TheHive Add case timeline section

Request Type

Feature Request

Problem Description

TheHive stores all the user activities as "Audit Logs". The latest 10 entries of those logs are displayed in the right hand sidebar (the flow) which is updated continuously with new logs.

Currently, TheHive doesn't provide an interface to display/filter/sort all the logs related to a given case. The goal of this feature request is to implement a UI to navigate through the list of the audit logs of a case

Possible Solutions

Add a new tab in the case page (in addition to basic info, tasks, observables, links) called "Timeline", where we list all the audit logs corresponding to the case, with filtering and sorting capabilities.

Jan 11 '17 16:01 nadouani

This is a desired feature for those of us that have to review task logs of a number of cases that others have worked.

Feb 07 '18 04:02 xg5-simon

Hi, I was wondering if any work had been done on this feature? I was interested in working on this request.

Jun 29 '18 23:06 jlouie2

No work has been done yet. Feel free to contribute and send us a PR that we will gladly review. Thanks in advance.

Jun 30 '18 14:06 saadkadhi

I was thinking of putting the timeline as one of the tabs, like details, tasks, and observables of a case. I was thinking it could be similar to the "Tasks" tab, where it has a badge to display the number of logs for a given case.

The default of the logs would be recent to old, so the most recent changes would be at the top of the page and the oldest changes would be at the very end. The user could filter out the logs based on the action performed, so "Deleted by", "Canceled by", "Added by", "Updated by", "Completed by", and "Closed by". I pulled this list from the live stream on the right hand side of TheHive. If you have any suggestions please let me know.