wazuh-splunk
wazuh-splunk copied to clipboard
Improvements to lists editor
Copy and paste from https://github.com/wazuh/wazuh-kibana-app/issues/1438 (@jctello issue)
With the release of Wazuh version 3.9.0 the CDB lists are editable from within the app (Management→Ruleset→lists) it has given this Wazuh feature a much welcome user-friendly interface.
Once the lists are edited and saved it gives the handy option to perform a restart but not the option to compile the lists. In order for a list to be run it is still necessary to run /var/ossec/bin/ossec-makelists on the manager. Adding another button to that effect in the list editor would complete the experience.
Additionally, the interface likes the ability to accept pasting of large lists. It would be nice to be able to toggle between a cell-editing interface as it is now and a plain-text box where the list could be directly pasted.
If only one is going to be kept, the plain-text option would be preferable.
Update
I've added the capability to switch between a CDB list table or plain text box to copy or edit the content. The binding between the table and the box is bidirectional and the format of the box must be the same that the original file on the server side.