Thehive: Add case timeline section
Request Type
Feature Request
Problem Description
TheHive stores all the user activities as "Audit Logs". The latest 10 entries of those logs are displayed in the right hand sidebar (the flow) which is updated continuously with new logs.
Currently, TheHive doesn't provide an interface to display/filter/sort all the logs related to a given case. The goal of this feature request is to implement a UI to navigate through the list of the audit logs of a case
Possible Solutions
Add a new tab in the case page (in addition to basic info, tasks, observables, links) called "Timeline", where we list all the audit logs corresponding to the case, with filtering and sorting capabilities.
nadouani
All 7 comments
This is a desired feature for those of us that have to review task logs of a number of cases that others have worked.
xg5-simon
on 7 Feb 2018
Hi,
I was wondering if any work had been done on this feature? I was interested in working on this request.
jlouie2
on 30 Jun 2018
No work has been done yet. Feel free to contribute and send us a PR that we will gladly review. Thanks in advance.
saadkadhi
on 30 Jun 2018
I was thinking of putting the timeline as one of the tabs, like details, tasks, and observables of a case. I was thinking it could be similar to the "Tasks" tab, where it has a badge to display the number of logs for
a given case.
The default of the logs would be recent to old, so the most recent changes would be at the top of the page and the oldest changes would be at the very end. The user could filter out the logs based on the action performed, so "Deleted by", "Canceled by", "Added by", "Updated by", "Completed by", and "Closed by". I pulled this list from the live stream on the right hand side of TheHive. If you have any suggestions please let me know.
jlouie2
on 5 Jul 2018
This is a rough sketch of what I was thinking the page could look like.
jlouie2
on 6 Jul 2018
Please promote this to development, this is a very desired feature
matanme-s1
on 8 Jun 2020
+1 feature request. This would be very helpful!
Unfortunately not available in v4 either.
venkebe
on 29 Oct 2020
Related issues
zpriddy
路
4Comments
vi-or-die
路
4Comments
smogm
路
5Comments
auslaender6
路
6Comments
ecapuano
路
6Comments
Most helpful comment
I was thinking of putting the timeline as one of the tabs, like details, tasks, and observables of a case. I was thinking it could be similar to the "Tasks" tab, where it has a badge to display the number of logs for
a given case.
The default of the logs would be recent to old, so the most recent changes would be at the top of the page and the oldest changes would be at the very end. The user could filter out the logs based on the action performed, so "Deleted by", "Canceled by", "Added by", "Updated by", "Completed by", and "Closed by". I pulled this list from the live stream on the right hand side of TheHive. If you have any suggestions please let me know.