoverTableAddObservers = (options) => {
- // Scrolling table observer, when load more events
- this.discoverTableRowsObserver = new MutationObserver((mutationsList) => {
- mutationsList.forEach((mutation) => {
- if (mutation.type === 'childList' && mutation.addedNodes && mutation.addedNodes[0]) {
- this.enhanceDiscoverTableScrolling(
- mutation.addedNodes[0],
- this.state.discoverRowsData,
- options
- );
- }
- });
- });
- const discoverTableTBody = document.querySelector('.kbn-table tbody');
- this.discoverTableRowsObserver.observe(discoverTableTBody, { childList: true });
-
- // Add observer when add or remove table header column
- this.discoverTableColumnsObserver = new MutationObserver((mutationsList) => {
- mutationsList.forEach((mutation) => {
- if (mutation.type === 'childList') {
- this.enhanceDiscoverTableCurrentRows(this.state.discoverRowsData, options);
- }
- });
- });
- const discoverTableElement = document.querySelector('.kbn-table').parentElement.parentElement
- .parentElement;
- this.discoverTableColumnsObserver.observe(discoverTableElement, { childList: true });
- };
-
- enhanceDiscoverTableCurrentRows = (discoverRowsData, options, addObserverDetails = false) => {
- // Get table headers
- const discoverTableHeaders = document.querySelectorAll(`.kbn-table thead th`);
- // Get table rows
- const discoverTableRows = document.querySelectorAll(`.kbn-table tbody tr.kbnDocTable__row`);
-
- discoverTableRows.forEach((row, rowIndex) => {
- // Enhance each cell of table rows
- discoverTableHeaders.forEach((header, headerIndex) => {
- const cell = row.querySelector(`td:nth-child(${headerIndex + 1}) div`);
- if (cell) {
- enhanceDiscoverEventsCell(
- header.textContent,
- cell.textContent,
- discoverRowsData[rowIndex],
- cell,
- options
- );
- }
- });
- // Add observer to row details
- if (addObserverDetails) {
- const rowDetails = row.nextElementSibling;
- this.enhanceDiscoverTableRowDetailsAddObserver(rowDetails, discoverRowsData, options);
- }
- });
- };
-
- checkDiscoverTableDetailsMutation(element, mutation, discoverRowsData, options) {
- const rowTable = element.previousElementSibling;
- const discoverTableRows = document.querySelectorAll(`.kbn-table tbody tr.kbnDocTable__row`);
- const rowIndex = Array.from(discoverTableRows).indexOf(rowTable);
- const rowDetailsFields = mutation.addedNodes[0].querySelectorAll('.kbnDocViewer__field');
- let hasUnknownFields = false;
- if (rowDetailsFields) {
- rowDetailsFields.forEach(async (rowDetailField, i) => {
- //check for unknown fields until 1 unknown field is found
- if (!hasUnknownFields && this.checkUnknownFields(rowDetailField))
- hasUnknownFields = true;
- const fieldName = rowDetailField.childNodes[0].childNodes[1].textContent || '';
- const fieldCell =
- rowDetailField.parentNode.childNodes &&
- rowDetailField.parentNode.childNodes[2].childNodes[0];
- if (!fieldCell) {
- return;
- }
- enhanceDiscoverEventsCell(
- fieldName,
- (fieldCell || {}).textContent || '',
- discoverRowsData[rowIndex],
- fieldCell,
- options
- );
- });
- if (hasUnknownFields) {
- this.refreshKnownFields();
- }
- }
- }
-
- checkUnknownFields(rowDetailField) {
- const fieldCell =
- rowDetailField.parentNode.childNodes && rowDetailField.parentNode.childNodes[2];
- return (fieldCell.querySelector('svg[data-test-subj="noMappingWarning"]'))
- }
-
- refreshKnownFields = async () => {
- if (!this.hasRefreshedKnownFields) {
- try {
- this.hasRefreshedKnownFields = true;
- this.isRefreshing = true;
- await PatternHandler.refreshIndexPattern();
- this.isRefreshing = false;
- this.reloadToast();
- } catch (error) {
- this.isRefreshing = false;
- throw error;
- }
- } else if (this.isRefreshing) {
- await new Promise((r) => setTimeout(r, 150));
- await this.refreshKnownFields();
- }
- };
-
- enhanceDiscoverTableRowDetailsAddObserver(element, discoverRowsData, options) {
- // Open for first time the row details
- const observer = new MutationObserver((mutationsList) => {
- mutationsList.forEach((mutation) => {
- if (mutation.type === 'childList' && mutation.addedNodes && mutation.addedNodes[0]) {
- this.checkDiscoverTableDetailsMutation(element, mutation, discoverRowsData, options);
- // Add observer when switch between the tabs of Table and JSON
- new MutationObserver((mutationList) => {
- if (
- mutation.addedNodes[0]
- .querySelector('div[role=tabpanel]')
- .getAttribute('aria-labelledby') === 'kbn_doc_viewer_tab_0'
- ) {
- this.checkDiscoverTableDetailsMutation(
- element,
- mutation,
- discoverRowsData,
- options
- );
- }
- }).observe(mutation.addedNodes[0].querySelector('div[role=tabpanel]'), {
- attributes: true,
- });
- }
- });
- });
- observer.observe(element, { childList: true });
- }
-
- enhanceDiscoverTableScrolling = (mutationElement, discoverRowsData, options) => {
- // Get table headers
- const discoverTableHeaders = document.querySelectorAll(`.kbn-table thead th`);
- // Get table rows
- const discoverTableRows = document.querySelectorAll(`.kbn-table tbody tr.kbnDocTable__row`);
- try {
- const rowIndex = Array.from(discoverTableRows).indexOf(mutationElement);
- if (rowIndex !== -1) {
- // It is a discover table row
- discoverTableHeaders.forEach((header, headerIndex) => {
- const cell = mutationElement.querySelector(`td:nth-child(${headerIndex + 1}) div`);
- if (!cell) {
- return;
- }
- enhanceDiscoverEventsCell(
- header.textContent,
- cell.textContent,
- discoverRowsData[rowIndex],
- cell,
- options
- );
- });
- } else {
- // It is a details table row
- this.enhanceDiscoverTableRowDetailsAddObserver(
- mutationElement,
- discoverRowsData,
- options
- );
- }
- } catch (error) {
- const options = {
- context: `${Events.name}.hideCreateCustomLabel`,
- level: UI_LOGGER_LEVELS.ERROR,
- severity: UI_ERROR_SEVERITIES.BUSINESS,
- error: {
- error: error,
- message: error.message || error,
- title: error.name || error,
- },
- };
- getErrorOrchestrator().handleError(options);
- }
- };
-
- setFlyout = (flyout) => {
- this.setState({ flyout });
- };
-
- closeFlyout = () => {
- this.setState({ flyout: false });
- };
-
- reloadToast = () => {
- const toastLifeTimeMs = 300000;
- getToasts().add({
- color: 'success',
- title: 'The index pattern was refreshed successfully.',
- text: toMountPoint(
- | - |
|---|
| - | -- - | -- - | -
+
- |
- - - | -
+
-
- |
-
+
+
+
+
+
+
+
+
+
+
+
- |
- - | -
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
- Actions
-
-
- |
-
|---|---|---|---|---|---|---|---|---|
|
+
+
+
+
+
-
- No items found
-
+
-
+
+
+
+
+ |
- ||||||||
|
+
+
+
+
+
+
+ |
+ + + | ++ + | ++ + | ++ + | ++ + | ++ + | ++ + | ++ + | ++ + + Actions + + + | +
|---|---|---|---|---|---|---|---|---|---|
|
+
+
+ No items found
+
+
+ |
+ |||||||||
| - | -- - | -
+
- |
- - - | -
+
-
- |
-
+
+
+
+
+
+
+
+
+
+
+
- |
- + + |
|---|---|---|---|---|---|---|
|
+
+
+
+
+
-
- No items found
-
+
-
+
+
+
+
+ |
- ||||||
|
+
+
+
+
+
+
+ |
+ + + | ++ + | ++ + | ++ + | ++ + | ++ + | ++ + + Actions + + + | +
|---|---|---|---|---|---|---|---|
|
+
+
+ No items found
+
+
+ |
+ |||||||
| - | -- - | -
+
- |
-
+
-
- |
-
+
+
+
+
+
+
+
+
+
+
+
- |
- + + | - | -- |
|---|
| + + + ID + + + | +
-
-
-
-
-
-
-
| |||||
|---|---|---|---|---|---|---|
+ Vulnerabilies detection module is not enabled. You can learn to how to
+ configure following the{' '}
+
+ Please check the cluster status. Also, you can check the{' '}
+
{message}
; + + return ( +