Skip to content

feat: add initial_notification_date to Event and notification_delay_s…#243

Open
puckk wants to merge 1 commit into
mainfrom
feature/mttr-notification-delay
Open

feat: add initial_notification_date to Event and notification_delay_s…#243
puckk wants to merge 1 commit into
mainfrom
feature/mttr-notification-delay

Conversation

@puckk
Copy link
Copy Markdown

@puckk puckk commented Apr 3, 2026

…econds to Case for MTTR measurement

  • Add Event.initial_notification_date (optional DateTimeField) to store external detection timestamp (e.g. IntelMQ time.observation)
  • Add Case.notification_delay_seconds (FloatField) calculated on first transition to attended state
  • Update EventSerializer and CaseSerializer to expose new fields
  • Add migration 0024

…_delay_seconds for MTTR

- Event.date: removed default=timezone.now, now null/blank. Set by IntelMQ (time.observation) or GUI
- Case.notification_delay_seconds: calculated on first transition to attended state as (attend_date - event.date)
- CaseSerializer: expose notification_delay_seconds as read-only
- Migration 0024: AlterField event.date + AddField case.notification_delay_seconds
@puckk puckk force-pushed the feature/mttr-notification-delay branch from 9cb0b6a to bb97c71 Compare April 3, 2026 23:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant