Graylog2 / Graylog2/graylog2-server

Add Event Definition type filter/column to Event Definition page

Open
#24,716 2 comments 0 reactions 0 assignees View on GitHub
feature triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

Provide a way to filter the list view of event definitions to specific types.
This is becoming more relevant as we add several new event definition type (Asset, Anomaly + the existing Sigma/Anomaly and filter/agg/corellation).

It would be nice if I just want to look at the state of multiple definitions but only care about Assets at the moment.

## What?

Pretty much exactly like the Event definition type filter on the Security Events page.

## Why?

I have several Asset/Sigma event definitions and want to see which ones are firing, but don't care about the others, but I have to sift through many irrelevant definitions to find the ones I care about.

## Your Environment

* Graylog Version:
* OpenSearch Version:
* MongoDB Version:
* Operating System:
* Browser version:

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.