wazuh-splunk icon indicating copy to clipboard operation
wazuh-splunk copied to clipboard

Improvements to lists editor

Open jesusgn90 opened this issue 5 years ago • 1 comments

Copy and paste from https://github.com/wazuh/wazuh-kibana-app/issues/1438 (@jctello issue)

With the release of Wazuh version 3.9.0 the CDB lists are editable from within the app (Management→Ruleset→lists) it has given this Wazuh feature a much welcome user-friendly interface.

Once the lists are edited and saved it gives the handy option to perform a restart but not the option to compile the lists. In order for a list to be run it is still necessary to run /var/ossec/bin/ossec-makelists on the manager. Adding another button to that effect in the list editor would complete the experience.

Additionally, the interface likes the ability to accept pasting of large lists. It would be nice to be able to toggle between a cell-editing interface as it is now and a plain-text box where the list could be directly pasted.

If only one is going to be kept, the plain-text option would be preferable.

jesusgn90 avatar May 23 '19 11:05 jesusgn90

Update

I've added the capability to switch between a CDB list table or plain text box to copy or edit the content. The binding between the table and the box is bidirectional and the format of the box must be the same that the original file on the server side.

adri9valle avatar May 27 '19 11:05 adri9valle