Mirrors/marcredhat-siem-toolkit-patched
1
0
Fork 0
mirror of https://github.com/marcredhat/SIEM-toolkit-patched synced 2026-06-11 05:41:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add per-row copy button to Live Event Sampler message column

Browse Source 
Message column is pinned last, shows 80 chars with tooltip for the full
value, and has a ⎘ copy button that flashes ✓ on success. Other field
cells are unchanged.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Mick
2026-05-19 13:18:44 -04:00
parent 5421b2de61
commit 799e413041
1 changed files with 26 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
frontend/index.html
+26 -4
View File
@@ -738,13 +738,25 @@ async function qsSample() {
document.getElementById('qs-result').innerHTML = '<p class="text-gray-500 text-sm">No events found for this source in the selected window.</p>' document.getElementById('qs-result').innerHTML = '<p class="text-gray-500 text-sm">No events found for this source in the selected window.</p>'
return return
} }
// Collect all field names across events // Collect all field names across events — pin message last for readability
const allFields = [...new Set(r.events.flatMap(e => Object.keys(e)))].sort() const allFieldsRaw = [...new Set(r.events.flatMap(e => Object.keys(e)))].sort()
const rows = r.events.map(ev => { const allFields = [...allFieldsRaw.filter(f => f !== 'message'), ...allFieldsRaw.filter(f => f === 'message')]
const rows = r.events.map((ev, ri) => {
const cells = allFields.map(f => { const cells = allFields.map(f => {
const v = ev[f] const v = ev[f]
const empty = v === null || v === undefined || v === '' || v === 'null' const empty = v === null || v === undefined || v === '' || v === 'null'
return `<td class="py-1.5 px-2 text-xs font-mono max-w-32 truncate ${empty ? 'text-gray-700 italic' : 'text-gray-300'}" title="${esc(String(v??''))}">${empty ? '∅' : esc(String(v).slice(0,40))}</td>` const raw = String(v ?? '')
if (f === 'message' && !empty) {
return `<td class="py-1.5 px-2 text-xs font-mono text-gray-300 max-w-md">
<div class="flex items-start gap-1.5">
<span class="truncate flex-1" title="${esc(raw)}">${esc(raw.slice(0, 80))}${raw.length > 80 ? '…' : ''}</span>
<button onclick="qsCopyMsg(this, ${ri})" data-msg="${esc(raw).replace(/"/g, '&quot;')}"
class="shrink-0 px-1.5 py-0.5 rounded text-gray-600 hover:text-gray-200 hover:bg-gray-700 transition-colors text-xs leading-none"
title="Copy message">⎘</button>
</div>
</td>`
}
return `<td class="py-1.5 px-2 text-xs font-mono max-w-32 truncate ${empty ? 'text-gray-700 italic' : 'text-gray-300'}" title="${esc(raw)}">${empty ? '∅' : esc(raw.slice(0,40))}</td>`
}).join('') }).join('')
return `<tr class="border-b border-gray-800/40 hover:bg-gray-800/20">${cells}</tr>` return `<tr class="border-b border-gray-800/40 hover:bg-gray-800/20">${cells}</tr>`
}).join('') }).join('')
@@ -762,6 +774,16 @@ async function qsSample() {
} finally { setBtn('btn-qs', false, 'Sample') } } finally { setBtn('btn-qs', false, 'Sample') }
} }
function qsCopyMsg(btn, idx) {
const msg = btn.dataset.msg
navigator.clipboard.writeText(msg).then(() => {
const orig = btn.textContent
btn.textContent = '✓'
btn.classList.add('text-emerald-400')
setTimeout(() => { btn.textContent = orig; btn.classList.remove('text-emerald-400') }, 1500)
})
}
// ── Field Population Rate ────────────────────────────────────────────────── // ── Field Population Rate ──────────────────────────────────────────────────
async function qpAnalyze() { async function qpAnalyze() {