Add dashboard rule atlas
This commit is contained in:
parent
5db88d285e
commit
e43d7689a0
7 changed files with 130 additions and 17 deletions
|
|
@ -287,10 +287,11 @@ sudo systemctl enable --now enodia-sentinel-web
|
|||
saved on first run and printed in the startup line. Open
|
||||
`https://<tailscale-ip>:8787/?token=…`.
|
||||
- **Read-only management**: incidents, timelines, alert inventory, posture
|
||||
findings, event tail, and dry-run response plans. No commands are executed
|
||||
from the browser. JSON
|
||||
findings, event rule atlas, event tail, and dry-run response plans. No
|
||||
commands are executed from the browser. JSON
|
||||
API at `/api/status`, `/api/incidents`, `/api/respond/plan/<id>`,
|
||||
`/api/posture`, `/api/alerts`, `/api/alerts/<id>`, `/api/events`.
|
||||
`/api/posture`, `/api/rules`, `/api/alerts`, `/api/alerts/<id>`,
|
||||
`/api/events`.
|
||||
|
||||
CLI-generated response plans are saved for handoff/review under
|
||||
`<log_dir>/response-plans/`, with a JSONL trail in
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue