{%- extends "_layout_creatupdate.html" %} {%- block itemform_fields %} {{ macros_form.render_form_item_default(form.name) }} {{ macros_form.render_form_item_radiobutton(form.source_based) }} {{ macros_form.render_form_item_default(form.label_en) }} {{ macros_form.render_form_item_default(form.label_cz) }} {{ macros_form.render_form_item_default(form.reference) }}
{{ macros_form.render_form_item_select(form.displayed_main) }} {{ macros_form.render_form_item_select(form.displayed_source) }} {%- call macros_form.render_form_item_select_html(form.displayed_other_source) %}

{{ _('Some events describe several sources in separate sections, for example a host and the server it downloaded malware from.') }} {{ _('A report about one source IP shows only the sections containing that IP. Select the fields of the other source sections that should be shown in a separate block of the report.') }}

{{ _('Example') }}

"Source": [
  {"IP4": ["10.0.0.5"], "Proto": ["tcp", "http"]},
  {"IP4": ["10.0.1.9"], "Port": [80], "Type": ["Malware", "Downloaded"],
   "URL": ["http://10.0.1.9/cat.sh"]}
]

{{ _('The report about') }} 10.0.0.5 {{ _('does not show the port, type and URL, because they belong to') }} 10.0.1.9. {{ _('Selecting Port, Type and URL here makes them appear in that report.') }}

{%- endcall %} {{ macros_form.render_form_item_select(form.displayed_target) }} {{ macros_form.render_form_item_select(form.displayed_attach) }}
{{ macros_form.render_form_item_ransack(form.rule, search_events=True) }} {{ macros_form.render_form_item_ransack(form.subclassing) }} {{ macros_form.render_form_item_default(form.priority) }} {{ macros_form.render_form_item_select(form.severity) }} {{ macros_form.render_form_item_select(form.period) }} {{ macros_form.render_form_item_select(form.recurrence) }}
{{ macros_form.render_form_item_radiobutton(form.state) }} {%- endblock itemform_fields %} {%- block itemform_buttons %} {{ _("Cancel") }} {{ form.submit() }} {%- endblock itemform_buttons %} {%- block itemform_devel %} {%- if filter_tree %} {{ macros_site.render_raw_var('raw-filter-tree', filter_tree) }} {%- endif %} {%- endblock itemform_devel %} {%- block bodyjs %} {{ super() }} {%- endblock bodyjs %}