Details
-
Bug
-
Status: Done
-
Major
-
Resolution: Done
-
None
-
None
-
None
Description
Currently, Alerts UI sends a query request to the REST API every time the userĀ
- add new filter
- clear filters
- change time range
This behavior keeps the list of alerts and the state of the filtering in sync: every time the filter changes the visualized data change with it.
The drawback of this behavior is itĀ fires multiple query requests while the user tries to set up a more complex filter.
The following scenario:
- clearing the current filter
- changing the time range
- adding a filter for ip_src_addr
- adding a filter for source:type
- pressing the query button
leads 5 queries instead of one. In the case of large data sets, this could lead to unnecessary load and UI glitches (results update the alerts table with partially filtered data).
Attachments
Issue Links
- links to