Argus icon indicating copy to clipboard operation
Argus copied to clipboard

Idea: Filters should be testable against specific incidents

Open lunkwill42 opened this issue 5 years ago • 3 comments

A suggestion from SUNET is to be able to test filters against specific incidents (not just as a preview filter on all incidents), from within the interface where they are built.

Not entirely sure whether this belongs in the frontend or backend, so please move at will.

lunkwill42 avatar Sep 17 '20 13:09 lunkwill42

Something along the lines of selecting one specific incident and building a filter out of that? Sounds like a button on the frontend incident details box that asks the backend to create the best possible filter for that incident and then redirects to the filter view?

hmpf avatar Sep 28 '20 08:09 hmpf

This is now possible by adding tags for limiting to specific incidents. Can this be closed now?

jorgenbele avatar Jan 31 '21 15:01 jorgenbele

Something along the lines of selecting one specific incident and building a filter out of that? Sounds like a button on the frontend incident details box that asks the backend to create the best possible filter for that incident and then redirects to the filter view?

That would be a different feature, I think.

I'm thinking of something that could be activated from the incident details dialog: Perhaps a way to test the current incident against all the filters available to the user, showing which ones match the incident and which do not.

lunkwill42 avatar May 22 '25 08:05 lunkwill42