Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Log/show warning if there are no correlation rules installed/entered #646

Open
lacak-sk opened this issue Apr 24, 2024 · 0 comments
Open
Labels
needs-triage Needs to be triaged

Comments

@lacak-sk
Copy link

Is your feature request related to a problem? Please describe.

If there are no correlation rules then no alerts can be generated and then in fact system can not provide expected functionality. Despite the fact that logs are collected.

Describe the solution you'd like

At lease write about that fact warning in "Settings/Application Logs" or show similar warning in panel CORRELATION RULES. Now is there only message "It feels lonely here..." which is not very descriptive. It will be more helpful if there will be more descriptive warning like "There are no correlation rules and therefore no alarms can be generated."

Describe alternatives you've considered

Provide some warning in case when no correlation rules are there. As far as I understand default correlation rules should be automatically downloaded but if it fails for some reason (as it is my case) then there should be some warning. May be also when download fails write about that in log.

@osmontero osmontero moved this to 🆕 New in UTMStack Apr 30, 2024
@Kbayero Kbayero moved this from 🆕 New to 🔖 Ready in UTMStack Jun 17, 2024
@osmontero osmontero changed the title [FEATURE] Log/show warning if there are no correlation rules installed/entered Log/show warning if there are no correlation rules installed/entered Jan 22, 2025
@osmontero osmontero moved this from 🔖 Ready to 🆕 New in UTMStack Feb 14, 2025
@osmontero osmontero added the needs-triage Needs to be triaged label Feb 14, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
needs-triage Needs to be triaged
Projects
Status: 🆕 New
Development

No branches or pull requests

3 participants