Skip to content

Commit d9bdb01

Browse files
mjabascal10mjabascal10
committed
feat: add Liquibase changelogs for updating filters and aggregations in Threat and Windows activity dashboards
1 parent 9f56d66 commit d9bdb01

5 files changed

Lines changed: 96 additions & 5 deletions

File tree

‎CHANGELOG.md‎

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,7 @@
1-
# UTMStack 11.1.5 – Release Notes
1+
# UTMStack 11.1.6 – Release Notes
22

3-
The **UTMStack v11.1.5** update delivers important fixes and usability improvements to enhance stability and user experience.
3+
The **UTMStack v11.1.6** update delivers important fixes and usability improvements to enhance stability and user experience.
44

55
## Improvements & Fixes
6-
- Standardized `utm_visualization` field names by replacing legacy O365 keys with new conventions.
7-
- Enhanced responsive behavior for TFA enrollment components based on viewport height.
6+
- Added Liquibase changelogs to update filters and aggregations for Threat and Windows activity dashboards.
87

‎backend/src/main/java/com/park/utmstack/config/Constants.java‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -164,7 +164,8 @@ public final class Constants {
164164
public static final List<String> API_ENDPOINT_IGNORE = Collections.emptyList();
165165

166166
// Application version file
167-
public static final String APP_VERSION_FILE = "/updates/version.json";
167+
// public static final String APP_VERSION_FILE = "/updates/version.json";
168+
public static final String APP_VERSION_FILE = "/Users/mjabascal/UTMSTACK/version/version.json";
168169

169170
public static final String ADMIN_EMAIL = "admin@localhost";
170171

‎backend/src/main/resources/config/liquibase/changelog/20251223001_update_filters_threat_activity_dashboard.xml‎

Lines changed: 47 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,47 @@
1+
<?xml version="1.0" encoding="utf-8"?>
2+
<databaseChangeLog
3+
xmlns="http://www.liquibase.org/xml/ns/dbchangelog"
4+
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
5+
xsi:schemaLocation="http://www.liquibase.org/xml/ns/dbchangelog http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-3.5.xsd">
6+
7+
<changeSet id="20251223001" author="Manuel Abascal">
8+
9+
<sql dbms="postgresql" splitStatements="true" stripComments="true">
10+
<![CDATA[
11+
12+
UPDATE public.utm_visualization
13+
SET filters='[{"operator":"EXIST","field":"name"},{"operator":"IS_BETWEEN","field":"@timestamp","value":["now-7d","now"]},{"field":"status","operator":"IS_NOT","value":1},{"field":"tags","operator":"IS_NOT","value":"False positive"},{"field":"parentId","operator":"DOES_NOT_EXIST"}]'
14+
WHERE id=486;
15+
16+
UPDATE public.utm_visualization
17+
SET filters='[{"operator":"IS","field":"statusLabel.keyword","value":"Open"},{"operator":"IS_BETWEEN","field":"@timestamp","value":["now-7d","now"]},{"operator":"IS","field":"isIncident","value":"false"},{"field":"status","operator":"IS_NOT","value":1},{"field":"tags","operator":"IS_NOT","value":"False positive"},{"field":"parentId","operator":"DOES_NOT_EXIST"}]'
18+
WHERE id=487;
19+
20+
UPDATE public.utm_visualization
21+
SET filters='[{"operator":"IS_BETWEEN","field":"@timestamp","value":["now-7d","now"]},{"operator":"IS","field":"isIncident","value":"true"},{"operator":"IS_ONE_OF","field":"statusLabel.keyword","value":["In review","Open"]},{"field":"status","operator":"IS_NOT","value":1},{"field":"tags","operator":"IS_NOT","value":"False positive"},{"field":"parentId","operator":"DOES_NOT_EXIST"}]'
22+
WHERE id=485;
23+
24+
UPDATE public.utm_visualization
25+
SET filters='[{"operator":"IS_BETWEEN","field":"@timestamp","value":["now-7d","now"]},{"operator":"EXIST","field":"severityLabel"},{"field":"status","operator":"IS_NOT","value":1},{"field":"tags","operator":"IS_NOT","value":"False positive"},{"field":"parentId","operator":"DOES_NOT_EXIST"}]'
26+
WHERE id=488;
27+
28+
UPDATE public.utm_visualization
29+
SET filters='[{"operator":"EXIST","field":"category"},{"operator":"IS_BETWEEN","field":"@timestamp","value":["now-7d","now"]},{"field":"status","operator":"IS_NOT","value":1},{"field":"tags","operator":"IS_NOT","value":"False positive"},{"field":"parentId","operator":"DOES_NOT_EXIST"}]'
30+
WHERE id=489;
31+
32+
UPDATE public.utm_visualization
33+
SET filters='[{"operator":"IS_BETWEEN","field":"@timestamp","value":["now-7d","now"]},{"field":"status","operator":"IS_NOT","value":1},{"field":"tags","operator":"IS_NOT","value":"False positive"},{"field":"parentId","operator":"DOES_NOT_EXIST"}]'
34+
WHERE id=490;
35+
36+
UPDATE public.utm_visualization
37+
SET filters='[{"operator":"IS_BETWEEN","field":"@timestamp","value":["now-7d","now"]},{"field":"status","operator":"IS_NOT","value":1},{"field":"tags","operator":"IS_NOT","value":"False positive"},{"field":"parentId","operator":"DOES_NOT_EXIST"}]'
38+
WHERE id=491;
39+
40+
UPDATE public.utm_visualization
41+
SET filters='[{"operator":"IS_BETWEEN","field":"@timestamp","value":["now-7d","now"]},{"field":"status","operator":"IS_NOT","value":1},{"field":"tags","operator":"IS_NOT","value":"False positive"},{"field":"parentId","operator":"DOES_NOT_EXIST"}]'
42+
WHERE id=492;
43+
44+
]]>
45+
</sql>
46+
</changeSet>
47+
</databaseChangeLog>

‎backend/src/main/resources/config/liquibase/changelog/20251223002_update_filters_windows_activity_dashboard.xml‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
<?xml version="1.0" encoding="utf-8"?>
2+
<databaseChangeLog
3+
xmlns="http://www.liquibase.org/xml/ns/dbchangelog"
4+
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
5+
xsi:schemaLocation="http://www.liquibase.org/xml/ns/dbchangelog http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-3.5.xsd">
6+
7+
<changeSet id="20251223002" author="Manuel Abascal">
8+
9+
<sql dbms="postgresql" splitStatements="true" stripComments="true">
10+
<![CDATA[
11+
12+
UPDATE public.utm_visualization
13+
SET filters = REPLACE(
14+
REPLACE(
15+
REPLACE(filters,
16+
'log.winlog.event_data.ServiceName.keyword',
17+
'log.winlogEventDataServiceName.keyword'
18+
),
19+
'winlog',
20+
'wineventlog'
21+
),
22+
'log.eventName',
23+
'log.eventName.keyword'
24+
);
25+
26+
UPDATE public.utm_visualization
27+
SET aggregation = REPLACE(
28+
REPLACE(aggregation,
29+
'log.winlog.event_data.ServiceName.keyword',
30+
'log.winlogEventDataServiceName.keyword'
31+
),
32+
'log.eventName',
33+
'log.eventName.keyword'
34+
);
35+
36+
]]>
37+
</sql>
38+
39+
</changeSet>
40+
</databaseChangeLog>

‎backend/src/main/resources/config/liquibase/master.xml‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -285,5 +285,9 @@
285285

286286
<include file="/config/liquibase/changelog/20251219001-update-instance-update-frequency.xml" relativeToChangelogFile="false"/>
287287

288+
<include file="/config/liquibase/changelog/20251223001_update_filters_threat_activity_dashboard.xml" relativeToChangelogFile="false"/>
289+
290+
<include file="/config/liquibase/changelog/20251223002_update_filters_windows_activity_dashboard.xml" relativeToChangelogFile="false"/>
291+
288292

289293
</databaseChangeLog>

0 commit comments

Comments
 (0)