Roadmap & UI for IPS section

[cyberzeus]

Hello,

The UI in the Intrusion Detection section really needs some serious improvement.  I do note the roadmap specifies "UI layout improvements and consolidation" so I am wondering if this will include improvements in the IPS section and if so, an idea of what is being done.

Also, the Roadmap is only showing the Jan 2018 release - surely you folks have this thing scoped far beyond one release ahead so do you plan on posting more than just the next release on the roadmap?

Thanks.

[franco]

Hi again,

The items are already on 17.7.x, it was no general overhaul. Mostly alert tab improvements for improved log skimming.

Some of us have been at Suricon this year and the reception of our UI has been positive and was said to be on par with commercial solutions, which can be more complicated to handle at times...

It's never not possible to improve this, but what I am trying to get at is that we need to talk about details of what can be improved instead of a general "serious improvement". It's hard to argue with that and that statement is true for anything, always.

As for scoping the road map... it's difficult to say what will happen in any given year. The thing we want to avoid is giving a precise outlook of the things we are going to be failing to do, because other things got in the way. We come from a legacy of never knowing if a major release is coming in the next year or not and we changed that. So everything else is bonus and new territory to evolve bit by bit.

This is largely a community-driven project that lives from feedback. We have a lot of areas that need improving, but picking the ones we like won't necessarily bring the project forward as a whole, so we try to strike a balance between long term planning and short term / agile development.

Long term goals are full MVC/API conversion, privilege separation a.k.a. no PHP as root. These are huge tasks, surely beyond 2018. What happens in between is always in motion. 6 months of sneak previews are what we can offer with reasonable confidence.


Cheers,
Franco