wazuh / wazuh-dashboard-plugins

Plugins for Wazuh Dashboard
https://wazuh.com/
GNU General Public License v2.0
426 stars 176 forks source link

Implement vulnerabilities per app table on vulnerability inventory #4212

Open gdiazlo opened 2 years ago

gdiazlo commented 2 years ago

Describe the solution you'd like

Currently, we have a single table which list all the vulnerabilities on an endpoint. We want to group by application, so we can get a list of vulnerable applications and know how many vulnerabilities on each severity an application has:

application name | total | critical | high | medium | low

We need to design a way to either generate a new custom table to handle this query, or to include a button which will make the current table show this list.

Current layout:

image

Desvelao commented 1 year ago

Research

I think it is only possible with the current API endpoints if we get all the data and group by application name. This means, the table pagination is done in the frontend and not through the API, so it implies a heavy load to the API because we need to get all the vulnerabilities.

I asked the API team if the data collection is possible with the current API endpoints or it is required the creation of a new one.

Desvelao commented 1 year ago

@davidjiglesias commented to us that the currently available API endpoints don't allow the required query and that must be discussed about the global queries.

A meeting should be done to talk about this topic.