21 lines
1.9 KiB
Markdown
21 lines
1.9 KiB
Markdown
# Iteration Log - 2026-07-08-1644-n
|
|
|
|
* **Trigger**: `n` (next)
|
|
* **Requested**: Implement next enhancement task in order (Task 4.1).
|
|
* **Touched Sections**: Threat Intelligence & Audit (Task 4.1).
|
|
|
|
## Implementation Detail
|
|
1. **Event Schema**: Registered `EventSchema` (and `AppCategoryStatSchema` for future alignment) in `backend/models/Schemas.js` and `proxy/models/Schemas.js`.
|
|
2. **In-Proxy Fetcher**: Added `fetchEvents` (and `fetchTopAppCategories`) to `proxy/netifyClient.js` pointing to the `/event/events` endpoint, parsing raw JSON labels and severity categories.
|
|
3. **Proxy Database Ingestion**: Integrated MongoDB ingestion in `proxy/collector.js` to insert up to 100 recent events on every 5-minute schedule.
|
|
4. **Backend Route Refactor**: Refactored the GET `/events` route in `backend/routes/dashboard.js` to query MongoDB `events` collection, and updated the `/summary` route to dynamically count these documents to show distinct Events count in the dashboard header card.
|
|
5. **Build Verification**: Ran Next.js build (`npm run build`) which succeeded with no errors.
|
|
6. **Database Verification**: Verified using a local script that MongoDB has successfully ingested **500 system events** and **52 categories** across the active Network Agents.
|
|
|
|
## Current State
|
|
All system events shown on the Events page (`/events`) and in the top-right header log list are now derived from the actual live Netify API log (e.g., `New device Agent Device discovered`), replacing the simulated flow threat items.
|
|
The Overview page **Events** card now correctly displays the realtime system event count, completely decoupled from the **Threats** count.
|
|
|
|
## Considerations for next time
|
|
- In next runs (`n`/`next`), we can target task **2.1** to connect the newly ingested `AppCategoryStat` data into the Traffic Categories page (`/network-intelligence`) to replace the simulated app name group-by fields.
|