{% extends "rules/base.html" %} {% load staticfiles %} {% load bootstrap3 %} {% block sidebar %}

{{ rule.sid }}

{% if kibana and kibana_version >= 4 or evebox %}

Events list

{% endif %} {# kibana or evebox #} {% if request.user.is_staff %}

Action

{% endif %} {# user.is_staff #} {% endblock %} {% block content %}

{{ rule.msg }}

{% if references or rule.get_comments %}
{% if references %}

References

    {% for ref in references %}
  • {% if ref.url %} {{ ref.key|capfirst }}: {{ ref.value|truncatechars:80}} {% else %} {{ ref.key }}: {{ ref.value }} {% endif %}
  • {% endfor %}
{% endif %} {% if rule.get_comments %}

Information

{% if rule.get_comments %} Comment {{ rule.get_comments|length }} {% endif %}
{% endif %}
{% endif %}
{% if suricata_stats and elasticsearch %}

Hits by host

Fetching data...

Source IP

Fetching data...

Destination IP

Fetching data...
{% if probes %}

Activity

Fetching data...

{% endif %} {# if probes #}

Source of attacks

Fetching data...

Target of attacks

Fetching data...
{% endif %} {# suricata_stats and elasticsearch #}

Definition

{{ rule.highlight_content|safe }}
{% if rule_transformations %}

Rule transformation(s)

{% for ruleset in rulesets %} {% if ruleset.a_drop or ruleset.a_reject or ruleset.a_filestore or ruleset.a_bypass or ruleset.l_auto or ruleset.l_yes or ruleset.t_auto or ruleset.t_src or ruleset.t_dst %}

{{ ruleset.name }}

{{ ruleset.content|safe }}
{% endif %} {% endfor %} {% endif %} {# rule_transformation #}

Status in rulesets

{% for ruleset in rulesets %}
{{ ruleset.status}}
Validity
{% if ruleset.threshold %}
Threshold
{% endif %} {% if ruleset.a_reject %}
Reject
{% endif %} {% if ruleset.a_drop %}
Drop
{% endif %} {% if ruleset.a_filestore %}
Filestore
{% endif %} {% if ruleset.l_auto %}
Lateral Auto
{% endif %} {% if ruleset.l_yes %}
Lateral Yes
{% endif %} {% if ruleset.t_auto %}
Target Auto
{% endif %} {% if ruleset.t_src %}
Target Src
{% endif %} {% if ruleset.t_dst %}
Target Dst
{% endif %}
{% endfor %}
{% if thresholds %}

Thresholds

{% load render_table from django_tables2 %} {% render_table thresholds %}
{% endif %} {% if suppress %}

Suppressions

{% render_table suppress %}
{% endif %}

History

{% if rule.get_actions %}
{% for user_action in rule.get_actions %} {% include "rules/useraction_entry.html" with user_action=user_action %} {% endfor %}
{% else %} No comment. {% endif %}
{% if request.user.is_staff %}

Add comment

{% csrf_token %} {% bootstrap_form comment_form %} {% buttons %} {% endbuttons %}
{% endif %}
{% endblock %}