#from prewikka import User, utils #extends prewikka.templates.MessageListing #block head_extra_content #filter CleanOutput #end filter #filter Filter #end filter #end block #block message_fields_header $_("Classification")
#if $correlation_alert_view #set $disabled="disabled=\"disabled\"" #else #set $disabled="" #end if #for name, path in (($N_("Alert"), "alert.create_time"), ($N_("CorrelationAlert"), "alert.correlation_alert.name"), ($N_("OverflowAlert"), "alert.overflow_alert.program"), ($N_("ToolAlert"), "alert.tool_alert.name")) #if path in $alert.type #set $checked = "checked='checked'" #else #set $checked = "" #end if #end for #for $item in $N_("info"), $N_("low"), $N_("medium"), $N_("high"), $N_("none") #if $item in $alert.assessment.impact.severity #set $checked = "checked='checked'" #else #set $checked = "" #end if #end for #for item in $N_("succeeded"), $N_("failed"), $N_("none") #if item in $alert.assessment.impact.completion #set $checked = "checked='checked'" #else #set $checked = "" #end if #end for
$_("Type:")  $_($name)
$_("Severity:")$_($item)
$_("Completion:")  $_($item)
#if $classification_filtered * #end if $_("Source")
#if $source_filtered * #end if $_("Target")
#if $target_filtered * #end if $_("Sensor")
#if $analyzer_filtered * #end if $_("Time") #end block message_fields_header #block message_fields #filter CleanOutput #if $message.sub_alert_name $message.sub_alert_type#slurp #if $message.sub_alert_display #set $string = $ngettext("alert", "alerts", $message.sub_alert_number) ($message.sub_alert_number $string)#slurp #end if : $message.sub_alert_name
#slurp #end if #if $message.aggregated and $message.aggregated_classifications_hidden > 0 #set $string = $_("%(hidden)d of %(total)d alerts not shown...") ($str($string % { "hidden": $message.aggregated_classifications_hidden, "total": $message.aggregated_classifications_total }) $_("expand"))
#end if #for $info in $message.infos #if $message.aggregated and (len($message.infos) > 1 or $info.count > 1) $info.count x #end if #if $info.classification.value $info.classification.value #else n/a #end if #if $info.completion.value ($info.completion.value) #end if
#set $sep = "(" #for url, name in $info.classification_references##slurp #if $url#$sep$name#else#$sep$name#end if##slurp #set $sep = ", " #end for##if $info.classification_references#)#end if #end for #for $name, $direction, $hidden, $total, $expand in ($_("source"), $message.source, $message.aggregated_source_hidden, $message.aggregated_source_total, $message.aggregated_source_expand), ($_("target"), $message.target, $message.aggregated_target_hidden, $message.aggregated_target_total, $message.aggregated_target_expand) #if len($direction) == 0 n/a #end if #set $need_hr = 0 #if $hidden > 0 #set $string = $_("%(hidden)d of %(total)d %(name)ss not shown...") ($str($string % { "hidden": $hidden, "total": $total, "name": $name }) $_("expand"))
#end if #for $direction in $direction #if $need_hr
#end if #set $need_hr = 1 #set $service = "" #set $proto_param = "" #set $proto_str = "" #if $direction.protocol.value != None #set $proto_str = $direction.protocol.value.lower() #set $proto_param = "&protocol=" + $direction.protocol.value.upper() #end if #for $address in $direction.addresses $address.value - $str($_("Filter on this %s") % ($name))
#if not $address.category or $address.category in ("ipv4-addr", "ipv4-net", "ipv6-addr", "ipv6-net") - $str($_("%s information") % ($name)).capitalize()
#for $cmdname, $link in $address.host_commands - $cmdname
#end for #end if
#slurp #if $direction.service.value != None#:$str($direction.service.value)#slurp #if $proto_str /$proto_str #else #end if #elif $proto_str :$proto_str #end if
#end for #if $len($direction.addresses) == 0 and $service service: $service[1:] #end if #set $cnt = 0 #for $name, $value, $extra in $direction.listed_values #if $cnt > 0
#end if $name: $value.value #if $extra != None ($extra) #end if #set $cnt += 1 #end for #end for #end for #for $sensor in $message.sensors #if $sensor.name.value $sensor.name.value #end if #if $sensor.node_name.value ($sensor.node_name.value) #end if
#end for #if $message.aggregated #if $message.time_min.value == $message.time_max.value $message.time_min.value #else $message.time_max.value - $message.time_min.value #end if #else $message.time.value #if $message.analyzer_time.value (sent at $message.analyzer_time.value) #end if #end if #end filter #filter Filter #end filter #end block message_fields #block timeline_extra_content #filter CleanOutput $_("Filter") #end filter #filter Filter #end filter #end block