1"use strict";(self.webpackChunknetmon=self.webpackChunknetmon||[]).push([[6318],{28089:(e,t,r)=>{r.d(t,{$6:()=>d,Eb:()=>g,Q$:()=>u,TG:()=>o,XY:()=>c,YK:()=>f,em:()=>p,fQ:()=>m,lZ:()=>v,nT:()=>i,sm:()=>n});var s=r(89983),l=r(46666),a=r(70579);const o=e=>{switch(parseInt(e)){case 1:return"Critical";case 2:return"Error";case 3:return"Warning";case 4:return"Info";default:return"Verbose"}},i=e=>{switch(parseInt(e)){case 1:return"fa-circle-exclamation";case 2:return"fa-triangle-exclamation";case 3:return"fa-warning";case 4:return"fa-circle-info";default:return"fa-circle-question"}},n=(e,t)=>{switch(t){case"syslog":return 0===e?1:e>=1&&e<=3?2:4===e?3:e>=5&&e<=6?4:5;case"eve":return 3===e?2:2===e?3:1===e?4:5;case"eventlog":return 1===e?1:2===e?2:3===e?3:4===e?4:5;default:return 5}},c=e=>{switch(parseInt(e)){case 1:case 2:return"var(--danger-color)";case 3:return"var(--warning-color)";case 4:return"var(--info-color)";default:return"var(--muted-color)"}},d=e=>{let{timeRange:t,setTimeRange:r}=e;return(0,a.jsx)("div",{style:{display:"flex",justifyContent:"center",padding:"0.25em",position:"relative"},children:(0,a.jsx)(l.A,{startTime:t.startTime,endTime:t.endTime,setTimeRange:r})})},u=e=>{let{severityCounts:t,severity:r,setSeverity:l}=e;const i=Object.entries(t);return(0,a.jsx)("div",{style:{display:"flex",justifyContent:"center",padding:"0.25em",width:"100%"},children:(0,a.jsx)(s.A,{style:{width:"100%",textAlign:"center",paddingRight:"1.5em"},selectedItem:r,setSelectedItem:l,itemLabels:i.map((e=>{let[t,r]=e;return o(t)})),items:i.map((e=>{let[t,r]=e;return parseInt(t)})),inline:!0})})},p=e=>{let{sources:t,source:r,setSource:l,filterable:o=!1}=e;return(0,a.jsx)("div",{style:{display:"flex",justifyContent:"center",padding:"0.25em",width:"100%"},children:(0,a.jsx)(s.A,{style:{width:"100%",textAlign:"center",paddingRight:"1.5em"},selectedItem:r,setSelectedItem:l,items:t,inline:!0,filterable:o})})},g=e=>{let{eventIDs:t,selectedEventID:r,setSelectedEventID:l}=e;return(0,a.jsx)("div",{style:{display:"flex",justifyContent:"center",padding:"0.25em",width:"100%"},children:(0,a.jsx)(s.A,{style:{width:"100%",textAlign:"center",paddingRight:"1.5em"},selectedItem:r,setSelectedItem:l,items:t,inline:!0})})},m=e=>{let{logTypes:t,setLogTypes:r}=e;const l=Object.entries(t);return(0,a.jsx)("div",{style:{display:"flex",justifyContent:"center",padding:"0.25em",width:"100%"},children:(0,a.jsx)(s.A,{style:{width:"100%",textAlign:"center",paddingRight:"1.5em"},selectedItem:l.filter((e=>{let[t,r]=e;return r})).map((e=>{let[t,r]=e;return t})),setSelectedItem:e=>r((e=>Object.fromEntries(Object.keys(t).map((t=>[t,e.includes(t)]))))(e)),items:l.map((e=>{let[t,r]=e;return t})),inline:!0})})},f=e=>{switch(e){case 0:return"KERNEL";case 1:return"USER";case 2:return"MAIL";case 3:return"DAEMON";case 4:return"AUTH";case 5:return"SYSLOG";case 6:return"LPR";case 7:return"NEWS";case 8:return"UUCP";case 9:case 15:return"CRON";case 10:return"AUTHPRIV";case 11:return"FTP";case 12:return"NTP";case 13:return"LOGAUDIT";case 14:return"LOGALERT";case 16:return"LOCAL0";case 17:return"LOCAL1";case 18:return"LOCAL2";case 19:return"LOCAL3";case 20:return"LOCAL4";case 21:return"LOCAL5";case 22:return"LOCAL6";default:return"LOCAL7"}},v=e=>{let{label:t,value:r,onClick:s=(()=>{}),color:l}=e;return(0,a.jsxs)("div",{onClick:s,className:"log-severity-box widget-interactable-icon",children:[(0,a.jsx)("div",{className:"log-severity-header",style:{background:l},children:(0,a.jsx)("div",{style:{color:"white"},children:t})}),(0,a.jsx)("div",{className:"log-severity-content",children:r})]})}},18488:(e,t,r)=>{function s(e){const t=Number(e);return Number.isInteger(t)?6===t?"tcp":17===t?"udp":1===t?"icmp":null:null}function l(e,t){return null!==t&&void 0!==t&&t.length?t.filter((t=>function(e,t){var r,l,a,o;const i=t||{};if(null!==(r=i.hosts)&&void 0!==r&&r.length&&!i.hosts.includes(e.src_ip)&&!i.hosts.includes(e.dst_ip))return!1;if(null!==(l=i.ports)&&void 0!==l&&l.length&&!i.ports.includes(e.src_port)&&!i.ports.includes(e.dst_port))return!1;if(null!==(a=i.protocols)&&void 0!==a&&a.length){const t=s(e.protocol);if(!t||!i.protocols.map((e=>String(e).toLowerCase())).includes(t))return!1}return!(null!==(o=i.vlans)&&void 0!==o&&o.length&&!i.vlans.includes(e.vlan))}(e,t.filter))):[]}r.d(t,{OL:()=>s,pw:()=>l})},76056:(e,t,r)=>{r.d(t,{$n:()=>o,RV:()=>n,w7:()=>i,z3:()=>a});var s=r(69801),l=r(18488);function a(e){let t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:2;if(0===e)return"0 Bytes";const r=t<0?0:t,s=Math.floor(Math.log(e)/Math.log(1e3));return parseFloat((e/Math.pow(1e3,s)).toFixed(r))+" "+["Bytes","KB","MB","GB","TB","PB","EB","ZB","YB"][s]}const o=e=>(0,s.hj)(e);
1function i(e){const t=[e.src_ip,e.dst_ip].filter(Boolean),r=[...new Set([e.src_port,e.dst_port].filter((e=>null!==e&&void 0!==e&&0!==e)))],s=(0,l.OL)(e.protocol);return{hosts:t,ports:r,protocols:s?[s]:[],label:"VNE ".concat(e.src_ip).concat(e.src_port?":"+e.src_port:""," \u2194 ").concat(e.dst_ip).concat(e.dst_port?":"+e.dst_port:"")}}const n=e=>{let t=0,r=0,s=0,l=0,a=0,o={};const i=new Map;e.neighbors&&e.neighbors.forEach((e=>{e.x&&e.y&&i.set(e.name,{x:e.x,y:e.y,node_type:e.node_type})}));let n={};return e.neighbors.forEach((e=>{if(!(e.name in n)){const t=i.get(e.name);t&&(e.x=t.x,e.y=t.y,e.node_type=t.node_type),n[e.name]=e}})),Object.values(n).forEach((i=>{let n=i.data;n.forEach((e=>{var t;e.startTime=new Date(e.start_time),e.endTime=new Date(e.end_time);const r=e.endTime.getTime()-e.startTime.getTime(),s=Math.max(r/1e3,1);e.bps=null!==(t=e.bps)&&void 0!==t?t:Math.round(8*e.bytes/s)}));let c=n.filter((t=>t.src_ip===e.name&&t.dst_ip===i.name||t.src_ip===i.name&&t.dst_ip===e.name)),d=c.reduce(((e,t)=>e+t.bytes),0);c.forEach((e=>{o[e.src_port]=(o[e.src_port]||0)+e.bytes,o[e.dst_port]=(o[e.dst_port]||0)+e.bytes})),i.reducedLinks=c,i.traffic_total=d,t+=d,r+=c.length,null!==i.dev_id&&void 0!==i.dev_id?l+=1:"external"===i.node_type?s+=1:a+=1})),{totalBytes:t,numConvos:r,numExternalNeighbors:s,numMonitoredNeighbors:l,numUnmonitoredNeighbors:a,topProtocol:Object.entries(o).sort(((e,t)=>t[1]-e[1]))[0]}}},97531:(e,t,r)=>{r.d(t,{H:()=>c});var s=r(65043),l=r(97950),a=r(23569),o=r(70579);const i=s.memo((e=>{let{onClose:t,menuItems:r,data:l,position:i}=e;const n=(0,s.useRef)(null);(0,a.A)(n,(e=>{t&&t()}));return(0,s.useEffect)((()=>{if(!n.current||!i)return;const e=n.current,{x:t,y:r}=i;n.current.classList.add("show");const{offsetWidth:s,offsetHeight:l}=e,a=window.innerWidth-s-8,o=window.innerHeight-l-8,c=Math.max(8,Math.min(t,a)),d=Math.max(8,Math.min(r,o));e.style.left="".concat(c,"px"),e.style.top="".concat(d,"px")}),[i]),(0,o.jsxs)(o.Fragment,{children:[i&&(0,o.jsx)("div",{className:"context-menu-overlay",onMouseDown:e=>{e.preventDefault(),e.stopPropagation(),t&&t()},style:{position:"fixed",top:0,left:0,width:"100%",height:"100%",zIndex:9999}}),(0,o.jsx)("div",{ref:n,className:"context-menu",style:{position:"fixed",zIndex:1e4,display:i?"block":"none"},children:r&&Object.entries(r).map((e=>{let[s,a]=e;if("labels"===s||!Array.isArray(a))return null;const i=a.filter((e=>void 0===e.condition||!0===e.condition));return 0===i.length?null:(0,o.jsxs)("div",{className:"context-menu-section",children:[(0,o.jsx)("div",{className:"context-menu-header",children:(0,o.jsx)("h6",{style:{margin:"0.2em 0"},children:r.labels[s]})}),i.map(((e,r)=>e.line?(0,o.jsx)("div",{className:"context-menu-line"},r):(0,o.jsx)("div",{className:"context-menu-item",style:e.disabled?{opacity:.4,cursor:"not-allowed"}:void 0,onClick:r=>{try{((e,r)=>{r.disabled||(r.action(l),t&&t())})(0,e)}catch(s){console.error("Error executing menu item action:",s)}},children:e.label},r)))]},s)}))})]})}));let n=null;const c=(e,t,r)=>{e.preventDefault();const s={x:e.clientX,y:e.clientY};n&&(l.unmountComponentAtNode(n),n.remove()),n=document.createElement("div"),document.body.appendChild(n),l.render((0,o.jsx)(i,{menuItems:t,data:r,position:s,onClose:()=>{n&&(l.unmountComponentAtNode(n),n.remove(),n=null)}}),n)}},43851:(e,t,r)=>{r.d(t,{u:()=>n});var s=r(65043),l=r(10136),a=r(45543),o=r(28096);const i={src_ip:{description:"Source IP",type:"string",formType:"text",validation:e=>"string"===typeof e&&e.length>0},dst_ip:{description:"Destination IP",type:"string",formType:"text",validation:e=>"string"===typeof e&&e.length>0},dst_port:{description:"Destination Port",type:"integer",formType:"number",validation:e=>Number.isInteger(Number(e))&&Number(e)>=0&&Number(e)<=65535},bytes:{description:"Bytes",type:"integer",formType:"number",validation:e=>Number.isInteger(Number(e))},protocol:{description:"Protocol",type:"integer",formType:"select",options:["ICMP","TCP","UDP"],optionValues:[1,6,17],validation:e=>Number.isInteger(Number(e))&&[1,6,17].includes(Number(e))},vlan:{description:"VLAN",type:"integer",formType:"number",validation:e=>Number.isInteger(Number(e))},in_iface:{description:"In Interface",type:"integer",formType:"number",validation:e=>Number.isInteger(Number(e))},out_iface:{description:"Out Interface",type:"integer",formType:"number",validation:e=>Number.isInteger(Number(e))},flow_src:{description:"Flow Source",type:"string",formType:"text",validation:e=>"string"===typeof e},ip:{description:"Any IP",type:"string",formType:"text",validation:e=>"string"===typeof e&&e.length>0},port:{description:"Any Port",type:"integer",formType:"number",validation:e=>Number.isInteger(Number(e))&&Number(e)>=0&&Number(e)<=65535}},n=e=>{let{startTime:t,endTime:r,filters:n=null,fetch:c=!0,limit:d=1e3}=e;
1const[u,p]=(0,s.useState)({filters:!1,outFilters:!1,eventList:!1}),[g,m]=(0,s.useState)([]),[f,v]=(0,s.useState)({from:0,to:0,total:0,perPage:0}),[y,h]=(0,s.useState)([]),x=(0,s.useCallback)((e=>{var t;return{...e,logtype:"aggnetflow",device:e.src_id?e.src_id:e.src_host?e.src_host:e.src_ip,destination:e.dst_id?e.dst_id:e.dst_host?e.dst_host:e.dst_ip,source:"".concat(e.flow_src,":").concat(e.in_iface).concat(e.vlan?":".concat(e.vlan):""),timestamp:new Date(e.start_time),event:null!==(t=e.prot_name)&&void 0!==t?t:e.dst_port,severity:5,message:"".concat((0,l.gJ)(e.bytes)," over ").concat(e.src_ports.length," conversations")}}),[]),b=async function(){let{abort:e=null}=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};try{p((e=>({...e,outFilters:!0})));const t=await a.Ay.get("/netflow/filters",{signal:e&&e.signal?e.signal:void 0});200===t.status&&m(t.data.filters)}catch(t){if(e&&e.signal.aborted)return;const r=t.response&&t.response.data&&t.response.data.error?t.response.data.error:"Failed to fetch filters";return o.oR.error(r),[]}finally{p((e=>({...e,outFilters:!1})))}},j=async function(){let{abort:e=null,page:s=1}=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};try{p((e=>({...e,eventList:!0})));const l=t&&r?{startTime:t.toISOString(),endTime:r.toISOString()}:{},o=await a.Ay.get("/aggnetflow/list",{params:{page:s,...l,filters:JSON.stringify(n),limit:d},signal:e&&e.signal?e.signal:void 0});if(200===o.status){const e=o.data.data.map((e=>x(e)));h((t=>1===s?e:[...t,...e])),v({from:o.data.from,to:o.data.to,total:o.data.total,perPage:o.data.per_page,currentPage:o.data.current_page,totalPages:o.data.last_page})}}catch(l){if(e&&e.signal.aborted)return;const t=l.response&&l.response.data&&l.response.data.error?l.response.data.error:"Failed to fetch aggregated flow data";o.oR.error(t)}finally{p((e=>({...e,eventList:!1})))}},N=(0,s.useCallback)((async e=>{try{const t=Object.keys(e.filter).filter((e=>Object.keys(i).includes(e))).reduce(((t,r)=>(t[r]=e.filter[r],t)),{}),r={label:e.label,filter:JSON.stringify(t)},s=await a.Ay.post("/netflow/filters",r);201===s.status&&(o.oR.success(s.data.message),b())}catch(t){const e=t.response&&t.response.data&&t.response.data.error?t.response.data.error:"Failed to create filter";o.oR.error(e)}}),[]);return(0,s.useEffect)((()=>{const e=new AbortController;return c&&(j({abort:e}),b({abort:e})),()=>e.abort()}),[t,r,n,c]),{loading:Object.values(u).some(Boolean),eventList:y,listPagination:f,outFilters:g,columns:i,fetchEventList:j,fetchMoreEvents:async()=>j({page:f.currentPage+1}),fetchOutFilters:b,handleOutFilterChange:(e,t,r)=>{const s=g.map((s=>s.id===e?"label"===t?{...s,label:r}:{...s,filter:{...s.filter,[t]:r}}:s));m(s)},saveOutFilter:async e=>{const t=g.find((t=>t.id===e)),r={id:t.id,label:t.label,filter:JSON.stringify(t.filter)};try{200===(await a.Ay.post("/netflow/filters",r)).status&&(o.oR.success("Filter updated successfully"),b())}catch(s){const e=s.response&&s.response.data&&s.response.data.error?s.response.data.error:"Failed to update filter";o.oR.error(e)}},saveNewOutFilter:N,deleteOutFilter:async e=>{try{const t=await a.Ay.delete("/netflow/filters/".concat(e));200===t.status&&(o.oR.success(t.data.message),b())}catch(t){const e=t.response&&t.response.data&&t.response.data.error?t.response.data.error:"Failed to delete filters";o.oR.error(e)}},toggleOutFilter:async e=>{try{const t=await a.Ay.post("/netflow/filters/toggle/".concat(e));201===t.status&&(b(),o.oR.success(t.data.message))}catch(t){const e=t.response&&t.response.data&&t.response.data.message?t.response.data.message:"Failed to toggle filter";o.oR.error(e)}},addOutFilterColumn:(e,t)=>{const r=g.map((r=>r.id===e?{...r,filter:{...r.filter,[t]:""}}:r));m(r)},removeOutFilterColumn:(e,t)=>{const r=g.map((r=>{if(r.id===e){const{[t]:e,...s}=r.filter;return{...r,filter:s}}return r}));m(r)}}}},79761:(e,t,r)=>{r.d(t,{A:()=>n});var s=r(65043),l=r(45543),a=r(28096),o=r(28089);const i={signature_id:{description:"Signature ID",type:"integer",formType:"number",validation:e=>Number.isInteger(Number(e))&&Number(e)>0},severity:{description:"Severity",type:"integer",formType:"select",options:["Low","Med","High"],optionValues:[3,2,1],validation:e=>Number.isInteger(Number(e))&&Number(e)>0&&Number(e)<4},src_ip:{description:"Source IP",type:"inet",formType:"text",validation:e=>/^(\d{1,3}\.){3}\d{1,3}$/.test(e)&&e.split(".").every((e=>parseInt(e,10)<=255))},src_port:{description:"Source Port",type:"integer",formType:"number",validation:e=>Number.isInteger(Number(e))&&Number(e)>0&&Number(e)<65536},dst_ip:{description:"Destination IP",type:"inet",formType:"text",validation:e=>/^(\d{1,3}\.){3}\d{1,3}$/.test(e)&&e.split(".").every((e=>parseInt(e,10)<=255))},dst_port:{description:"Destination Port",type:"integer",formType:"number",validation:e=>Number.isInteger(Number(e))&&Number(e)>0&&Number(e)<65536},proto:{description:"Protocol",type:"string",formType:"text",validation:e=>"string"===typeof e&&e.length>0},iface:{description:"Local Interface",type:"string",formType:"text",validation:e=>"string"===typeof e&&e.length>0},vlan:{description:"VLAN",type:"integer",formType:"number",validation:e=>Number.isInteger(Number(e))&&Number(e)>=0}},n=e=>{let{startTime:t,endTime:r,filters:n=null,fetch:c=!0,limit:d=1e3}=e;
1const[u,p]=(0,s.useState)({event:!1,outFilters:!1,eventList:!1}),[g,m]=(0,s.useState)([]),[f,v]=(0,s.useState)({from:0,to:0,total:0,perPage:0}),[y,h]=(0,s.useState)([]),x=(0,s.useCallback)((e=>({...e,logtype:"eve",event:e.signature_id,raw_severity:e.severity,severity:(0,o.sm)(e.severity,"eve"),device:e.src_id?e.src_id:e.src_host?e.src_host:e.src_ip,destination:e.dst_id?e.dst_id:e.dst_host?e.dst_host:e.dst_ip,source:"IF:".concat(e.iface).concat(e.vlan?":V".concat(e.vlan):""),timestamp:new Date(e.timestamp),message:e.signature,loadEvent:()=>N(e.id)})),[]),b=async function(){let{abort:e=null}=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};try{p((e=>({...e,outFilters:!0})));const t=await l.Ay.get("/eve/filters",{signal:e&&e.signal?e.signal:void 0});200===t.status&&m(t.data.filters)}catch(t){if(e&&e.signal.aborted)return;const r=t.response&&t.response.data&&t.response.data.error?t.response.data.error:"Failed to fetch filters";return a.oR.error(r),[]}finally{p((e=>({...e,outFilters:!1})))}},j=async function(){let{abort:e=null,page:s=1}=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};try{p((e=>({...e,eventList:!0})));const a=await l.Ay.get("/eve/list",{params:{page:s,startTime:t.toISOString(),endTime:r.toISOString(),filters:n,limit:d},signal:e&&e.signal?e.signal:void 0});if(200===a.status){const e=a.data.data.map((e=>x(e)));h((t=>1===s?e:[...t,...e])),v({from:a.data.from,to:a.data.to,total:a.data.total,perPage:a.data.per_page,currentPage:a.data.current_page,totalPages:a.data.last_page})}}catch(o){if(e&&e.signal.aborted)return;const t=o.response&&o.response.data&&o.response.data.error?o.response.data.error:"Failed to fetch list data";a.oR.error(t)}finally{p((e=>({...e,eventList:!1})))}},N=async e=>{if(void 0===e||null===e||"--"===e)throw new Error("This row has no event id");try{const t=await l.Ay.get("/eve/get/".concat(e));if(200===t.status&&t.data&&"object"===typeof t.data)return t.data;throw new Error("Unexpected response from the server")}catch(t){const e=t.response&&t.response.data,r=e&&(e.message||e.error)||t.message||"Failed to fetch event";throw new Error(r)}},_=(0,s.useCallback)((async e=>{try{const t=Object.keys(e.filter).filter((e=>Object.keys(i).includes(e))).reduce(((t,r)=>(t[r]=e.filter[r],t)),{}),r={label:e.label,filter:JSON.stringify(t)};201===(await l.Ay.post("/eve/filters",r)).status&&b()}catch(t){const e=t.response&&t.response.data&&t.response.data.error?t.response.data.error:"Failed to create filter";a.oR.error(e)}}),[]);return(0,s.useEffect)((()=>{const e=new AbortController;return c&&(j({abort:e}),b({abort:e})),()=>e.abort()}),[t,r,n,c]),{columns:i,outFilters:g,eventList:y,fetchEvent:N,fetchOutFilters:b,fetchEventList:j,fetchMoreEvents:async()=>j({page:f.currentPage+1}),listPagination:f,deleteOutFilter:async e=>{try{200===(await l.Ay.delete("/eve/filters/".concat(e))).status&&c&&b()}catch(t){const e=t.response&&t.response.data&&t.response.data.error?t.response.data.error:"Failed to delete filters";a.oR.error(e)}},toggleOutFilter:async e=>{try{201===(await l.Ay.post("/eve/filters/toggle/".concat(e))).status&&c&&b()}catch(t){const e=t.response&&t.response.data&&t.response.data.message?t.response.data.message:"Failed to toggle filter";a.oR.error(e)}},saveOutFilter:async e=>{const t=g.find((t=>t.id===e)),r={id:t.id,label:t.label,filter:JSON.stringify(t.filter)};try{200===(await l.Ay.post("/eve/filters",r)).status&&c&&b()}catch(i){var s,o;const e=(null===(s=i.response)||void 0===s||null===(o=s.data)||void 0===o?void 0:o.error)||"Failed to update filter";a.oR.error(e)}},addOutFilterColumn:(e,t)=>{const r=g.map((r=>r.id===e?(r.filter[t]="",{...r}):r));m(r)},removeOutFilterColumn:(e,t)=>{const r=g.map((r=>{if(r.id===e){const e={...r.filter};return delete e[t],{...r,filter:e}}return r}));m(r)},handleOutFilterChange:(e,t,r)=>{const s=g.map((s=>s.id===e?"label"===t?{...s,label:r}:{...s,filter:{...s.filter,[t]:r}}:s));m(s)},saveNewOutFilter:_,loading:Object.values(u).some(Boolean)}}},69697:(e,t,r)=>{r.d(t,{w:()=>n});var s=r(65043),l=r(45543),a=r(28096),o=r(28089);const i={event_id:{description:"Event ID",type:"integer",formType:"number",validation:e=>Number.isInteger(Number(e))&&Number(e)>0},severity:{description:"Severity",type:"integer",formType:"select",options:["Critical","Error","Warning","Information","Verbose"],optionValues:[1,2,3,4,5],validation:e=>Number.isInteger(Number(e))&&Number(e)>0&&Number(e)<=5},log:{description:"Log",type:"string",formType:"text",validation:e=>"string"===typeof e&&e.length>0},source:{description:"Source",type:"string",formType:"text",validation:e=>"string"===typeof e&&e.length>0},device_id:{description:"Device",type:"integer",formType:"number",validation:e=>Number.isInteger(Number(e))&&Number(e)>0},message:{description:"Message",type:"string",formType:"textarea",validation:e=>"string"===typeof e&&e.length>0}},n=e=>{let{startTime:t,endTime:r,filters:n=null,fetch:c=!0,limit:d=1e3}=e;
1const[u,p]=(0,s.useState)({filters:!1,outFilters:!1,eventList:!1}),[g,m]=(0,s.useState)([]),[f,v]=(0,s.useState)({from:0,to:0,total:0,perPage:0}),[y,h]=(0,s.useState)([]),x=async function(){let{abort:e=null}=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};try{p((e=>({...e,outFilters:!0})));const t=await l.Ay.get("/eventlog/filters",{signal:e&&e.signal?e.signal:void 0});200===t.status&&m(t.data.filters)}catch(s){if(!e||!e.signal.aborted){var t,r;const e=(null===(t=s.response)||void 0===t||null===(r=t.data)||void 0===r?void 0:r.error)||"Failed to fetch filters";a.oR.error(e)}}finally{p((e=>({...e,outFilters:!1})))}},b=(0,s.useCallback)((e=>({...e,event:e.event_id,device:e.device_id,logtype:"eventlog",timestamp:new Date(e.timestamp),raw_severity:e.severity,severity:(0,o.sm)(e.severity,"eventlog")})),[]),j=async function(){let{abort:e=null,page:s=1}=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};try{p((e=>({...e,eventList:!0})));const a=await l.Ay.get("/eventlog/list",{params:{page:s,startTime:t.toISOString(),endTime:r.toISOString(),filters:n,limit:d},signal:e&&e.signal?e.signal:void 0});if(200===a.status){const e=a.data.data.map((e=>b(e)));h((t=>1===s?e:[...t,...e])),v({from:a.data.from,to:a.data.to,total:a.data.total,perPage:a.data.per_page,currentPage:a.data.current_page,totalPages:a.data.last_page})}}catch(c){if(!e||!e.signal.aborted){var o,i;const e=(null===(o=c.response)||void 0===o||null===(i=o.data)||void 0===i?void 0:i.error)||"Failed to fetch list data";a.oR.error(e)}}finally{p((e=>({...e,eventList:!1})))}},N=(0,s.useCallback)((async e=>{try{const t=Object.keys(e.filter).filter((e=>Object.keys(i).includes(e))).reduce(((t,r)=>(t[r]=e.filter[r],t)),{}),r={label:e.label,filter:JSON.stringify(t)};201===(await l.Ay.post("/eventlog/filters",r)).status&&x()}catch(s){var t,r;const e=(null===(t=s.response)||void 0===t||null===(r=t.data)||void 0===r?void 0:r.error)||"Failed to create filter";a.oR.error(e)}}),[]);return(0,s.useEffect)((()=>{const e=new AbortController;return c&&(j({abort:e}),x({abort:e})),()=>e.abort()}),[t,r,n,c]),{columns:i,outFilters:g,eventList:y,fetchOutFilters:x,fetchEventList:j,fetchMoreEvents:async()=>j({page:f.currentPage+1}),listPagination:f,deleteOutFilter:async e=>{try{200===(await l.Ay.delete("/eventlog/filters/".concat(e))).status&&c&&x()}catch(s){var t,r;const e=(null===(t=s.response)||void 0===t||null===(r=t.data)||void 0===r?void 0:r.error)||"Failed to delete filters";a.oR.error(e)}},toggleOutFilter:async e=>{try{201===(await l.Ay.post("/eventlog/filters/toggle/".concat(e))).status&&c&&x()}catch(s){var t,r;const e=(null===(t=s.response)||void 0===t||null===(r=t.data)||void 0===r?void 0:r.message)||"Failed to toggle filter";a.oR.error(e)}},saveOutFilter:async e=>{const t=g.find((t=>t.id===e)),r={id:t.id,label:t.label,filter:JSON.stringify(t.filter),type:"eventlog"};try{200===(await l.Ay.post("/eventlog/filters",r)).status&&c&&x()}catch(i){var s,o;const e=(null===(s=i.response)||void 0===s||null===(o=s.data)||void 0===o?void 0:o.error)||"Failed to update filter";a.oR.error(e)}},addOutFilterColumn:(e,t)=>{const r=g.map((r=>r.id===e?(r.filter[t]="",{...r}):r));m(r)},removeOutFilterColumn:(e,t)=>{const r=g.map((r=>{if(r.id===e){const e={...r.filter};return delete e[t],{...r,filter:e}}return r}));m(r)},handleOutFilterChange:(e,t,r)=>{const s=g.map((s=>s.id===e?"label"===t?{...s,label:r}:{...s,filter:{...s.filter,[t]:r}}:s));m(s)},saveNewOutFilter:N,loading:Object.values(u).some(Boolean)}}},89124:(e,t,r)=>{r.d(t,{b:()=>n});var s=r(65043),l=r(45543),a=r(28096),o=r(28089);const i={device_id:{description:"Device",type:"integer",formType:"number",validation:e=>Number.isInteger(Number(e))&&Number(e)>0},facility:{description:"Facility",type:"integer",formType:"select",options:["KERNEL (0)","USER (1)","MAIL (2)","DAEMON (3)","AUTH (4)","SYSLOG (5)","LPR (6)","NEWS (7)","UUCP (8)","CRON (9)","AUTHPRIV (10)","FTP (11)","NTP (12)","LOGAUDIT (13)","LOGALERT (14)","CRON2 (15)","LOCAL0 (16)","LOCAL1 (17)","LOCAL2 (18)","LOCAL3 (19)","LOCAL4 (20)","LOCAL5 (21)","LOCAL6 (22)","LOCAL7 (23)"],optionValues:Array.from({length:24},((e,t)=>t)),validation:e=>Number.isInteger(Number(e))&&Number(e)>=0&&Number(e)<=23},severity:{description:"Severity",type:"integer",formType:"select",options:["Emergency","Alert","Critical","Error","Warning","Notice","Informational","Debug"],optionValues:[0,1,2,3,4,5,6,7],validation:e=>Number.isInteger(Number(e))&&Number(e)>=0&&Number(e)<=7},source:{description:"Source",type:"string",formType:"text",validation:e=>"string"===typeof e&&e.length>0},message:{description:"Message",type:"string",formType:"text",validation:e=>"string"===typeof e&&e.length>0}},n=e=>{let{startTime:t,endTime:r,filters:n=null,fetch:c=!0,limit:d=1e3}=e;
1const[u,p]=(0,s.useState)({filters:!1,outFilters:!1,eventList:!1}),[g,m]=(0,s.useState)([]),[f,v]=(0,s.useState)({from:0,to:0,total:0,perPage:0}),[y,h]=(0,s.useState)([]),x=(0,s.useCallback)((e=>{return{...e,logtype:"syslog",device:e.device_id,timestamp:new Date(e.timestamp),raw_severity:e.severity,severity:(0,o.sm)(e.severity,"syslog"),log:(0,o.YK)(e.facility),raw_message:e.message,message:(t=e.message,function(e){const t=/^(\w{3}\s+\d{1,2}\s+\d{2}:\d{2}:\d{2})\s+(\S+)\s+([^:\[\s]+)(?:\[(\d+)\])?\s*:\s*(.*)$/;let r=e.match(t);if(r)return r[5].trim();const s=/^(\d+)\s+(\S+)\s+(\S+)\s+(\S+)\s+(\S+)\s+(\S+)(?:\s+\[.*?\])?\s*(.*)$/;if(r=e.match(s),r)return r[7].trim();const l=/^\d{1,2}:\d{2}\s+\S+\s+([^:\[\s]+)(?:\[(\d+)\])?\s*:\s*(.*)$/;if(r=e.match(l),r)return r[3].trim();const a=/^\S+\s+([^:\[\s]+)(?:\[(\d+)\])?\s*:\s*(.*)$/;if(r=e.match(a),r)return r[3].trim();const o=/^([^:\[\s]+)(?:\[(\d+)\])?\s*:\s*(.*)$/;if(r=e.match(o),r)return r[3].trim();const i=/^[^:]+:\s*(.*)$/;return r=e.match(i),r?r[1].trim():e}(t))};var t}),[]),b=async function(){let{abort:e=null}=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};try{p((e=>({...e,outFilters:!0})));const t=await l.Ay.get("/syslog/filters",{signal:e&&e.signal?e.signal:void 0});200===t.status&&m(t.data.filters)}catch(t){if(e&&e.signal.aborted)return;const r=t.response&&t.response.data&&t.response.data.error?t.response.data.error:"Failed to fetch filters";return a.oR.error(r),[]}finally{p((e=>({...e,outFilters:!1})))}},j=async function(){let{abort:e=null,page:s=1}=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};try{p((e=>({...e,eventList:!0})));const a=await l.Ay.get("/syslog/list",{params:{page:s,startTime:t.toISOString(),endTime:r.toISOString(),filters:n,limit:d},signal:e&&e.signal?e.signal:void 0});if(200===a.status){const e=a.data.data.map((e=>x(e)));h((t=>1===s?e:[...t,...e])),v({from:a.data.from,to:a.data.to,total:a.data.total,perPage:a.data.per_page,currentPage:a.data.current_page,totalPages:a.data.last_page})}}catch(o){if(e&&e.signal.aborted)return;const t=o.response&&o.response.data&&o.response.data.error?o.response.data.error:"Failed to fetch list data";a.oR.error(t)}finally{p((e=>({...e,eventList:!1})))}},N=(0,s.useCallback)((async e=>{try{const t=Object.keys(e.filter).filter((e=>Object.keys(i).includes(e))).reduce(((t,r)=>(t[r]=e.filter[r],t)),{}),r={label:e.label,filter:JSON.stringify(t)};201===(await l.Ay.post("/syslog/filters",r)).status&&b()}catch(t){const e=t.response&&t.response.data&&t.response.data.error?t.response.data.error:"Failed to create filter";a.oR.error(e)}}),[]);return(0,s.useEffect)((()=>{const e=new AbortController;return c&&(j({abort:e}),b({abort:e})),()=>e.abort()}),[t,r,n,c]),{columns:i,outFilters:g,eventList:y,fetchOutFilters:b,fetchEventList:j,fetchMoreEvents:async()=>j({page:f.currentPage+1}),listPagination:f,deleteOutFilter:async e=>{try{200===(await l.Ay.delete("/syslog/filters/".concat(e))).status&&c&&b()}catch(t){const e=t.response&&t.response.data&&t.response.data.error?t.response.data.error:"Failed to delete filters";a.oR.error(e)}},toggleOutFilter:async e=>{try{201===(await l.Ay.post("/syslog/filters/toggle/".concat(e))).status&&c&&b()}catch(t){const e=t.response&&t.response.data&&t.response.data.message?t.response.data.message:"Failed to toggle filter";a.oR.error(e)}},saveOutFilter:async e=>{const t=g.find((t=>t.id===e)),r={id:t.id,label:t.label,filter:JSON.stringify(t.filter)};try{200===(await l.Ay.post("/syslog/filters",r)).status&&c&&b()}catch(i){var s,o;const e=(null===(s=i.response)||void 0===s||null===(o=s.data)||void 0===o?void 0:o.error)||"Failed to update filter";a.oR.error(e)}},addOutFilterColumn:(e,t)=>{const r=g.map((r=>r.id===e?(r.filter[t]="",{...r}):r));m(r)},removeOutFilterColumn:(e,t)=>{const r=g.map((r=>{if(r.id===e){const e={...r.filter};return delete e[t],{...r,filter:e}}return r}));m(r)},handleOutFilterChange:(e,t,r)=>{const s=g.map((s=>s.id===e?"label"===t?{...s,label:r}:{...s,filter:{...s.filter,[t]:r}}:s));m(s)},saveNewOutFilter:N,loading:Object.values(u).some(Boolean)}}},6318:(e,t,r)=>{r.d(t,{M:()=>le});var s=r(65043),l=r(97950),a=r(97531),o=r(58743),i=r(39074),n=r(69801),c=r(21254),d=r(28089),u=r(4960),p=r(33949),g=r(57602),m=r(97156),f=r(76056),v=r(70579);const y=e=>{let{whoisData:t,geoIPData:r,isLoading:s,onLookupGeoIP:l}=e;return t||r||s?s?(0,v.jsx)("div",{className:"ip-info-table",children:(0,v.jsxs)("div",{style:{padding:"10px",textAlign:"center"},children:[(0,v.jsx)("i",{className:"fa-solid fa-spinner fa-spin"})," Loading..."]})}):(0,v.jsx)("div",{className:"ip-info-table",style:{border:"1px solid var(--border-color)",borderRadius:"4px",marginTop:"5px",fontSize:"0.9em"},children:(0,v.jsx)("table",{style:{width:"100%",borderCollapse:"collapse"},children:(0,v.jsxs)("tbody",{children:[t&&(0,v.jsxs)(v.Fragment,{children:[(0,v.jsx)("tr",{style:{backgroundColor:"var(--background-secondary)"},children:(0,v.jsx)("th",{colSpan:"2",style:{padding:"5px 10px",textAlign:"left",borderBottom:"1px solid var(--border-color)"},children:"WHOIS Information"})}),t.OrgName&&(0,v.jsxs)("tr",{children:[(0,v.jsx)("td",{style:{padding:"5px 10px",borderBottom:"1px solid var(--border-color)",width:"30%"},children:"Organization"}),(0,v.jsx)("td",{style:{padding:"5px 10px",borderBottom:"1px solid var(--border-color)"},children:t.OrgName})]}),t.NetRange&&(0,v.jsxs)("tr",{children:[(0,v.jsx)("td",{style:{padding:"5px 10px",borderBottom:"1px solid var(--border-color)",width:"30%"},children:"IP Range"}),(0,v.jsx)("td",{style:{padding:"5px 10px",borderBottom:"1px solid var(--border-color)"},children:t.NetRange})]}),(t.City||t.StateProv||t.Country)&&(0,v.jsxs)("tr",{children:[(0,v.jsx)("td",{style:{padding:"5px 10px",borderBottom:"1px solid var(--border-color)"},children:"Location"}),(0,v.jsx)("td",{style:{padding:"5px 10px",borderBottom:"1px solid var(--border-color)"}
1,children:[t.City,t.StateProv,t.Country].filter(Boolean).join(", ")})]}),t.RegDate&&(0,v.jsxs)("tr",{children:[(0,v.jsx)("td",{style:{padding:"5px 10px",borderBottom:"1px solid var(--border-color)"},children:"Registered"}),(0,v.jsx)("td",{style:{padding:"5px 10px",borderBottom:"1px solid var(--border-color)"},children:t.RegDate})]}),t.OrgAbuseEmail&&(0,v.jsxs)("tr",{children:[(0,v.jsx)("td",{style:{padding:"5px 10px",borderBottom:"1px solid var(--border-color)"},children:"Abuse Contact"}),(0,v.jsx)("td",{style:{padding:"5px 10px",borderBottom:"1px solid var(--border-color)"},children:t.OrgAbuseEmail})]})]}),r&&(0,v.jsxs)(v.Fragment,{children:[(0,v.jsx)("tr",{style:{backgroundColor:"var(--background-secondary)"},children:(0,v.jsx)("th",{colSpan:"2",style:{padding:"5px 10px",textAlign:"left",borderBottom:"1px solid var(--border-color)"},children:"GeoIP Information"})}),r.country&&(0,v.jsxs)("tr",{children:[(0,v.jsx)("td",{style:{padding:"5px 10px",borderBottom:"1px solid var(--border-color)",width:"30%"},children:"Country"}),(0,v.jsx)("td",{style:{padding:"5px 10px",borderBottom:"1px solid var(--border-color)"},children:r.countryName||r.country})]}),r.city&&(0,v.jsxs)("tr",{children:[(0,v.jsx)("td",{style:{padding:"5px 10px",borderBottom:"1px solid var(--border-color)"},children:"City"}),(0,v.jsx)("td",{style:{padding:"5px 10px",borderBottom:"1px solid var(--border-color)"},children:r.cityName||r.city})]}),r.regionName&&(0,v.jsxs)("tr",{children:[(0,v.jsx)("td",{style:{padding:"5px 10px",borderBottom:"1px solid var(--border-color)"},children:"Region"}),(0,v.jsx)("td",{style:{padding:"5px 10px",borderBottom:"1px solid var(--border-color)"},children:r.regionName})]}),r.timeZone&&(0,v.jsxs)("tr",{children:[(0,v.jsx)("td",{style:{padding:"5px 10px",borderBottom:"1px solid var(--border-color)"},children:"Time Zone"}),(0,v.jsx)("td",{style:{padding:"5px 10px",borderBottom:"1px solid var(--border-color)"},children:r.timeZone})]}),void 0!==r.isProxy&&(0,v.jsxs)("tr",{children:[(0,v.jsx)("td",{style:{padding:"5px 10px",borderBottom:"1px solid var(--border-color)"},children:"Proxy"}),(0,v.jsx)("td",{style:{padding:"5px 10px",borderBottom:"1px solid var(--border-color)"},children:r.isProxy?"Yes":"No"})]}),r.language&&(0,v.jsxs)("tr",{children:[(0,v.jsx)("td",{style:{padding:"5px 10px",borderBottom:"1px solid var(--border-color)"},children:"Language"}),(0,v.jsx)("td",{style:{padding:"5px 10px",borderBottom:"1px solid var(--border-color)"},children:r.language})]})]})]})})}):(0,v.jsx)("div",{className:"ip-info-table",children:(0,v.jsx)(p.A,{ButtonText:"Lookup IP Data",onClick:l,size:"sm"})})},h=e=>{let{log:t}=e;const{getWhoisData:r,lookupWhoisData:l}=(0,g.a)(),[a,o]=(0,s.useState)({}),[c,u]=(0,s.useState)({}
1),[p,h]=(0,s.useState)({});(0,s.useEffect)((()=>{"aggnetflow"===(null===t||void 0===t?void 0:t.logtype)&&(t.src_ip&&!t.src_id&&(0,f.$n)(t.src_ip)&&l(t.src_ip),t.dst_ip&&!t.dst_id&&(0,f.$n)(t.dst_ip)&&l(t.dst_ip))}),[t,l]);const x=async e=>{if(!c[e]&&(0,f.$n)(e)){h((t=>({...t,[e]:!0})));try{const t=await(0,m.z)(e);t.data&&u((r=>({...r,[e]:t.data})))}catch(t){console.error("Error fetching GeoIP:",t)}finally{h((t=>({...t,[e]:!1})))}}},b=(e,t,r)=>(0,v.jsx)("tr",{children:(0,v.jsxs)("td",{className:"log-modal-table-cell",children:[(0,v.jsxs)("span",{style:{color:"var(--muted-color)",minWidth:"10em",display:"inline-block"},children:[e,":"]}),t]})},r||e),j=function(e,s,l){let d=arguments.length>3&&void 0!==arguments[3]?arguments[3]:"";const u=!l&&(0,f.$n)(s),g=u?r(s):null,m=a[s]||!1,h=(0,n.LR)(t,d);return(0,v.jsxs)(v.Fragment,{children:[(0,v.jsx)("tr",{children:(0,v.jsx)("td",{className:"log-modal-table-cell",children:(0,v.jsxs)("div",{className:"d-flex align-items-center",children:[(0,v.jsxs)("span",{style:{color:"var(--muted-color)",minWidth:"10em",display:"inline-block"},children:[e,":"]}),u?(0,v.jsxs)("div",{style:{display:"flex",alignItems:"center"},onMouseOver:e=>{e.stopPropagation(),e.preventDefault()},children:[(0,v.jsx)(i.A,{device_id:l,ip_address:s,geoip:h,className:"ip-with-caret"}),(0,v.jsx)("i",{className:"fa-solid ".concat(m?"fa-caret-down":"fa-caret-right"),style:{cursor:"pointer",color:"var(--primary-color)",marginLeft:"5px",fontSize:"0.85em"},onClick:e=>{e.preventDefault(),e.stopPropagation(),(e=>{o((t=>{const r={...t,[e]:!t[e]};return r[e]&&!c[e]&&(0,f.$n)(e)&&x(e),r}))})(s)}})]}):(0,v.jsx)(i.A,{device_id:l,ip_address:s,geoip:h})]})})},"".concat(e,"-").concat(s)),u&&m&&(0,v.jsx)("tr",{children:(0,v.jsx)("td",{className:"log-modal-table-cell",style:{paddingLeft:"10em"},children:(0,v.jsx)(y,{whoisData:g,geoIPData:c[s],isLoading:p[s],onLookupGeoIP:()=>x(s)})})})]})};return(0,v.jsx)(v.Fragment,{children:(()=>{switch(t.logtype){case"syslog":return(0,v.jsx)("div",{className:"log-modal-details",children:(0,v.jsx)("table",{className:"log-modal-table",children:(0,v.jsxs)("tbody",{children:[j("Device",t.device_id?null:t.ip_address,t.device_id),b("Severity",(0,d.TG)(t.severity)),b("Facility",t.source),b("Timestamp",new Date(t.timestamp).toLocaleString())]})})});case"eventlog":return(0,v.jsx)("div",{className:"log-modal-details",children:(0,v.jsx)("table",{className:"log-modal-table",children:(0,v.jsxs)("tbody",{children:[j("Device",t.device_id?null:t.ip_address,t.device_id),b("Severity",(0,d.TG)(t.severity)),b("Source",t.source),b("Log",t.log),b("Event ID",t.event),b("Timestamp",new Date(t.timestamp).toLocaleString())]})})});case"eve":return(()=>{var e,r,s,l;const a=null===(e=t.detail)||void 0===e?void 0:e.summary,o=null===(r=t.detail)||void 0===r?void 0:r.endpoints,i=a&&null!=a.signature_id?"".concat(null!==(s=a.gid)&&void 0!==s?s:1,":").concat(a.signature_id,":").concat(null!==(l=a.rev)&&void 0!==l?l:0):null;return(0,v.jsx)("div",{className:"log-modal-details",children:(0,v.jsx)("table",{className:"log-modal-table",children:(0,v.jsxs)("tbody",{children:[b("Severity",(0,d.TG)(t.severity)),(null===a||void 0===a?void 0:a.category)&&b("Category",a.category),(null===a||void 0===a?void 0:a.action)&&b("Action",a.action),i&&b("Rule",i),j("Source",t.src_ip,t.src_id,"src"),b("Source Port",t.src_port),j("Destination",t.dst_ip,t.dst_id,"dst"),b("Destination Port",t.dst_port),b("Interface",t.iface),b("VLAN",0===t.vlan?"0":t.vlan||"None"),b("Protocol",t.proto||"N/A"),(null===a||void 0===a?void 0:a.app_proto)&&b("App Protocol",a.app_proto),(null===o||void 0===o?void 0:o.direction)&&b("Direction",o.direction),(null===a||void 0===a?void 0:a.flow_id)&&b("Flow ID",a.flow_id),(null===a||void 0===a?void 0:a.community_id)&&b("Community ID",a.community_id),b("Timestamp",new Date(t.timestamp).toLocaleString())]})})})})();case"aggnetflow":return(0,v.jsx)("div",{className:"log-modal-details",children:(0,v.jsx)("table",{className:"log-modal-table",children:(0,v.jsxs)("tbody",{children:[j("Source",t.src_ip,t.src_id,"src"),b("Source Ports",t.src_ports?Array.isArray(t.src_ports)?t.src_ports.join(", "):t.src_ports:"N/A"),j("Destination",t.dst_ip,t.dst_id,"dst"),b("Destination Port",t.dst_port||"N/A"),b("Flow Source",t.flow_src||"N/A"),b("Input Interface",t.in_iface||"N/A"),b("Output Interface",t.out_iface||"N/A"),b("VLAN",0===t.vlan?"0":t.vlan||"None"),b("Protocol",6===t.protocol?"TCP":17===t.protocol?"UDP":1===t.protocol?"ICMP":58===t.protocol?"ICMPv6":"N/A"),b("Total Bytes",t.bytes?"".concat(t.bytes," bytes"):"N/A"),b("Start Time",t.start_time?new Date(t.start_time).toLocaleStr
1ing():"N/A"),b("End Time",t.end_time?new Date(t.end_time).toLocaleString():"N/A")]})})});default:return null}})()})},x=s.memo(h),b=e=>{let{title:t,icon:r,count:l,collapsible:a=!1,defaultOpen:o=!0,children:i}=e;const[n,c]=(0,s.useState)(o);return(0,v.jsxs)("fieldset",{className:"log-modal-details log-modal-eve-section",children:[(0,v.jsxs)("legend",{className:"log-modal-legend".concat(a?" log-modal-eve-legend-toggle":""),onClick:a?()=>c((e=>!e)):void 0,children:[a&&(0,v.jsx)("i",{className:"fa-solid ".concat(n?"fa-caret-down":"fa-caret-right")}),r&&(0,v.jsx)("i",{className:"fa-solid ".concat(r)}),t,void 0!==l&&(0,v.jsx)("span",{className:"log-modal-eve-count",children:l})]}),n&&i]})},j=e=>{let{fields:t}=e;return t&&0!==t.length?(0,v.jsx)("table",{className:"log-modal-eve-kv",children:(0,v.jsx)("tbody",{children:t.map(((e,t)=>(0,v.jsxs)("tr",{children:[(0,v.jsx)("td",{className:"log-modal-eve-k",children:e.label}),(0,v.jsx)("td",{className:"log-modal-eve-v",children:null===e.value||void 0===e.value||""===e.value?"\u2014":String(e.value)})]},"".concat(e.label,"-").concat(t))))})}):null},N=e=>{let{table:t}=e;return t&&t.rows&&0!==t.rows.length?(0,v.jsxs)("div",{className:"log-modal-eve-table-wrap",children:[t.label&&(0,v.jsxs)("div",{className:"log-modal-eve-subtitle",children:[t.label,t.truncated?" (first rows shown)":""]}),(0,v.jsxs)("table",{className:"log-modal-eve-grid",children:[(0,v.jsx)("thead",{children:(0,v.jsx)("tr",{children:(t.columns||[]).map(((e,t)=>(0,v.jsx)("th",{children:e},"".concat(e,"-").concat(t))))})}),(0,v.jsx)("tbody",{children:t.rows.map(((e,t)=>(0,v.jsx)("tr",{children:e.map(((e,t)=>(0,v.jsx)("td",{children:null===e||void 0===e?"":String(e)},t)))},t)))})]})]}):null},_={high:{color:"var(--danger-color)",icon:"fa-triangle-exclamation"},medium:{color:"var(--warning-color)",icon:"fa-circle-exclamation"},low:{color:"var(--info-color)",icon:"fa-circle-info"},info:{color:"var(--muted-color)",icon:"fa-circle-info"}},w=e=>{let{findings:t}=e;return t&&0!==t.length?(0,v.jsx)(b,{title:"Findings",icon:"fa-magnifying-glass",count:t.length,children:(0,v.jsx)("ul",{className:"log-modal-eve-findings",children:t.map(((e,t)=>{const r=_[e.severity]||_.info;return(0,v.jsxs)("li",{children:[(0,v.jsx)("i",{className:"fa-solid ".concat(r.icon),style:{color:r.color}}),(0,v.jsx)("span",{className:"log-modal-eve-finding-sev",style:{color:r.color},children:e.severity}),(0,v.jsx)("span",{children:e.label}),e.value&&(0,v.jsx)("code",{children:e.value})]},"".concat(e.type,"-").concat(t))}))})}):null},S=e=>{let{sections:t}=e;return t&&0!==t.length?(0,v.jsx)(v.Fragment,{children:t.map((e=>(0,v.jsxs)(b,{title:e.label,icon:"fa-layer-group",children:[(0,v.jsx)(j,{fields:e.fields}),(e.tables||[]).map(((e,t)=>(0,v.jsx)(N,{table:e},"".concat(e.label,"-").concat(t))))]},e.key)))}):null},A=e=>{let{flow:t}=e;return t&&t.fields&&0!==t.fields.length?(0,v.jsxs)(b,{title:"Flow",icon:"fa-arrow-right-arrow-left",collapsible:!0,defaultOpen:!1,children:[(0,v.jsx)(j,{fields:t.fields}),(t.tables||[]).map(((e,t)=>(0,v.jsx)(N,{table:e},t)))]}):null},C=e=>{let{metadata:t,summary:r}=e;const s=t&&t.rule||[],l=t&&t.flowbits||[],a=t&&t.flowints||[],o=r&&r.rule;if(0===s.length&&0===l.length&&0===a.length&&!o)return null;const i=[...s,...l.length?[{label:"Flowbits",value:l.join(", ")}]:[],...a];return(0,v.jsxs)(b,{title:"Rule",icon:"fa-scroll",collapsible:!0,defaultOpen:!1,children:[(0,v.jsx)(j,{fields:i}),o&&(0,v.jsx)("pre",{className:"log-modal-message log-modal-eve-rule",children:o})]})},F=Array.from({length:256},((e,t)=>t.toString(16).padStart(2,"0"))),O=e=>{let{b64:t}=e;const[r,l]=(0,s.useState)(!1),a=(0,s.useMemo)((()=>t?(e=>{try{const t=atob(e),r=new Uint8Array(t.length);for(let e=0;e<t.length;e++)r[e]=t.charCodeAt(e);return r}catch(t){return null}})(t):null),[t]),o=a?Math.ceil(a.length/16):0,i=r?o:Math.min(o,512),n=(0,s.useMemo)((()=>a?((e,t)=>{const r=new Array(t);for(let s=0;s<t;s++){const t=16*s;let l="",a="";for(let r=0;r<16;r++){const s=t+r;if(s<e.length){const t=e[s];l+=F[t]+" ",a+=t>=32&&t<=126?String.fromCharCode(t):"."}else l+=" ",a+=" ";7===r&&(l+=" ")}
1r[s]="".concat(t.toString(16).padStart(8,"0")," ").concat(l," |").concat(a,"|")}return r.join("\n")})(a,i):""),[a,i]);return a?(0,v.jsxs)(v.Fragment,{children:[(0,v.jsx)("pre",{className:"log-modal-hex",children:n}),o>512&&!r&&(0,v.jsxs)("button",{type:"button",className:"log-modal-eve-link",onClick:()=>l(!0),children:["Show all ",o," rows (",a.length.toLocaleString()," bytes)"]})]}):(0,v.jsx)("div",{className:"log-modal-eve-status",children:"The payload bytes could not be decoded."})},I=s.memo(O),L=e=>{var t;let{body:r}=e;return r?(0,v.jsxs)("div",{className:"log-modal-eve-body",children:[(0,v.jsxs)("div",{className:"log-modal-eve-subtitle",children:["Body \xb7 ",r.kind,r.content_type?" \xb7 ".concat(r.content_type):"",null!=r.length?" \xb7 ".concat(r.length," bytes"):"",r.note?" \xb7 ".concat(r.note):""]}),"form"===r.kind&&(0,v.jsx)(j,{fields:r.fields}),("text"===r.kind||"json"===r.kind||"form"===r.kind&&!(null!==(t=r.fields)&&void 0!==t&&t.length))&&r.text&&(0,v.jsx)("pre",{className:"log-modal-message",children:r.text})]}):null},T=e=>{let{decoded:t}=e;if(!t)return null;const r=t.headers||[];return(0,v.jsxs)("div",{className:"log-modal-eve-decoded",children:[(0,v.jsx)("div",{className:"log-modal-eve-subtitle log-modal-eve-decoded-label",children:t.label}),t.errors&&t.errors.length>0&&(0,v.jsx)("ul",{className:"log-modal-eve-errors",children:t.errors.map(((e,t)=>(0,v.jsxs)("li",{children:[(0,v.jsx)("i",{className:"fa-solid fa-circle-exclamation"})," ",e]},t)))}),(0,v.jsx)(j,{fields:t.fields}),r.length>0&&(0,v.jsx)(N,{table:{label:"Headers",columns:["Name","Value"],rows:r.map((e=>[e.name,e.value]))}}),(t.tables||[]).map(((e,t)=>(0,v.jsx)(N,{table:e},"".concat(e.label,"-").concat(t)))),(0,v.jsx)(L,{body:t.body})]})},k=[{key:"decoded",label:"Decoded"},{key:"text",label:"Text"},{key:"hex",label:"Hex"}],P=e=>{let{payload:t,decoded:r}=e;const l=!!(t&&t.available&&t.b64),a=!(!t||!t.text),o=!r||"raw"===r.kind,[i,n]=(0,s.useState)(o?l?"hex":"text":"decoded");if(!l&&!a){const e=r&&r.fields&&r.fields[0]&&r.fields[0].value||"none captured for this alert";return(0,v.jsx)(b,{title:"Payload",icon:"fa-file-code",children:(0,v.jsxs)("div",{className:"log-modal-eve-status",children:["No payload \u2014 ",e,"."]})})}const c=[];return t.length&&c.push("".concat(t.length.toLocaleString()," bytes")),null!=t.printable_ratio&&c.push("".concat(Math.round(100*t.printable_ratio),"% printable")),t.truncated&&c.push("truncated at the 64 KB capture buffer"),"text"===i&&t.text_source&&c.push("suricata"===t.text_source?"text as logged by Suricata":"text derived from the bytes"),(0,v.jsxs)(b,{title:"Payload",icon:"fa-file-code",children:[(0,v.jsxs)("div",{className:"log-modal-tabs",children:[k.map((e=>{const t="hex"===e.key&&!l||"text"===e.key&&!a;return(0,v.jsxs)("button",{type:"button",className:"log-modal-tab".concat(i===e.key?" active":""),disabled:t,onClick:()=>n(e.key),children:[e.label,"decoded"===e.key&&r&&!o?" \xb7 ".concat(r.label):""]},e.key)})),(0,v.jsx)("span",{className:"log-modal-eve-meta",children:c.join(" \xb7 ")})]}),"hex"===i&&(0,v.jsx)(I,{b64:t.b64}),"text"===i&&(0,v.jsx)("pre",{className:"log-modal-hex log-modal-eve-text",children:t.text}),"decoded"===i&&(0,v.jsx)(T,{decoded:r})]})},E=s.memo(P);var D=r(1185);const R=e=>{let{value:t}=e;const[r,l]=(0,s.useState)(!1);return null===t?(0,v.jsx)("span",{className:"log-modal-eve-tree-val log-modal-eve-tree-null",children:"null"}):"boolean"===typeof t?(0,v.jsx)("span",{className:"log-modal-eve-tree-val",children:t?"true":"false"}):"string"!==typeof t?(0,v.jsx)("span",{className:"log-modal-eve-tree-val",children:String(t)}):t.length<=160||r?(0,v.jsx)("span",{className:"log-modal-eve-tree-val",children:t}):(0,v.jsxs)("span",{className:"log-modal-eve-tree-val",children:[t.slice(0,120),(0,v.jsxs)("button",{type:"button",className:"log-modal-eve-link",onClick:()=>l(!0),children:["\u2026 show all ",t.length.toLocaleString()," chars"]})]})},B=e=>{let{label:t,data:r,depth:l}=e;const a="object"===typeof r&&null!==r,[o,i]=(0,s.useState)(l<1),n=a?Array.isArray(r)?r.map(((e,t)=>[t,e])):Object.entries(r):[];return(0,v.jsxs)("div",{children:[(0,v.jsxs)("div",{className:"log-modal-eve-tree-row".concat(a?" clickable":""),onClick:a?()=>i((e=>!e)):void 0,children:[a&&(0,v.jsx)("i",{className:"fa-solid ".concat(o?"fa-caret-down":"fa-caret-right")}),(0,v.jsx)("span",{className:"log-modal-eve-tree-key",children:t}),a?(0,v.jsx)("span",{className:"log-modal-eve-tree-meta",children:Array.isArray(r)?"[".concat(n.length,"]"):"{".concat(n.length,"}")}):(0,v.jsx)(R,{value:r})]}),a&&(0,v.jsx)(D.A,{in:o,children:(0,v.jsx)("div",{children:(0,v.jsx)("div",{className:"log-modal-eve-tree-children",children:n.map((e=>{let[t,r]=e;return(0,v.jsx)(B,{label:String(t),data:r,depth:l+1},t)}))})})})]})},M=e=>{let{raw:t}=e;
1const[r,l]=(0,s.useState)(!1);if(!t||"object"!==typeof t)return null;const a=Object.entries(t);return(0,v.jsx)(b,{title:"Raw record",icon:"fa-code",collapsible:!0,defaultOpen:!1,count:a.length,children:(0,v.jsxs)("div",{className:"log-modal-eve-tree",children:[(0,v.jsx)("div",{className:"log-modal-eve-tree-toolbar",children:(0,v.jsxs)("button",{type:"button",className:"log-modal-eve-link",onClick:e=>{e.stopPropagation(),navigator.clipboard&&navigator.clipboard.writeText(JSON.stringify(t,null,2)).then((()=>{l(!0),setTimeout((()=>l(!1)),1500)})).catch((()=>{}))},children:[(0,v.jsx)("i",{className:"fa-solid ".concat(r?"fa-check":"fa-copy")})," ",r?"Copied":"Copy JSON"]})}),a.map((e=>{let[t,r]=e;return(0,v.jsx)(B,{label:t,data:r,depth:0},t)}))]})})},H=s.memo(M),z=e=>{let{log:t}=e;if(!t)return null;if(t.detailLoading)return(0,v.jsxs)("div",{className:"log-modal-eve-status",children:[(0,v.jsx)("i",{className:"fa-solid fa-spinner fa-spin"})," Loading the full event record\u2026"]});if(t.detailError)return(0,v.jsxs)("div",{className:"log-modal-eve-status log-modal-eve-status-error",children:[(0,v.jsx)("i",{className:"fa-solid fa-triangle-exclamation"})," Full event record unavailable: ",t.detailError]});const r=t.detail;return r?(0,v.jsxs)(v.Fragment,{children:[(0,v.jsx)(w,{findings:r.findings}),(0,v.jsx)(S,{sections:r.app_layer}),(0,v.jsx)(E,{payload:r.payload,decoded:r.decoded}),(0,v.jsx)(A,{flow:r.flow}),(0,v.jsx)(C,{metadata:r.metadata,summary:r.summary}),(0,v.jsx)(H,{raw:r.raw})]}):null},G=s.memo(z),V=e=>{if(!e||"string"!==typeof e)return e;const t=[...e.matchAll(/(\w+)=("[^"]*"|\S+)/g)];if(t.length<4)return e;return t.reduce(((e,t)=>e+t[0].length),0)/e.length<.7?e:t.map((e=>e[0])).join("\n")},W=e=>{let{open:t,close:r,log:s,onAlertClick:l,onNext:a,onPrevious:o}=e;return(0,v.jsx)(u.A,{show:t,onHide:r,backdrop:"static",size:"lg",children:s&&(0,v.jsxs)(v.Fragment,{children:[(0,v.jsx)(u.A.Header,{style:{padding:"8px"},children:(0,v.jsx)("div",{className:"log-modal-header-actions",children:(0,v.jsxs)("span",{style:{display:"flex",alignItems:"center",gap:"0.5em"},children:[(0,v.jsx)("i",{className:"fa-solid ".concat((0,d.nT)(s.severity)," log-modal-severity-indicator"),style:{color:(0,d.XY)(s.severity)}}),(0,d.TG)(s.severity)]})})}),(0,v.jsxs)(u.A.Body,{style:{background:"var(--background-secondary)",maxHeight:"80vh",overflowY:"auto"},children:[(0,v.jsx)("div",{className:"log-modal-header",children:(0,v.jsx)("div",{className:"log-modal-header-container",children:(0,v.jsxs)("div",{className:"log-modal-content-container",children:[(0,v.jsx)("i",{className:"fa-solid ".concat({syslog:"fa-file-alt",eventlog:"fa-calendar-check",eve:"fa-shield-halved",aggnetflow:"fa-network-wired"}[s.logtype]," log-modal-center-icon-bg")}),(0,v.jsxs)("div",{className:"log-modal-center-text",children:[(0,v.jsx)("div",{style:{fontWeight:"bold",fontSize:"1.2em"},children:{syslog:"Syslog",eventlog:"Event Log",eve:"EVE Alert",aggnetflow:"Netflow"}[s.logtype]}),(0,v.jsx)("div",{style:{fontSize:"1em",textAlign:"center",marginTop:"0.5em"},children:"syslog"===s.logtype?"Facility: ".concat(s.source):"aggnetflow"===s.logtype?"Flow: ".concat(s.flow_src||"Unknown"):"ID: ".concat(s.event)})]})]})})}),(0,v.jsx)(x,{log:s}),(0,v.jsxs)("fieldset",{className:"log-modal-details",children:[(0,v.jsx)("legend",{className:"log-modal-legend",children:"Message"}),(0,v.jsx)("pre",{className:"log-modal-message",children:V(s.raw_message||s.message)})]}),"eve"===s.logtype&&(0,v.jsx)(G,{log:s})]}),(0,v.jsx)(u.A.Footer,{style:{padding:"8px"},children:(0,v.jsxs)("div",{style:{display:"flex",gap:"8px",width:"100%",justifyContent:"space-between"},children:[(0,v.jsxs)("div",{style:{display:"flex",gap:"8px"},children:[(0,v.jsx)(p.A,{ButtonText:"Previous",onClick:o,icon:"fa-chevron-left"}),(0,v.jsx)(p.A,{ButtonText:"Next",onClick:a,icon:"fa-chevron-right"})]}),(0,v.jsx)(p.A,{ButtonText:"Close",onClick:r})]})})]})})},U=s.memo(W);var $=r(28125),J=r(14282),Y=r(79761),K=r(89124),Z=r(69697),X=r(43851);const Q=e=>{let{data:t,handleClose:r,refreshSource:l}=e;const[a,o]=(0,s.useState)({label:"",type:"",filter:{},...t||{}}),{columns:i,saveNewOutFilter:n}
1=(0,Y.A)({fetch:!1}),{columns:c,saveNewOutFilter:d}=(0,K.b)({fetch:!1}),{columns:p,saveNewOutFilter:g}=(0,Z.w)({fetch:!1}),{columns:m,saveNewOutFilter:f}=(0,X.u)({fetch:!1}),y=(e=>{switch(e){case"eventlog":return{...p};case"syslog":return{...c};case"eve":return{...i};case"aggnetflow":return{...m};default:return{}}})(a.type),h=Object.keys(y).reduce(((e,t)=>(e[t]=y[t].description,e)),{}),x=Object.keys(y),[b,j]=(0,s.useState)(!1),N=(e,t)=>{if("label"===e||"type"===e)o({...a,[e]:t}),"type"===e&&o((e=>({...e,filter:{}})));else{const r=!!y[e]&&y[e].validation(t),s="severity"===e||"facility"===e?""===t?null:parseInt(t):t;o({...a,filter:{...a.filter,[e]:s}}),j((t=>({...t,[e]:{valid:r}})))}},_=(0,s.useMemo)((()=>x.filter((e=>!(e in a.filter)))),[a,x]);return(0,v.jsxs)(u.A,{show:!0,onHide:r,size:"md",children:[(0,v.jsx)(u.A.Header,{closeButton:!0,children:(0,v.jsx)(u.A.Title,{children:"Exclude Event"})}),(0,v.jsx)(u.A.Body,{children:(0,v.jsxs)($.A,{children:[(0,v.jsx)($.A.Group,{className:"d-flex align-items-center",style:{marginBottom:"0.5em"},children:(0,v.jsx)($.A.Control,{className:"nm-form-input",type:"text",style:{textAlign:"center"},placeholder:"Enter label",value:a.label||"",onChange:e=>N("label",e.target.value)})}),(0,v.jsx)($.A.Group,{className:"d-flex align-items-center",style:{marginBottom:"0.5em"},children:(0,v.jsxs)($.A.Control,{className:"nm-form-input",as:"select",value:a.type||"",onChange:e=>N("type",e.target.value),children:[(0,v.jsx)("option",{value:"",children:"Select Type"}),(0,v.jsx)("option",{value:"eventlog",children:"Eventlog"}),(0,v.jsx)("option",{value:"syslog",children:"Syslog"}),(0,v.jsx)("option",{value:"eve",children:"EVE"}),(0,v.jsx)("option",{value:"aggnetflow",children:"Netflow"})]})}),a.type&&Object.keys(a.filter).filter((e=>h[e])).map((e=>(0,v.jsxs)($.A.Group,{className:"d-flex align-items-center",style:{marginBottom:"0.5em"},children:[(0,v.jsx)($.A.Label,{style:{width:"50%"},children:h[e]}),(0,v.jsxs)("div",{className:"align-items-center d-flex",style:{width:"50%"},children:["select"===y[e].formType?(0,v.jsxs)($.A.Control,{className:"nm-form-input",as:"select",value:a.filter[e]||"",onChange:t=>N(e,t.target.value),children:[(0,v.jsx)("option",{value:"",children:"Select"}),y[e].options.map(((t,r)=>(0,v.jsx)("option",{value:y[e].optionValues[r],children:t},r)))]}):(0,v.jsx)($.A.Control,{className:"nm-form-input",type:y[e].formType,value:void 0!==a.filter[e]?a.filter[e]:"",onChange:t=>N(e,t.target.value)}),(0,v.jsx)("i",{className:"fa fa-circle-xmark",onClick:()=>(e=>{const t={...a.filter};delete t[e],o({...a,filter:t})})(e),style:{paddingLeft:"1em",cursor:"pointer"}})]})]},e))),a.type&&_.length>0&&(0,v.jsx)($.A.Group,{className:"mb-3",children:(0,v.jsxs)($.A.Control,{className:"nm-form-input",as:"select",onChange:e=>{var t;t=e.target.value,o({...a,filter:{...a.filter,[t]:""}}),e.target.value=""},children:[(0,v.jsx)("option",{value:"",children:"Add Criteria"}),_.map((e=>(0,v.jsx)("option",{value:e,children:h[e]},e)))]})})]})}),(0,v.jsxs)(u.A.Footer,{children:[(0,v.jsx)(J.A,{variant:"secondary",onClick:r,children:"Close"}),(0,v.jsx)(J.A,{variant:"primary",onClick:async e=>{e.preventDefault();try{switch(a.type){case"eventlog":await g(a),l("eventlog");break;case"syslog":await d(a),l("syslog");break;case"eve":await n(a),l("eve");break;case"aggnetflow":await f(a),l("aggnetflow")}j(!1),r()}catch(t){console.error(t)}},disabled:!a.type||!a.label,children:"Save Changes"})]})]})};var q=r(92216),ee=r(20430),te=r(39993),re=r(93529);const se=function(e){let t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:35;const r=null==e?"":String(e);return r.length>t?r.slice(0,t)+"...":r};function le(e){let{data:t,logTypes:r,hideDevice:u=!1,initialSize:p=25,hideContext:g=!1,immutable:m=!1,refreshSource:f=(()=>{}),setNewFilter:y=(()=>{}),mobile:h=null,deviceLabel:x=null}=e;const b=(0,s.useRef)(x);b.current=x;const[j,N]=(0,s.useState)(null),[_,w]=(0,s.useState)(null),[S,A]=(0,s.useState)(null),[C,F]=(0,s.use
1State)(null),O=(0,s.useRef)(new Map),I=(0,s.useCallback)((async(e,t,r)=>{e.stopPropagation(),w(r);const s={...t,timestamp:new Date(t.timestamp)};if(!t.loadEvent)return void N(s);const l="".concat(t.logtype,":").concat(t.id),a=O.current.get(l);if(a)return void N({...s,detail:a,detailLoading:!1,detailError:null});N({...s,detail:null,detailLoading:!0,detailError:null});let o=null,i=null;try{o=await t.loadEvent(),o||(i="The full event record is not available")}catch(n){i=n&&n.message||"Failed to load the full event record"}o&&(O.current.size>=200&&O.current.clear(),O.current.set(l,o)),N((e=>e&&e.logtype===t.logtype&&e.id===t.id?{...e,detail:o,detailLoading:!1,detailError:i}:e))}),[]),L=(0,s.useCallback)((async()=>{if(_<t.length-1){const e=t[_+1];await I({stopPropagation:()=>{}},e,_+1)}}),[_,t,I]),T=(0,s.useCallback)((async()=>{if(_>0){const e=t[_-1];await I({stopPropagation:()=>{}},e,_-1)}}),[_,t,I]),k=(0,s.useCallback)((e=>{var t;const r=null!==(t=e.device_id)&&void 0!==t?t:e.device,s=b.current?b.current(r):null!==r&&void 0!==r?r:"";return{labels:{preview:"Message",filter:"Filter Options (".concat(e.logtype,")"),actions:"Event Actions"},preview:[{label:(0,v.jsx)("div",{style:{whiteSpace:"normal",maxWidth:"24em"},children:se(e.message)}),disabled:!0}],filter:[..."eventlog"===e.logtype||"syslog"===e.logtype?[{label:(0,v.jsxs)("label",{children:[(0,v.jsx)("i",{className:"fa-solid fa-filter",style:{margin:"0 0.5em 0 0",color:"#fafafa"}}),"Filter Device: ".concat(s)]}),action:e=>{const t=e.device_id||e.device;t&&f&&y((e=>({...e,device_id:e.device_id?e.device_id.includes(t)?e.device_id:[...e.device_id,t]:[t]})))},condition:!(!e.device_id&&!e.device)},...e.source?[{label:(0,v.jsxs)("label",{children:[(0,v.jsx)("i",{className:"fa-solid fa-filter",style:{margin:"0 0.5em 0 0",color:"#fafafa"}}),"Filter Source: ".concat(e.source||"")]}),action:e=>{const t=e.source;t&&f&&y((e=>({...e,source:e.source.includes(t)?e.source:[...e.source,t]})))}}]:[],...e.log?[{label:(0,v.jsxs)("label",{children:[(0,v.jsx)("i",{className:"fa-solid fa-filter",style:{margin:"0 0.5em 0 0",color:"#fafafa"}}),"Filter Log: ".concat(e.log||"")]}),action:e=>{const t=e.log;t&&f&&y((e=>({...e,log:e.log.includes(t)?e.log:[...e.log,t]})))}}]:[],..."eventlog"===e.logtype&&e.event?[{label:(0,v.jsxs)("label",{children:[(0,v.jsx)("i",{className:"fa-solid fa-filter",style:{margin:"0 0.5em 0 0",color:"#fafafa"}}),"Filter Event ID: ".concat(e.event||"")]}),action:e=>{const t=e.event;t&&f&&y((e=>({...e,eventID:e.eventID.includes(t)?e.eventID:[...e.eventID,t]})))}}]:[],..."syslog"===e.logtype&&void 0!==e.facility?[{label:(0,v.jsxs)("label",{children:[(0,v.jsx)("i",{className:"fa-solid fa-filter",style:{margin:"0 0.5em 0 0",color:"#fafafa"}}),"Filter Facility: ".concat(e.facility||"")]}),action:e=>{const t=e.facility;void 0!==t&&f&&y((e=>({...e,facility:e.facility.includes(t)?e.facility:[...e.facility,t]})))}}]:[]]:[],..."eve"===e.logtype||"aggnetflow"===e.logtype?[...e.src_ip?[{label:(0,v.jsxs)("label",{children:[(0,v.jsx)("i",{className:"fa-solid fa-filter",style:{margin:"0 0.5em 0 0",color:"#fafafa"}}),"Filter Source IP: ".concat(e.src_ip||"")]}),action:e=>{const t=e.src_ip;t&&f&&y((e=>({...e,ip:e.ip.includes(t)?e.ip:[...e.ip,t]})))}}]:[],...e.dst_ip?[{label:(0,v.jsxs)("label",{children:[(0,v.jsx)("i",{className:"fa-solid fa-filter",style:{margin:"0 0.5em 0 0",color:"#fafafa"}}),"Filter Destination IP: ".concat(e.dst_ip||"")]}),action:e=>{const t=e.dst_ip;t&&f&&y((e=>({...e,ip:e.ip.includes(t)?e.ip:[...e.ip,t]})))}}]:[],...e.src_port?[{label:(0,v.jsxs)("label",{children:[(0,v.jsx)("i",{className:"fa-solid fa-filter",style:{margin:"0 0.5em 0 0",color:"#fafafa"}}),"Filter Source Port: ".concat(e.src_port||"")]}),action:e=>{const t=e.src_port;t&&f&&y((e=>({...e,port:e.port.includes(t)?e.port:[...e.port,t]})))}}]:[],...e.dst_port?[{label:(0,v.jsxs)("label",{children:[(0,v.jsx)("i",{className:"fa-solid fa-filter",style:{margin:"0 0.5em 0 0",color:"#fafafa"}}),"Filter Destination Port: ".concat(e.dst_port||"")]}),action:e=>{const t=e.dst_port;t&&f&&y((e=>({...e,port:e.port.includes(t)?e.port:[...e.port,t]})))}}]:[],...e.proto?[{label:(0,v.jsxs)("label",{children:[(0,v.jsx)("i",{className:"fa-solid fa-filter",style:{margin:"0 0.5em 0 0",color:"#fafafa"}}),"Filter Protocol: ".concat(e.proto||"")]}),action:e=>{const t=e.proto;t&&f&&y((e=>({...e,proto:e.proto.includes(t)?e.proto:[...e.proto,t]})))}}]:[],..."eve"===e.logtype&&e.event?[{label:(0,v.jsxs)("label",{children:[(0,v.jsx)("i",{className:"fa-solid fa-filter",style:{margin:"0 0.5em 0 0",color:"#fafafa"}}),"Filter Signature ID: ".concat(e.event||"")]}),action:e=>{const t=e.event;t&&f&&y((e=>({...e,signatureID:e.signatureID.includes(t)?e.signatureID:[...e.signatureID,t]})))}}]:[]]:[]],actions:[{line:!0},{label:(0,v.jsxs)("label",{children:[(0,v.jsx)("i",{className:"fa-solid fa-bell",style:{margin:"0 0.5em 0 0",color:"#fafafa"}}),"Create Alert"]}),disabled:"aggnetflow"===e.logtype,action:e=>{if("aggnetflow"===e.logtype)return;const t={};let r="syslog_log";switch(e.logtype){case"eventlog":r="event_log",e.source&&(t.source=e.source),e.log&&(t.log=e.log),e.event_id&&(t.event_ids=[e.event_id]),void 0!==e.raw_severity&&(t.severity_ceiling=e.raw_
1severity);break;case"syslog":r="syslog_log",void 0!==e.facility&&(t.facility=e.facility),void 0!==e.raw_severity&&(t.severity_ceiling=e.raw_severity),e.message&&(t.contains=[e.message.slice(0,40)]);break;case"eve":r="eve_log",e.src_ip&&(t.src_or_dst_ip=e.src_ip),void 0!==e.raw_severity&&(t.severity=e.raw_severity),e.proto&&(t.proto=e.proto),e.vlan&&(t.vlan=e.vlan),e.iface&&(t.iface=e.iface)}F({label:"Alert for ".concat(se(e.message)),class:r,parameters:t,enabled:!0})}},{label:(0,v.jsxs)("label",{children:[(0,v.jsx)("i",{className:"fa-solid fa-filter-circle-xmark",style:{margin:"0 0.5em 0 0",color:"#fafafa"}}),"Exclude Event"]}),action:e=>{const t={};switch(e.logtype){case"eventlog":(e.device_id||e.device)&&(t.device_id=e.device_id||e.device),e.source&&(t.source=e.source),e.event&&(t.event_id=e.event),void 0!==e.raw_severity&&(t.severity=e.raw_severity),e.log&&(t.log=e.log);break;case"syslog":(e.device_id||e.device)&&(t.device_id=e.device_id||e.device),void 0!==e.facility&&(t.facility=e.facility),void 0!==e.raw_severity&&(t.severity=e.raw_severity),e.message&&(t.message=e.message);break;case"eve":e.src_ip&&(t.src_ip=e.src_ip),e.dst_ip&&(t.dst_ip=e.dst_ip),void 0!==e.raw_severity&&(t.severity=e.raw_severity),e.proto&&(t.proto=e.proto),e.vlan&&(t.vlan=e.vlan),e.iface&&(t.iface=e.iface),e.event&&(t.signature_id=e.event);break;case"aggnetflow":e.src_ip&&(t.src_ip=e.src_ip),e.dst_ip&&(t.dst_ip=e.dst_ip),e.dst_port&&(t.dst_port=e.dst_port),void 0!==e.protocol&&(t.protocol=e.protocol),e.vlan&&(t.vlan=e.vlan),void 0!==e.in_iface&&(t.in_iface=e.in_iface),void 0!==e.out_iface&&(t.out_iface=e.out_iface),e.flow_src&&(t.flow_src=e.flow_src)}A({type:e.logtype,label:se(e.message),filter:t})}}]}}),[f,y]),P=(0,s.useCallback)((function(e,t){let r=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{};switch(e){case"eventlog":return(0,v.jsx)("i",{className:"fa-solid fa-calendar-check",title:t||"Event Log",style:{color:"#fafafa",...r}});case"syslog":return(0,v.jsx)("i",{className:"fa-solid fa-file-alt",title:t||"Syslog",style:{color:"#fafafa",...r}});case"eve":return(0,v.jsx)("i",{className:"fa-solid fa-shield-halved",title:t||"EVE",style:{color:"#fafafa",...r}});case"aggnetflow":return(0,v.jsx)("i",{className:"fa-solid fa-network-wired",title:t||"Netflow",style:{color:"#fafafa",...r}});default:return null}}),[]),E=(0,s.useMemo)((()=>{const e=u?{timestamp:"14%",source:"18%",event:"10%",log:"14%",message:"44%"}:{timestamp:"14%",source:"14%",device:"14%",event:"8%",log:"12%",message:"38%"},l=e=>{let{host:t,ip:r,port:s}=e;return(0,v.jsxs)("span",{children:[t||r||"\u2014",s?(0,v.jsx)("span",{style:{fontSize:"0.8em"},className:"nm-text nm-grey",children:":".concat(s)}):null]})},c=[{index:1,Header:"",accessor:"logtype",width:"1.5em",maxWidth:"1.5em",Cell:e=>{let{value:t}=e;return P(t,null,{display:"flex",justifyContent:"center"})}},{index:2,Header:()=>(0,v.jsx)("div",{style:{display:"flex",alignItems:"center"},children:(0,v.jsx)("span",{children:"Severity"})}),accessor:"severity",width:"4em",maxWidth:"4em",Cell:e=>{let{value:t}=e;return(0,v.jsx)("div",{style:{display:"flex",alignItems:"center",justifyContent:"center"},children:(0,v.jsx)(o.v,{color:(0,d.XY)(t),children:(0,d.TG)(t)})})}},{index:3,Header:()=>(0,v.jsx)("div",{style:{display:"flex",alignItems:"center"},children:(0,v.jsx)("span",{children:"Timestamp"})}),accessor:"timestamp",width:e.timestamp,maxWidth:e.timestamp,Cell:e=>{let{row:t,value:r}=e;const s=r?new Date(r):null;if(!s||isNaN(s.getTime()))return(0,v.jsx)("div",{children:"\u2014"});const l=t.original.end_time?new Date(t.original.end_time):null;let a="";if(l&&!isNaN(l.getTime())){const e=(0,q.A)({start:s,end:l}),t=(0,ee.A)(e,{format:["hours","minutes","seconds"]});a=" (".concat(t||"< 1s",")")}return(0,v.jsxs)("div",{children:[(0,te.default)(s,"MMM dd, yyyy p"),a]})},sortType:(e,t,r)=>new Date(e.values[r]).getTime()-new Date(t.values[r]).getTime()},{index:29,Header:()=>{const e=[],t=[];return r.eventlog||r.syslog?t.push(P("eventlog","Event Source",{marginRight:"0.3em",fontSize:"0.9em"})):t.push(P("eve","Network Source",{marginRight:"0.3em",fontSize:"0.9em"})),e.push((0,v.jsxs)("div",{style:{display:"flex",alignItems:"center"},children:[t.length>0&&t[0],(0,v.jsx)("span",{children:"Source"})]},"source")),(0,v.jsx)("div",{style:{display:"flex",alignItems:"center"},children:e.map(((e,t)=>(0,v.jsxs)(s.Fragment,{children:[t>0&&(0,v.jsx)("span",{style:{margin:"0 0.3em"},children:"|"}),e]},t)))})},accessor:"source",width:e.source,maxWidth:e.source},{index:30,Header:()=>(0,v.jsx)("div",{style:{display:"flex",alignItems:"center"},children:(0,v.jsx)("span",{children:"Message"})}),accessor:"message",width:e.message,maxWidth:e.message,wrap:!0,Cell:e=>{let{value:t}=e;return se(t,100)}}];u||c.push({index:10,Header:()=>{const e=[],t=[];return r.syslog&&t.push(P("syslog","Syslog Source",{marginRight:"0.3em",fontSize:"0.9em"})),r.eventlog&&t.push(P("eventlog","Event Log Source",{marginRight:"0.3em",fontSize:"0.9em"})),r.eve&&t.push(P("eve","EVE Source",{marginRight:"0.3em",fontSize:"0.9em"})),r.aggnetflow&&t.push(P("aggnetflow","Netflow Source",{marginRight:"0.3em",fontSize:"0.9em"})),e.push((0,v.jsxs)("div",{style:{display:"flex",alignItems:"center"},children:[t.length>0&&t[0],(0,v.jsxs)("span",{children:["Host",r.eve||r.aggnetflow?" (src)":""]})]},"source")),(0,v.jsx)("div",{style:{display:"flex",alignItems:"center"},children:e.map(((e,t)=>(0,v.jsxs)(s.Fragment,{children:[t>0&&(0,v.jsx)("span",{style:{margin:"0 0.3em"},children:"|"}),e]},t)))})},accessor:"device",width:e.device,maxWidth:e.device,Cell:e=>{var t,r;let{row:s}=e;return m?(0,v.jsx)(l,{host:s.original.src_host,ip:s.original.src_ip,port:s.original.src_port||(null===(t=s.original.src_ports)||void 0===t?void 0:t[0])}):(0,v.jsx)(i.A,{device_id:null!==(r=s.original.src_id)&&void 0!==r?r:s.original.device_id,ip_address:s.original.src_ip,hostname:s.original.src_host,geoip:(0,n.LR)(s.original,"src"),children:(s.original.src_port||s.original.src_ports)&&(0,v.jsx)("span",{style:{fontSize:"0.8em"},className:"nm-text nm-grey",children:":".concat(s.original.src_port||s.original.src_ports[0])})})}}),c.push({index:12,Header:()=>(0,v.jsx)("div",{style:{display:"flex",alignItems:"center"},children:(0,v.jsxs)("div",{style:{display:"flex",alignItems:"center"},children:[P("eventlog","Event Log Event",{marginRight:"0.3em",fontSize:"0.9em"}),(0,v.jsx)("span",{children:"ID/Protocol"})]},"event")}),accessor:"event",width:e.event,maxWidth:e.event}),c.push({index:11,Header:()=>(0,v.jsx)("div",{style:{display:"flex",alignItems:"center"},children:(0,v.jsxs)("div",{style:{display:"flex",alignItems:"center"},children:[P("eventlog","Log/Facility",{marginRight:"0.3em",fontSize:"0.9em"}),(0,v.jsx)("span",{children:(()=>{const e=[];return r.eventlog&&e.push("Log"),r.syslog&&e.push("Facility"),(r.eve||r.aggnetflow)&&e.push("Host (dst)"),e.join("/")})()})]},"log")}),accessor:"log",width:e.log,maxWidth:e.log,Cell:e=>{let{row:t}=e;return t.original.log?t.original.log:m?(0,v.jsx)(l,{host:t.original.dst_host,ip:t.original.dst_ip,port:t.original.dst_port}):(0,v.jsx)(i.A,{device_id:t.original.dst_id,ip_address:t.original.dst_ip,hostname:t.original.dst_host,geoip:(0,n.LR)(t.original,"dst"),children:(t.original.dst_port||t.original.dst_ports)&&(0,v.jsx)("span",{style:{fontSize:"0.8em"},className:"nm-text nm-grey",children:":".concat(t.original.dst_port)})})}}),c.sort(((e,t)=>e.index-t.index));return{columns:c,rows:t.map(((e,t)=>({...e,clickEvent:r=>I(r,e,t),...g?{}:{contextMenu:t=>(0,a.H)(t,k(e),e)}})))}}),[t,g,r,u,m,P]),D=(0,s.useMemo)((()=>E.columns.find((e=>"timestamp"===e.accessor))?{id:"timestamp",desc:!0}:null),[E.columns]),{Table:R,Entities:B,Search:M,GotoPage:H,Pager:z,funPager:G}
1=(0,c.$)(E.columns,E.rows,p,null,!0,D,null,null,h?{mobile:h}:void 0);return{Table:(0,s.useCallback)((e=>{let{striped:t,bordered:r,showHeaders:s}=e;return(0,v.jsx)(R,{striped:t,bordered:r,showHeaders:s,fontSize:"13px",noEntriesMessage:(0,v.jsx)("div",{children:"No entries found"})})}),[R]),Entities:B,Search:M,GotoPage:H,Pager:z,Popup:(0,s.useCallback)((()=>l.createPortal((0,v.jsx)("div",{style:{position:"fixed",top:0,left:0,width:"100vw",height:"100vh",pointerEvents:"none",zIndex:900},children:(0,v.jsxs)("div",{style:{pointerEvents:"auto"},children:[(0,v.jsx)(U,{open:!!j,close:()=>{N(null),w(null)},log:j,onNext:L,onPrevious:T}),S&&(0,v.jsx)(Q,{data:S,handleClose:()=>A(null),refreshSource:f}),C&&(0,v.jsx)(re.A,{show:!0,onHide:()=>F(null),initialValues:C,onSuccess:()=>F(null)})]})}),document.body)),[j,S,C,L,T,f]),funPager:G,setNewFilter:A,getContextMenuItems:k,openLog:(e,t,r)=>I(null!==e&&void 0!==e&&e.stopPropagation?e:{stopPropagation:()=>{}},t,r)}}}}]); 2//# sourceMappingURL=6318.d0db9604.chunk.js.map
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.