First release
- REST API based loggers, log schemas, query commands, dashboards, and detection rules.
- Support antivirus scan, antivirus alerts, web filter, ransomware execution, ransomware file access logs.
Improved error when a CEF field has an empty value that requires casting
Support for two additional log types
- SYSTEM
- NETWORK
Improved parsing failures due to difference in delimiter space count
First release
- Support dedicated log parser, logger model, and dahsboard.
Support Azure Front Door integration.
- Dedicated log parser, logger model, and dashboards.
First release
- Dedicated log parser, log schemas, logger model, and dashboard
- Extended query commands for eWalker WAF device
Fixed audit log collection delays due to Link header parsing failures.
Expanded AWS WAF collection fields and added concise option.
Added support for Organization ID on AWS S3 log path.
Fix ECS normalization typemapping error
Add supported log types (log format)
- EDR_V3_DETECT (CEF)
- EDR_AGENT_EVENT (CEF)
- EDR_OS_EVENT (CEF)
- AGENT_TASK_STATUS (CEF)
- AGENT_SW_ALL (CEF)
- AGENT_HW_ALL (CEF)
- SERVICE_EVENT (JSON)
- AUDIT_EVENT (JSON)
- ESA_EVENT (JSON)
- V3_MALWARE (JSON) - Add fields
Support for profile parameter in EPP extended query commands
Support New Logger and dashboard
- AWS SQS logger
- AWS Shield Advanced logger
- AWS Aurora with Database Activity Streams log integration
- AWS Shield, Aurora DB Activity dashboards
Added support for Java 21
Support four additional formats of V3.5.1 firmware
- HA event logs (ha_event)
- Oversubscription statistics log (oversubscription_cnt)
- Daemon monitor logs (daemon_cnt)
- Performance logs (resource_cnt)
- Alertlogs (alert)
Apply directionality when deleting (unblocking) an address group
First release
- Okta system log collector
- Okta dashboards: User, Device, Audit
- Okta query commands
Changed MNX log format.
Added new Google Workspace loggers and dashboards
- Added Google Workspace login logger
- Added Google Workspace admin activity logger
- Added Google Drive activity logger
- Added Google Meet activity logger
- Added Google Workspace login dashboard
- Added Google Workspace admin dashboard
- Updated Google Workspace user dashboard: Support 2FA KPI
- Updated Google Drive dashboard
- Updated Google Meet dashboard
Added users and dependabot dashboards
- Added github-dependabot-alerts command
- Added github-users command
- Added github-admins command
- Added github-2fa-disabled-users command
Support web bot classification and WAF alert analysis model
Support Azure Kubernetes audit logs.
- Logger model, log schema, and 3 dashboards
First release
- Provides ping status collection and dashboards (Support for CentOS 8 and Rocky 8)