Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fixed always disabled property from Active response #6901

Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,10 @@ All notable changes to the Wazuh app project will be documented in this file.

- Support for Wazuh 4.9.1

### Fixed

- Fixed rendering an active response as disabled when is active [#6901](https://github.com/wazuh/wazuh-dashboard-plugins/pull/6901)

## Wazuh v4.9.0 - OpenSearch Dashboards 2.13.0 - Revision 03

### Added
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -26,11 +26,6 @@ import withWzConfig from '../util-hocs/wz-config';
import { webDocumentationLink } from '../../../../../../../common/services/web_documentation';

const mainSettings = [
{
field: 'disabled',
label: 'Status of this active response',
render: renderValueNoThenEnabled,
},
{ field: 'command', label: 'Command to execute' },
{ field: 'location', label: 'Execute the command on this location' },
{ field: 'agent_id', label: 'Agent ID on which execute the command' },
Expand Down Expand Up @@ -93,7 +88,7 @@ class WzConfigurationActiveResponseActiveResponse extends Component {
currentConfig['analysis-active_response']['active-response'].length ? (
<WzConfigurationSettingsHeader
title='Active response definitions'
description='Find here all the currently defined Active responses'
description="Find here all the currently defined active responses. Disabled active responses don't show up."
help={helpLinks}
>
<WzConfigurationSettingsListSelector
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@
*/

import { hasAgentSupportModule } from '../../../../../react-services/wz-agents';
import { WAZUH_MODULES_ID } from '../../../../../../common/constants'
import { WAZUH_MODULES_ID } from '../../../../../../common/constants';

export default [
{
Expand All @@ -22,52 +22,52 @@ export default [
name: 'Global Configuration',
description: 'Global and remote settings',
goto: 'global-configuration',
when: 'manager'
when: 'manager',
},
{
name: 'Cluster',
description: 'Master node configuration',
goto: 'cluster',
when: 'manager'
when: 'manager',
},
{
name: 'Registration Service',
description: 'Automatic agent registration service',
goto: 'registration-service',
when: 'manager'
when: 'manager',
},
{
name: 'Global Configuration',
description: 'Logging settings that apply to the agent',
goto: 'global-configuration-agent',
when: 'agent'
when: 'agent',
},
{
name: 'Communication',
description: 'Settings related to the connection with the manager',
goto: 'client',
when: 'agent'
when: 'agent',
},
{
name: 'Anti-flooding settings',
description: 'Agent bucket parameters to avoid event flooding',
goto: 'client-buffer',
when: 'agent'
when: 'agent',
},
{
name: 'Labels',
description:
'User-defined information about the agent included in alerts',
goto: 'alerts-agent',
when: 'agent'
}
when: 'agent',
},
// ,
// { //TODO: Uncomment this to activate Log Settings
// name: 'Log settings',
// description: 'Alerts, archives and internal settings',
// goto: 'log-settings'
// }
]
],
},
{
title: 'Alerts and output management',
Expand All @@ -77,16 +77,16 @@ export default [
name: 'Alerts',
description: 'Settings related to the alerts and their format',
goto: 'alerts',
when: 'manager'
when: 'manager',
},
{
name: 'Integrations',
description:
'Slack, VirusTotal and PagerDuty integrations with external APIs',
goto: 'integrations',
when: 'manager'
}
]
when: 'manager',
},
],
},
{
title: 'Auditing and policy monitoring',
Expand All @@ -96,22 +96,22 @@ export default [
name: 'Policy monitoring',
description:
'Configuration to ensure compliance with security policies, standards and hardening guides',
goto: 'policy-monitoring'
goto: 'policy-monitoring',
},
{
name: 'OpenSCAP',
description:
'Configuration assessment and automation of compliance monitoring using SCAP checks',
goto: 'open-scap',
when: agent => hasAgentSupportModule(agent, WAZUH_MODULES_ID.OPEN_SCAP)
when: agent => hasAgentSupportModule(agent, WAZUH_MODULES_ID.OPEN_SCAP),
},
{
name: 'CIS-CAT',
description:
'Configuration assessment using CIS scanner and SCAP checks',
goto: 'cis-cat'
}
]
goto: 'cis-cat',
},
],
},
{
title: 'System threats and incident response',
Expand All @@ -122,45 +122,45 @@ export default [
description:
'Discover what applications are affected by well-known vulnerabilities',
goto: 'vulnerabilities',
when: 'manager'
when: 'manager',
},
{
name: 'Osquery',
description:
'Expose an operating system as a high-performance relational database',
goto: 'osquery'
goto: 'osquery',
},
{
name: 'Inventory data',
description:
'Gather relevant information about system operating system, hardware, networking and packages',
goto: 'inventory'
goto: 'inventory',
},
{
name: 'Active Response',
name: 'Active response',
description: 'Active threat addressing by immediate response',
goto: 'active-response',
when: 'manager'
when: 'manager',
},
{
name: 'Active response',
description: 'Active threat addressing by immediate response',
goto: 'active-response-agent',
when: 'agent'
when: 'agent',
},
{
name: 'Commands',
description: 'Configuration options of the Command wodle',
goto: 'commands'
goto: 'commands',
},
{
name: 'Docker listener',
description:
'Monitor and collect the activity from Docker containers such as creation, running, starting, stopping or pausing events',
goto: 'docker-listener',
when: agent => hasAgentSupportModule(agent, WAZUH_MODULES_ID.DOCKER)
}
]
when: agent => hasAgentSupportModule(agent, WAZUH_MODULES_ID.DOCKER),
},
],
},
{
title: 'Log data analysis',
Expand All @@ -170,22 +170,22 @@ export default [
name: 'Log collection',
description:
'Log analysis from text files, Windows events or syslog outputs',
goto: 'log-collection'
goto: 'log-collection',
},
{
name: 'Integrity monitoring',
description:
'Identify changes in content, permissions, ownership, and attributes of files',
goto: 'integrity-monitoring'
goto: 'integrity-monitoring',
},
{
name: 'Agentless',
description:
'Run integrity checks on devices such as routers, firewalls and switches',
goto: 'agentless',
when: 'manager'
}
]
when: 'manager',
},
],
},
{
title: 'Cloud security monitoring',
Expand All @@ -195,32 +195,30 @@ export default [
name: 'Amazon S3',
description:
'Security events related to Amazon AWS services, collected directly via AWS API',
goto: 'aws-s3'
goto: 'aws-s3',
},
{
name: 'Azure Logs',
description: 'Configuration options of the Azure Logs wodle',
goto: 'azure-logs',
when: 'manager'
when: 'manager',
},
{
name: 'Google Cloud Pub/Sub',
description: 'Configuration options of the Google Cloud Pub/Sub module',
goto: 'gcp-pubsub'
goto: 'gcp-pubsub',
},
{
name: 'GitHub',
description:
'Detect threats targeting GitHub organizations',
goto: 'github'
description: 'Detect threats targeting GitHub organizations',
goto: 'github',
},
{
name: 'Office 365',
description:
'Configuration options of the Office 365 module',
description: 'Configuration options of the Office 365 module',
goto: 'office365',
when: 'manager'
}
]
}
when: 'manager',
},
],
},
];
Loading