Skip to content

Crowdsec: Add alert inspect detail modal showing full alert info #5313

@GunnarLieb

Description

@GunnarLieb

Important notices
Before you add a new report, we ask you kindly to acknowledge the following:

Is your feature request related to a problem? Please describe.
When reviewing CrowdSec alerts in the OPNsense UI, the alerts grid only shows high-level information (IP, scenario, timestamp). To understand the full context of an alert — its triggered events, associated decisions, origin, and scenario details — you currently have to SSH into the firewall and run cscli alerts inspect manually. This makes alert triage slow and requires CLI access that many users may not have or want to use.

Describe the solution you'd like
decisions, and events via cscli alerts inspect. Validate numeric IDs on configdRun parameters in both alerts and decisions controllers.

Image Image

Describe alternatives you've considered
The only current alternative is CLI access via cscli alerts inspect. There is no way to get this information from the OPNsense web UI at all, so the modal is the most natural fit — no other UI pattern would expose this level of detail without leaving the page.

Additional context
See PR #5306

Metadata

Metadata

Assignees

No one assigned

    Labels

    incompleteIssue template missing info

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions