Add case timeline section

[nadouani]

Request Type

Feature Request

Problem Description

TheHive stores all the user activities as "Audit Logs". The latest 10 entries of those logs are displayed in the right hand sidebar (the flow) which is updated continuously with new logs.

Currently, TheHive doesn't provide an interface to display/filter/sort all the logs related to a given case. The goal of this feature request is to implement a UI to navigate through the list of the audit logs of a case

Possible Solutions

Add a new tab in the case page (in addition to basic info, tasks, observables, links) called "Timeline", where we list all the audit logs corresponding to the case, with filtering and sorting capabilities.

[xg5-simon]

This is a desired feature for those of us that have to review task logs of a number of cases that others have worked.

[jlouie2]

Hi,
I was wondering if any work had been done on this feature? I was interested in working on this request.

[saadkadhi]

No work has been done yet. Feel free to contribute and send us a PR that we will gladly review. Thanks in advance.

[jlouie2]

I was thinking of putting the timeline as one of the tabs, like details, tasks, and observables of a case. I was thinking it could be similar to the "Tasks" tab, where it has a badge to display the number of logs for
a given case.

The default of the logs would be recent to old, so the most recent changes would be at the top of the page and the oldest changes would be at the very end. The user could filter out the logs based on the action performed, so "Deleted by", "Canceled by", "Added by", "Updated by", "Completed by", and "Closed by". I pulled this list from the live stream on the right hand side of TheHive. If you have any suggestions please let me know.


[jlouie2]

This is a rough sketch of what I was thinking the page could look like.

[matanme-s1]

Please promote this to development, this is a very desired feature

[venkebe]

+1 feature request. This would be very helpful!
Unfortunately not available in v4 either.

[H2Cyber]

+1 from me, would be awesome to have this

[B4mcruz]

+1 would be very useful

[KeikoWare]

+1 this is a much needed addon