search

cvtienhoven / graylog-plugin-aggregates

Aggregates plugin for Graylog
https://marketplace.graylog.org
GNU General Public License v3.0
53 stars 12 forks source link

[NEW FUNCTIONALITY] Create report on demand #12

Open pmmivv opened 7 years ago

pmmivv commented 7 years ago

Hi, i have a important question to you. If i need to create a report on demand to a customer is possible? Or is this a future function?

I will give you an exemple now. Imagine, is Monday, and your company if attacked. Your boss calls an emergency meeting and need's the report of the last 3 days, including the current Monday. What you will say? "Hey boss, please wait to the next saturday, the plugins only generate report's there" That an unfortunate situation to explain to her and likely you will be fired, so i'm thinking in something like a button to generate the report when you pick the time in calendar and also pick the current alarms to report.

Please, fell free to contact me because to discuss more that functionality because our company are really interested in that functionality.

cvtienhoven commented 7 years ago

Hi @pmmivv, thanks for your comment. First of all, I sincerely hope that you won't get fired over a report :)

Secondly, what version of the plugin are you using? If you use version 1.0.1, you can create your own report schedules. If you need a report on demand, what you would need to do is create a schedule with the CRON expression *_0 ? _ (which will lead to a report the every minute) with timespan P3D**, and assign that schedule to the rules you wish to report about.

pmmivv commented 7 years ago

Hi @cvtienhoven. thanks for your response That only one exemple that i expose to you. Isn't a real situation yet ;)

Yes, i'm using the 1.0.1 version and i've seen that new functionality but a think you can improve that with a much more friendly interface to the end user. The current solution forces the user to change every role one by one just for one time and them role back the changes if my goal was only one report.

So think on that please with a new improvement to you plugin.

Thanks PV

cvtienhoven commented 7 years ago

Hi @pmmivv, I get your point. I'll take your suggestion in consideration. In the meanwhile (as a workaround), you could check if you could script some operations against the API to make the reporting of many rules a bit more efficient.

pmmivv commented 7 years ago

@cvtienhoven Thank you for your suport ;)

Best regards and if you need any extra information please ask me.

PV