mirror of
https://github.com/marcredhat/SIEM-toolkit-patched
synced 2026-06-08 12:33:51 +00:00
Mick
c5a4f796a0
Key changes: - Unlabelled event banner: shows count only after Sample Events is clicked; uses broad SDL filter expression; time window synced to sync-days dropdown - Parser Quality: new "Attributes Missing" subsection listing all parsers without dataSource.name regardless of event volume - Coverage map: filter buttons (All / Complete Parser / Attributes Missing); stat card renamed to "Incomplete Parser"; stub count excluded from sync when no active sources - Sync All button: runs SDL parser sync → library sync → live sources sync in sequence - Reset now clears ActiveSource table and resets unlabelled count cache - run_powerquery: configurable max_count param (default 1000, 50M for count queries) - _DS_NAME_RE: supports both quoted and unquoted dataSource.name keys in parser files - Full modern UI redesign: slate palette, gradient cards, ring borders, pill nav, colored stat accents - Updated 7 tracked parser files synced from SDL Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
47 lines
1.1 KiB
YAML
47 lines
1.1 KiB
YAML
services:
|
|
frontend:
|
|
build: ./frontend
|
|
ports:
|
|
- "3001:3000"
|
|
depends_on:
|
|
- backend
|
|
|
|
backend:
|
|
build: ./backend
|
|
ports:
|
|
- "8001:8000"
|
|
environment:
|
|
- S1_API_TOKEN=${S1_API_TOKEN}
|
|
- S1_BASE_URL=${S1_BASE_URL}
|
|
- SDL_XDR_URL=${SDL_XDR_URL}
|
|
- SDL_LOG_READ_KEY=${SDL_LOG_READ_KEY}
|
|
- SDL_CONFIG_READ_KEY=${SDL_CONFIG_READ_KEY}
|
|
- ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY}
|
|
- DATABASE_URL=postgresql://siem:siem@db:5432/siem
|
|
- DETECTIONS_FILE=/app/data/detections.json
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
volumes:
|
|
- ./parsers:/app/parsers
|
|
- ./.env:/app/.env
|
|
- ./data:/app/data:ro
|
|
|
|
db:
|
|
image: postgres:16-alpine
|
|
environment:
|
|
- POSTGRES_DB=siem
|
|
- POSTGRES_USER=siem
|
|
- POSTGRES_PASSWORD=siem
|
|
volumes:
|
|
- pgdata:/var/lib/postgresql/data
|
|
- ./db/init.sql:/docker-entrypoint-initdb.d/init.sql
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U siem"]
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 5
|
|
|
|
volumes:
|
|
pgdata:
|