Add dashboard rule atlas

This commit is contained in:
Luna 2026-06-15 16:37:51 -07:00
parent 5db88d285e
commit e43d7689a0
7 changed files with 130 additions and 17 deletions

View file

@ -287,10 +287,11 @@ sudo systemctl enable --now enodia-sentinel-web
saved on first run and printed in the startup line. Open
`https://<tailscale-ip>:8787/?token=…`.
- **Read-only management**: incidents, timelines, alert inventory, posture
findings, event tail, and dry-run response plans. No commands are executed
from the browser. JSON
findings, event rule atlas, event tail, and dry-run response plans. No
commands are executed from the browser. JSON
API at `/api/status`, `/api/incidents`, `/api/respond/plan/<id>`,
`/api/posture`, `/api/alerts`, `/api/alerts/<id>`, `/api/events`.
`/api/posture`, `/api/rules`, `/api/alerts`, `/api/alerts/<id>`,
`/api/events`.
CLI-generated response plans are saved for handoff/review under
`<log_dir>/response-plans/`, with a JSONL trail in