wazuh-splunk icon indicating copy to clipboard operation
wazuh-splunk copied to clipboard

FIM tab rework

Open jesusgn90 opened this issue 5 years ago • 0 comments

Hi team,

The tab Agent > FIM needs changes, here are some proposals:

  • [ ] State interface (now it's "Show files"), should be shown by default.
  • [ ] Expand the default number of rows for the files table to 100.
  • [ ] Add SHA1 and MD5 hashes to the table.
  • [ ] Show a new table with the configuration for that agent (directories, realtime, who-data, report changes, ignores, restricts...)
  • [ ] Add a chart for showing the number of files by owner/group/permissions.
  • [ ] Add a chart for showing the number of files by monitored directories.
  • [ ] If we click on a file, it should show some stats such as the number of alerts for that file or the option to filter alerts by that file.

jesusgn90 avatar Aug 19 '19 11:08 jesusgn90