dfir-iris / iris-web

Collaborative Incident Response platform
GNU Lesser General Public License v3.0
1.08k stars 185 forks source link

[FR] Case, Alerts Export csv, json #283

Open kim-namjin opened 1 year ago

kim-namjin commented 1 year ago

Is your feature request related to a problem? Please describe. IRIS Web에서 Alerts와 Case 현황에서 필터한 결과를 CSV, JSON형태로 결과 내보내기가 되었으면 좋겠습니다.

ex) https://v200.beta.dfir-iris.org/alerts?cid=1&page=1&per_page=10&sort=desc&alert_severity_id=6&is-expanded=true#

해당 페이지에서 Severity가 Critical인 경우 필터를 하고, 이를 CSV, JSON으로 export 하는 기능이 필요합니다.

Ektoplasma commented 1 year ago

Kim Namjin,

It would be a handy feature, thanks for pointing that out.

Meanwhile, you can use the api to filter alerts and get the json export easily: https://docs.dfir-iris.org/_static/iris_api_reference_v2.0.1.html#tag/Alerts/operation/get-alerts-filter

I advise to use the python client: https://docs.dfir-iris.org/python_client/

The method filter_alerts from Alert class should be what you are looking for: https://github.com/dfir-iris/iris-client/blob/master/dfir_iris_client/alert.py