search

TheHive-Project / TheHive

TheHive: a Scalable, Open Source and Free Security Incident Response Platform
https://thehive-project.org
GNU Affero General Public License v3.0
3.45k stars 625 forks source link

New "link" button next to the reference. How? #1070

Open xme opened 5 years ago

xme commented 5 years ago

I just realized that my MISP events imported into TheHive have a small icon next to the alert reference. This points to the MISP event URL. How can I replicate the same behaviour in alerts created via the API? Is there a specific field to submit? I did not find anything relevant... Tx!

nadouani commented 5 years ago

This is an option just for MISP alerts (for now). It has been added after several people requesting it.

xme commented 5 years ago

That explains why I did not find more info! :) Any chance to have this integrated at a broader level? This could be really useful to point to content related to the alerts (ex: Splunk alerts) Tx for prompt feedback!

ITServ-DE commented 5 years ago

I support this request. Having the posibility to add a link would be awesome in an environment where alerts are created with hive4py.

nadouani commented 5 years ago

We could imagine adding a url or link field to Alerts, but this will require a database migration again :(

ITServ-DE commented 5 years ago

If it was a feature for 3.4.0, all users coming from the official relase 3.3.1 would have one DB mig, anyway

nadouani commented 5 years ago

This is valid if you can suppose all the users use just stable releases in production :)