{%- extends "_layout_creatupdate.html" %} {%- block itemform_fields %} {{ macros_form.render_form_item_default(form.name) }} {{ macros_form.render_form_item_radiobutton(form.source_based) }} {{ macros_form.render_form_item_default(form.label_en) }} {{ macros_form.render_form_item_default(form.label_cz) }} {{ macros_form.render_form_item_default(form.reference) }}
{{ _('Some events describe several sources in separate sections, for example a host and the server it downloaded malware from.') }} {{ _('A report about one source IP shows only the sections containing that IP. Select the fields of the other source sections that should be shown in a separate block of the report.') }}
{{ _('Example') }}
"Source": [
{"IP4": ["10.0.0.5"], "Proto": ["tcp", "http"]},
{"IP4": ["10.0.1.9"], "Port": [80], "Type": ["Malware", "Downloaded"],
"URL": ["http://10.0.1.9/cat.sh"]}
]
{{ _('The report about') }} 10.0.0.5 {{ _('does not show the port, type and URL, because they belong to') }} 10.0.1.9.
{{ _('Selecting Port, Type and URL here makes them appear in that report.') }}