/* tab-siem.css -- Tab SIEM Seguridad */

/* ─── KPI Cards ─────────────────────────────────────────────────────────── */
.siem-kpi-grid {
    display: grid;
    grid-template-columns: repeat(auto-fit, minmax(160px, 1fr));
    gap: 1rem;
    margin-bottom: 1.5rem;
}

.siem-kpi-card {
    background: var(--ircnl-surface);
    border-radius: 8px;
    padding: 1rem 1.25rem;
    border-left: 4px solid var(--ircnl-primary);
    min-height: 90px;
    display: flex;
    flex-direction: column;
    justify-content: space-between;
}

.siem-kpi-card.kpi-alerta  { border-left-color: #dc3545; background: #fff5f5; }
.siem-kpi-card.kpi-warn    { border-left-color: #fd7e14; background: #fff8f2; }
.siem-kpi-card.kpi-ok      { border-left-color: #28a745; background: #f4fdf6; }
.siem-kpi-card.kpi-info    { border-left-color: #2C4851; }

.siem-kpi-label {
    font-size: 0.78rem;
    color: var(--ircnl-text-muted);
    font-weight: 600;
    text-transform: uppercase;
    letter-spacing: 0.03em;
}

.siem-kpi-valor {
    font-size: 2rem;
    font-weight: 700;
    color: var(--ircnl-text);
    line-height: 1.1;
}

.siem-kpi-valor.valor-alerta { color: #dc3545; }
.siem-kpi-valor.valor-warn   { color: #fd7e14; }
.siem-kpi-valor.valor-ok     { color: #28a745; }

/* ─── Seccion distribucion ──────────────────────────────────────────────── */
.siem-distrib-grid {
    display: grid;
    grid-template-columns: 1fr 1fr;
    gap: 1.25rem;
    margin-bottom: 1.5rem;
}

@media (max-width: 900px) {
    .siem-distrib-grid { grid-template-columns: 1fr; }
}

.siem-panel {
    background: var(--ircnl-surface);
    border-radius: 8px;
    padding: 1rem 1.25rem;
    border: 1px solid var(--ircnl-border-light);
}

.siem-panel-titulo {
    font-size: 0.82rem;
    font-weight: 700;
    color: var(--ircnl-text-muted);
    text-transform: uppercase;
    letter-spacing: 0.04em;
    margin-bottom: 0.85rem;
    border-bottom: 1px solid var(--ircnl-border-light);
    padding-bottom: 0.5rem;
}

/* Barra horizontal de nodos */
.siem-nodo-row {
    display: grid;
    grid-template-columns: 130px 1fr 55px;
    align-items: center;
    gap: 0.6rem;
    margin-bottom: 0.55rem;
}

.siem-nodo-name {
    font-size: 0.82rem;
    font-family: monospace;
    color: var(--ircnl-text);
    white-space: nowrap;
    overflow: hidden;
    text-overflow: ellipsis;
}

.siem-bar-track {
    background: #e9ecef;
    border-radius: 3px;
    height: 10px;
    overflow: hidden;
}

.siem-bar-fill {
    height: 100%;
    border-radius: 3px;
    background: var(--ircnl-primary);
    transition: width 0.4s ease;
}

.siem-bar-fill.fill-alerta { background: #dc3545; }
.siem-bar-fill.fill-warn   { background: #fd7e14; }

.siem-nodo-count {
    font-size: 0.8rem;
    font-weight: 700;
    text-align: right;
    color: var(--ircnl-text);
}

/* Event ID list */
.siem-eid-row {
    display: flex;
    justify-content: space-between;
    align-items: center;
    padding: 0.35rem 0;
    border-bottom: 1px solid var(--ircnl-border-light);
    font-size: 0.82rem;
}

.siem-eid-badge {
    font-family: monospace;
    font-size: 0.75rem;
    background: #e9ecef;
    color: #495057;
    border-radius: 4px;
    padding: 0.15rem 0.45rem;
    margin-right: 0.5rem;
    flex-shrink: 0;
}

.siem-eid-badge.badge-critico {
    background: #ffebee;
    color: #c62828;
}

.siem-eid-nombre { flex: 1; color: var(--ircnl-text); }
.siem-eid-total  { font-weight: 700; color: var(--ircnl-text); margin-left: 0.5rem; }

/* ─── Sparkline 24h ──────────────────────────────────────────────────────── */
.siem-sparkline-panel {
    background: var(--ircnl-surface);
    border-radius: 8px;
    padding: 1rem 1.25rem;
    border: 1px solid var(--ircnl-border-light);
    margin-bottom: 1.5rem;
}

.siem-spark-contenedor {
    display: flex;
    align-items: flex-end;
    gap: 3px;
    height: 60px;
    margin-top: 0.75rem;
}

.siem-spark-barra {
    flex: 1;
    border-radius: 2px 2px 0 0;
    background: #2C4851;
    min-height: 2px;
    position: relative;
    transition: opacity 0.2s;
    cursor: default;
}

.siem-spark-barra:hover { opacity: 0.75; }
.siem-spark-barra.barra-alerta { background: #dc3545; }
.siem-spark-barra.barra-mixta  { background: #fd7e14; }

.siem-spark-hora {
    display: flex;
    justify-content: space-between;
    font-size: 0.7rem;
    color: var(--ircnl-text-muted);
    margin-top: 4px;
}

/* ─── Filtros ─────────────────────────────────────────────────────────────── */
.siem-filtros {
    display: flex;
    flex-wrap: wrap;
    gap: 0.6rem;
    align-items: center;
    margin-bottom: 1rem;
    background: var(--ircnl-surface);
    padding: 0.75rem 1rem;
    border-radius: 8px;
    border: 1px solid var(--ircnl-border-light);
}

.siem-filtros label {
    font-size: 0.78rem;
    color: var(--ircnl-text-muted);
    font-weight: 600;
    white-space: nowrap;
}

.siem-filtros select,
.siem-filtros input[type="text"],
.siem-filtros input[type="number"] {
    padding: 0.35rem 0.6rem;
    border: 1px solid var(--ircnl-border-light);
    border-radius: 5px;
    font-size: 0.82rem;
    color: var(--ircnl-text);
    background: #fff;
    max-width: 160px;
}

.siem-btn {
    padding: 0.35rem 0.9rem;
    border: none;
    border-radius: 5px;
    font-size: 0.82rem;
    font-weight: 600;
    cursor: pointer;
    transition: opacity 0.15s;
}

.siem-btn:hover { opacity: 0.85; }
.siem-btn-filtrar { background: var(--ircnl-primary); color: #fff; }
.siem-btn-limpiar { background: #e9ecef; color: var(--ircnl-text); }

/* ─── Tabla de eventos ────────────────────────────────────────────────────── */
.siem-tabla-wrap { overflow-x: auto; }

.siem-tabla {
    width: 100%;
    border-collapse: collapse;
    font-size: 0.82rem;
}

.siem-tabla thead tr {
    background: var(--ircnl-primary);
    color: #fff;
}

.siem-tabla th {
    padding: 0.6rem 0.75rem;
    text-align: left;
    font-weight: 600;
    white-space: nowrap;
}

.siem-tabla td {
    padding: 0.5rem 0.75rem;
    border-bottom: 1px solid var(--ircnl-border-light);
    vertical-align: top;
}

.siem-tabla tbody tr:hover { background: #f8f9fa; }
.siem-tabla tbody tr.fila-critica { background: #fff5f5; }
.siem-tabla tbody tr.fila-critica:hover { background: #ffe8e8; }

.siem-level-pill {
    display: inline-block;
    padding: 0.15rem 0.5rem;
    border-radius: 4px;
    font-size: 0.72rem;
    font-weight: 600;
    white-space: nowrap;
}

.siem-level-pill.level-information { background: #e8f5e9; color: #2e7d32; }
.siem-level-pill.level-warning     { background: #fff3e0; color: #e65100; }
.siem-level-pill.level-error       { background: #ffebee; color: #c62828; }
.siem-level-pill.level-critical    { background: #b71c1c; color: #fff; }

.siem-hostname-chip {
    font-family: monospace;
    font-size: 0.78rem;
    background: #e9ecef;
    padding: 0.1rem 0.4rem;
    border-radius: 3px;
}

.siem-desc {
    max-width: 320px;
    overflow: hidden;
    text-overflow: ellipsis;
    white-space: nowrap;
    color: #6c757d;
}

/* ─── Paginacion ─────────────────────────────────────────────────────────── */
.siem-paginacion {
    display: flex;
    align-items: center;
    justify-content: space-between;
    margin-top: 0.75rem;
    font-size: 0.82rem;
    color: var(--ircnl-text-muted);
}

.siem-pag-botones {
    display: flex;
    gap: 0.4rem;
}

.siem-pag-btn {
    padding: 0.3rem 0.7rem;
    border: 1px solid var(--ircnl-border-light);
    border-radius: 4px;
    background: #fff;
    cursor: pointer;
    font-size: 0.8rem;
    color: var(--ircnl-text);
    transition: background 0.15s;
}

.siem-pag-btn:hover:not(:disabled) { background: #e9ecef; }
.siem-pag-btn:disabled { opacity: 0.45; cursor: default; }
.siem-pag-btn.activo   { background: var(--ircnl-primary); color: #fff; border-color: var(--ircnl-primary); }

/* ─── Estados vacio / cargando ───────────────────────────────────────────── */
.siem-estado {
    text-align: center;
    padding: 2.5rem 1rem;
    color: var(--ircnl-text-muted);
    font-size: 0.9rem;
}

.siem-error {
    background: #fff5f5;
    border: 1px solid #f5c6cb;
    border-radius: 6px;
    color: #c62828;
    padding: 0.85rem 1.1rem;
    font-size: 0.85rem;
    margin-bottom: 1rem;
}

/* ─── Security State Banner ──────────────────────────────────────────────── */
.siem-security-banner {
    display: flex;
    align-items: center;
    gap: 0.6rem;
    padding: 0.6rem 1rem;
    border-radius: 6px;
    font-size: 0.82rem;
    font-weight: 600;
    margin-bottom: 1rem;
    flex-wrap: wrap;
}

.siem-banner-estado-normal  { background: #e8f5e9; color: #1b5e20; border: 1px solid #a5d6a7; }
.siem-banner-estado-alerta  { background: #fff8e1; color: #e65100; border: 1px solid #ffcc80; }
.siem-banner-estado-critico { background: #ffebee; color: #b71c1c; border: 1px solid #ef9a9a; }

.siem-banner-dot {
    width: 10px;
    height: 10px;
    border-radius: 50%;
    flex-shrink: 0;
    animation: siem-pulse 2s infinite;
}

.siem-banner-estado-normal  .siem-banner-dot { background: #388e3c; }
.siem-banner-estado-alerta  .siem-banner-dot { background: #f57c00; }
.siem-banner-estado-critico .siem-banner-dot { background: #c62828; }

@keyframes siem-pulse {
    0%, 100% { opacity: 1; }
    50%       { opacity: 0.4; }
}

.siem-banner-sep  { color: inherit; opacity: 0.5; }
.siem-banner-time { margin-left: auto; font-weight: 400; font-size: 0.78rem; opacity: 0.8; white-space: nowrap; }

/* ─── Vista Selector (pestanas) ──────────────────────────────────────────── */
.siem-vista-selector {
    display: flex;
    gap: 0.4rem;
    margin-bottom: 1.25rem;
    border-bottom: 2px solid var(--ircnl-border-light);
    padding-bottom: 0;
}

.siem-vista-btn {
    padding: 0.45rem 1rem;
    border: 1px solid var(--ircnl-border-light);
    border-bottom: none;
    border-radius: 6px 6px 0 0;
    background: #f8f9fa;
    color: var(--ircnl-text-muted);
    font-size: 0.82rem;
    font-weight: 600;
    cursor: pointer;
    transition: background 0.15s, color 0.15s;
    position: relative;
    bottom: -2px;
}

.siem-vista-btn:hover { background: #e9ecef; color: var(--ircnl-text); }

.siem-vista-btn.activo {
    background: #fff;
    color: var(--ircnl-primary);
    border-color: var(--ircnl-border-light);
    border-bottom-color: #fff;
}

/* ─── KPI Card — icono y badge ───────────────────────────────────────────── */
.siem-kpi-icono {
    font-size: 1.35rem;
    line-height: 1;
    margin-bottom: 0.25rem;
}

.siem-kpi-badge {
    display: inline-block;
    font-size: 0.68rem;
    font-weight: 700;
    letter-spacing: 0.04em;
    text-transform: uppercase;
    padding: 0.15rem 0.5rem;
    border-radius: 3px;
    margin-top: 0.25rem;
}

.siem-kpi-badge.badge-neutral { background: #e9ecef; color: #495057; }
.siem-kpi-badge.badge-ok      { background: #e8f5e9; color: #2e7d32; }
.siem-kpi-badge.badge-warn    { background: #fff3e0; color: #e65100; }
.siem-kpi-badge.badge-alerta  { background: #ffebee; color: #c62828; }
.siem-kpi-badge.badge-critico { background: #b71c1c; color: #fff; }

/* ─── Alertas accionables ────────────────────────────────────────────────── */
.siem-alertas-panel {
    margin-bottom: 1.25rem;
}

.siem-alerta-card {
    background: var(--ircnl-surface);
    border-radius: 7px;
    border: 1px solid var(--ircnl-border-light);
    border-left-width: 4px;
    padding: 0.85rem 1rem;
    margin-bottom: 0.6rem;
}

.siem-alerta-card.alerta-p1 { border-left-color: #c62828; background: #fff5f5; }
.siem-alerta-card.alerta-p2 { border-left-color: #f57c00; background: #fffbf0; }

.siem-alerta-header {
    display: flex;
    align-items: center;
    gap: 0.5rem;
    margin-bottom: 0.35rem;
}

.siem-alerta-pill {
    font-size: 0.68rem;
    font-weight: 700;
    letter-spacing: 0.05em;
    padding: 0.15rem 0.45rem;
    border-radius: 3px;
    flex-shrink: 0;
}

.pill-p1 { background: #c62828; color: #fff; }
.pill-p2 { background: #f57c00; color: #fff; }

.siem-alerta-titulo {
    font-size: 0.88rem;
    font-weight: 700;
    color: var(--ircnl-text);
}

.siem-alerta-desc {
    font-size: 0.82rem;
    color: var(--ircnl-text-muted);
    margin-bottom: 0.5rem;
}

.siem-alerta-acciones {
    display: flex;
    flex-wrap: wrap;
    gap: 0.35rem;
}

.siem-alerta-chip {
    font-size: 0.72rem;
    background: #e9ecef;
    color: #495057;
    border-radius: 4px;
    padding: 0.15rem 0.5rem;
    font-weight: 600;
}

/* ─── Health Cards (estado por servidor) ─────────────────────────────────── */
.siem-health-grid {
    display: grid;
    grid-template-columns: repeat(auto-fill, minmax(130px, 1fr));
    gap: 0.65rem;
}

.siem-health-card {
    background: #f8f9fa;
    border: 1px solid var(--ircnl-border-light);
    border-radius: 6px;
    padding: 0.65rem 0.75rem;
    border-top-width: 3px;
    text-align: center;
}

.siem-health-card.health-normal  { border-top-color: #28a745; }
.siem-health-card.health-alerta  { border-top-color: #fd7e14; background: #fffbf0; }
.siem-health-card.health-critico { border-top-color: #dc3545; background: #fff5f5; }

.siem-health-hostname {
    font-size: 0.72rem;
    font-family: monospace;
    color: var(--ircnl-text-muted);
    white-space: nowrap;
    overflow: hidden;
    text-overflow: ellipsis;
    margin-bottom: 0.25rem;
}

.siem-health-count {
    font-size: 1.4rem;
    font-weight: 700;
    color: var(--ircnl-text);
    line-height: 1.1;
}

.siem-health-sub {
    font-size: 0.68rem;
    color: var(--ircnl-text-muted);
    text-transform: uppercase;
    letter-spacing: 0.04em;
}

.siem-health-fallos {
    font-size: 0.72rem;
    color: #c62828;
    font-weight: 600;
    margin-top: 0.2rem;
}

.siem-health-time {
    font-size: 0.68rem;
    color: var(--ircnl-text-muted);
    margin-top: 0.3rem;
    font-family: monospace;
}

/* ─── Filas expandibles ──────────────────────────────────────────────────── */
.siem-tabla tbody tr {
    cursor: pointer;
}

.siem-tabla tbody tr.fila-activa {
    background: #e8f0fe !important;
    outline: 2px solid #4a90d9;
    outline-offset: -2px;
}

.siem-tabla tbody tr.fila-detalle {
    cursor: default;
    background: #f0f4ff;
}

.siem-tabla tbody tr.fila-detalle:hover {
    background: #f0f4ff;
}

.siem-detalle-panel {
    padding: 0.65rem 0.85rem;
    border-top: 1px dashed var(--ircnl-border-light);
}

.siem-detalle-meta {
    display: flex;
    flex-wrap: wrap;
    gap: 1rem;
    font-size: 0.78rem;
    color: var(--ircnl-text-muted);
    margin-bottom: 0.45rem;
}

.siem-detalle-meta strong { color: var(--ircnl-text); }

.siem-detalle-desc {
    font-size: 0.82rem;
    color: var(--ircnl-text);
    background: #fff;
    border: 1px solid var(--ircnl-border-light);
    border-radius: 4px;
    padding: 0.5rem 0.7rem;
    white-space: pre-wrap;
    word-break: break-word;
    max-height: 120px;
    overflow-y: auto;
}

/* ─── Tabla de analisis (MITRE ATT&CK) ──────────────────────────────────── */
.siem-analisis-tabla {
    width: 100%;
    border-collapse: collapse;
    font-size: 0.82rem;
}

.siem-analisis-tabla thead tr {
    background: var(--ircnl-primary);
    color: #fff;
}

.siem-analisis-tabla th {
    padding: 0.55rem 0.7rem;
    text-align: left;
    font-weight: 600;
    white-space: nowrap;
}

.siem-analisis-tabla td {
    padding: 0.45rem 0.7rem;
    border-bottom: 1px solid var(--ircnl-border-light);
    vertical-align: middle;
}

.siem-analisis-tabla tbody tr:hover { background: #f8f9fa; }

.siem-mitre-pill {
    display: inline-block;
    font-size: 0.72rem;
    background: #e3f2fd;
    color: #1565c0;
    border-radius: 4px;
    padding: 0.15rem 0.45rem;
    font-weight: 600;
    margin-right: 0.35rem;
    vertical-align: middle;
}

.siem-mitre-tech {
    display: inline-block;
    font-size: 0.68rem;
    font-family: monospace;
    background: #fce4ec;
    color: #880e4f;
    border-radius: 4px;
    padding: 0.1rem 0.4rem;
    font-weight: 700;
    vertical-align: middle;
}