[Prelude Hybrid IDS] #258: acknolegment in prewikka
"Prelude Hybrid IDS" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
#258: acknolegment in prewikka ---------------------------------+------------------------------------------ Reporter: [email protected] | Owner: yoann Type: enhancement | Status: new Priority: normal | Milestone: Component: generic | Version: 0.9 Severity: normal | Keywords: ---------------------------------+------------------------------------------ currently my operations team made a request to have an acknowledgment option as well ad a delete option in prewikka. there are several ways this could be done one way would be to add a field to the database idmef database which would require modifications to libpreludedb and prelude-XLR as well as prewikka. An other method would be to have a second archive database or set of tables which the alert could be moved too upon acknowledgment this would also have the benefit of reducing the size of the tables containing unacknowledged alerts making the query time shorter. the only difficult part of the second method would be figuring out how to present a view containing both the acknowledged alerts and the unacknowledged alerts. -- Ticket URL: <https://trac.prelude-ids.org/ticket/258> Prelude Hybrid IDS <http://www.prelude-ids.org> The Prelude Hybrid Intrusion Detection System suite _______________________________________________ Prelude-devel site list [email protected] http://www.prelude-ids.org/mailman/listinfo/prelude-devel