wazuh-splunk
wazuh-splunk copied to clipboard
FIM tab rework
Hi team,
The tab Agent > FIM needs changes, here are some proposals:
- [ ] State interface (now it's "Show files"), should be shown by default.
- [ ] Expand the default number of rows for the files table to 100.
- [ ] Add SHA1 and MD5 hashes to the table.
- [ ] Show a new table with the configuration for that agent (directories, realtime, who-data, report changes, ignores, restricts...)
- [ ] Add a chart for showing the number of files by owner/group/permissions.
- [ ] Add a chart for showing the number of files by monitored directories.
- [ ] If we click on a file, it should show some stats such as the number of alerts for that file or the option to filter alerts by that file.