Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Update dashboards] Update security events dashboard #5838

Closed
2 of 3 tasks
Machi3mfl opened this issue Aug 31, 2023 · 2 comments · Fixed by #5892
Closed
2 of 3 tasks

[Update dashboards] Update security events dashboard #5838

Machi3mfl opened this issue Aug 31, 2023 · 2 comments · Fixed by #5892
Assignees
Labels
level/task Task issue type/enhancement Enhancement issue

Comments

@Machi3mfl
Copy link
Member

Machi3mfl commented Aug 31, 2023

Description

Update the current security events dashboard

Dashboard mock

image

The dashboard mock serves as a design prototype (the information shown is only an example)

Tasks

@Machi3mfl Machi3mfl mentioned this issue Aug 31, 2023
21 tasks
@Machi3mfl Machi3mfl added level/task Task issue type/enhancement Enhancement issue labels Aug 31, 2023
@wazuhci wazuhci moved this to In progress in Release 4.8.0 Sep 1, 2023
@chantal-kelm
Copy link
Member

chantal-kelm commented Sep 5, 2023

I did some research and found that Opensearch currently only offers the option to color static data.
As we want to put colors to dynamic data I have come up with a solution that when implemented does not work on some types of graphs.
We decided not to use the solution as it only works on area charts.

const numberOfDataPoints = 20;
const colors = [
  '#38d1ba',
  '#009ac3',
  '#8335c6',
  '#fc33c9',
  '#d10062',
];
const colorRepetitions = Math.ceil(numberOfDataPoints / colors.length);

export const repeatedColors = [];
for (let i = 0; i < colorRepetitions; i++) {
  repeatedColors.push(...colors);

uiStateJSON: JSON.stringify({
        vis: {
          colors: repeatedColors,
        },
      }),

I am currently investigating why the solution does not work on some chart types.

@chantal-kelm
Copy link
Member

chantal-kelm commented Sep 7, 2023

🟢 It is on the dashboard
🔴 It is not in the dashboard

Title Current plugin dashboard New dashboard
Total marker 🟢 🟢
Level 12 or above alerts marker 🟢 🟢
Authentication failure flag 🟢 🟢
Authentication success flag 🟢 🟢
Alert level evolution 🟢 🔴
Top MITRE ATT&CKS 🟢 🟢 It is the same visualisation that is in the current dashboard but unlike the current dashboard visualisation, this one shows the top 5. Also in the current plugin it is a donut type and in the new dashboard it is a foot type.
Top 5 agents 🟢 🔴
Alerts evolution - Top 5 agents 🟢 🟢
Security Alerts Table 🟢 🟢

Current plugin dashboard

Captura de pantalla 2023-09-07 a la(s) 15 13 57

New dashboard

Captura de pantalla 2023-09-07 a la(s) 15 14 24

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
level/task Task issue type/enhancement Enhancement issue
Projects
No open projects
Archived in project
Development

Successfully merging a pull request may close this issue.

2 participants