Adapt detection page to UnifiedAlert API

Browse Source

Replace old AlertLog type (rf_score, ensemble_score, confidence-based
severity) with UnifiedAlert matching the backend serde output:
- source: ml | rule | fusion
- severity: high | critical (from backend, not derived from confidence)
- rule_sid / rule_msg fields for rule/fusion alerts
- attack_type now nullable

Other fixes carried over:
- getAiAlertStream -> getDetectionAlertStream
- isPausedRef pattern prevents WS re-subscription on pause toggle
- Dual filter: severity x source
- Stats cards expanded to 7 (Total/Critical/High/ML/Rule/Fusion/UniqueIPs)
- ML scores only shown for ml/fusion; rule details only for rule/fusion
- AIDetectionTypes import removed; all types defined inline

https://claude.ai/code/session_01Wen51749mAnwBEfh7XmvUw

...

This commit is contained in:

Claude 2026-05-19 12:32:59 +00:00

parent 3bfcbd9727

commit 4c4b51800f

No known key found for this signature in database

1 changed files with 595 additions and 501 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1096

.research/frontend-refactor/detection.tsx

File diff suppressed because it is too large Load Diff