The goal of this app is to provide a convenient way to view Suricata eve.json files to help review intrusion detection and prevention system logs. For this first version, this application focuses on presenting alert event types only with these features:

• Load and delete alerts from eve.json files.

• Visually segregate alerts based on their severities and summarize the counts by the rule signature names.

• Filter alerts based on time stamp range or based on the text in the raw JSON.

• Display alert details in a tab format that presents details without the need to scroll and the ability to quickly view the relevant details quickly for individual events.

• Select the text of the events, to enable the use of MacOS tools like MacOS Shortcuts and Apple Intelligence.

Keep checking for updates to this app and please let us know if you have any feature requests as well.

Sample Suricata eve.json files are here for you to test it: https://github.com/medio-projects/solar-system