Feature: Stored Default Inbox View

[demospace]

Running Suricata in IPS mode, I'm often most interested in alerts that were also alert.action:allowed. Typically these are edge cases that I haven't set to block but would like brought to my attention.

It's possible to create a shortcut/saved url for the inbox like this: http://host/#/inbox;q=alert.action:allowed, but that filter/query is lost each time you navigate away from inbox. It would be great if we could apply a default filter for Inbox.