Add filtering options to all Flow query types

Description

Currently the withHost filter only applies to Host flow queries and withApplication only applies to Application queries. It would be helpful to allow these filters on any query so one could have a panel that shows host traffic filtered by application.

There is a potential customer request for the ability to have a dashboard where two IPs can be entered and all panels filtered down to show just traffic between those two nodes. This could be achieved if there was a way for a conversations() query to specify one or two hosts. If one host is provided, it returns all conversations where the host is src or dst. If two hosts are provided, it returns only the conversations between the two, regardless which is src and which is dst.

Activity

Show:

Scott Theleman September 18, 2023 at 8:43 PM

It looks like we would need to modify the back end (Java) Rest API service to accept these filters and update calls to the TS DBs. Once that is done, then would update the OPG code to add the filters to UI and service call code.

Veena Kannan August 1, 2023 at 3:38 PM

Let’s evaluate first on this to understand the effort.

Details

Assignee

Reporter

Labels

HB Grooming Date

HB Backlog Status

Components

Affects versions

Fix versions

Priority

PagerDuty

Created July 31, 2023 at 9:56 PM
Updated September 18, 2023 at 8:43 PM