mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
divious1
79 lines
2.9 KiB
JavaScript
79 lines
2.9 KiB
JavaScript
require([
|
||
'underscore',
|
||
'jquery',
|
||
'splunkjs/mvc',
|
||
'splunkjs/mvc/searchmanager',
|
||
'../app/DA-ESS-ContentUpdate/js/lib/tabs',
|
||
'css!../app/DA-ESS-ContentUpdate/js/lib/tabs.css',
|
||
'css!../app/DA-ESS-ContentUpdate/escu_summary.css',
|
||
'splunkjs/mvc/simplexml/ready!'
|
||
], function(_, $, mvc, SearchManager) {
|
||
$('.es-soc-analytic-story-stats').html(_.template('<%- _("Analytic Story Summary").t() %>'));
|
||
$('.es-soc-search-stats').html(_.template('<%- _("Search Summary").t() %>'));
|
||
|
||
const tokenModel = mvc.Components.get('default');
|
||
const submittedTokens = mvc.Components.get('submitted');
|
||
|
||
$.ajax({
|
||
url: Splunk.util.make_url('/splunkd/__raw/servicesNS/nobody/DA-ESS-ContentUpdate/apps/local'),
|
||
type: 'GET',
|
||
async: true,
|
||
data: {
|
||
output_mode: 'json',
|
||
count: -1,
|
||
},
|
||
}).done(result => {
|
||
if (result.entry) {
|
||
const foundEss = result.entry.find(app => app.name === 'SplunkEnterpriseSecuritySuite');
|
||
if (foundEss.content.version === "5.2.0") {
|
||
submittedTokens.set('explore-use-case-es-show', 'true');
|
||
const use_case_library_link = Splunk.util.make_url('app/SplunkEnterpriseSecuritySuite/ess_use_case_library');
|
||
const template = `<div class="alert alert-info"><i class="icon-alert" />
|
||
${ _('Εxplore ESCU content updates directly from the Use Case Library within ES. To explore it, click').t() }
|
||
<a href="<%- use_case_library_link %>"> ${ _('here').t() }</a>.
|
||
</div>`;
|
||
$('#explore-use-case-es-info').html(_.template(template, { use_case_library_link: use_case_library_link }));
|
||
}
|
||
}
|
||
}).fail(err => {
|
||
});
|
||
|
||
|
||
|
||
// searchQuery -
|
||
let kcpSearch = new SearchManager({
|
||
id: "kcpSearch",
|
||
preview: true,
|
||
cache: true,
|
||
status_buckets: 300,
|
||
earliest_time: '-24h@h',
|
||
latest_time: 'now',
|
||
search: '| rest /services/configs/conf-analytic_stories splunk_server=local count=0 | spath input=mappings path=kill_chain_phases{} output=kcp | stats count by kcp',
|
||
});
|
||
|
||
let results = kcpSearch.data("preview");
|
||
|
||
results.on("data", function() {
|
||
results.data().rows.forEach(row => {
|
||
let killchainID = '#' + row[0].toLowerCase().replace(/ /g,'');
|
||
$(killchainID).html(row[1]);
|
||
});
|
||
});
|
||
|
||
$('#analytic_filter_clear').on('click', function() {
|
||
tokenModel.set('form.as_cis', '*');
|
||
tokenModel.set('form.as_category', '*');
|
||
tokenModel.set('form.as_kill_chain_phase', '*');
|
||
tokenModel.set('form.as_mitre_attack', '*');
|
||
tokenModel.set('form.as_data_models', '*');
|
||
});
|
||
|
||
$('#search_filter_clear').on('click', function() {
|
||
tokenModel.set('form.cis', '*');
|
||
tokenModel.set('form.searchtype', '*');
|
||
tokenModel.set('form.kill_chain_phase', '*');
|
||
tokenModel.set('form.mitre_attack', '*');
|
||
tokenModel.set('form.data_models', '*');
|
||
});
|
||
});
|