Fix parser bug
- handle dump_id values exceeding integer limits
Bug Fixes
- Fixed a bug where the `sonar-verify-query` command failed to validate commands with multiple subqueries (e.g., the `fulltext` command)
- Improved the `log` command so that it explicitly returns an error for non-existent schemas
Initial Release
- Provides a logger model, parser, log schema, and dashboard for payShield HSM device logs.
* Renamed the APPLICATION log type to CONTENTS-FILTER to follow the AXGATE Syslog specification
* Changed the log schema code from axgate-ngfw-nf-application to axgate-ngfw-nf-contents-filter
**When upgrading from an earlier version, the contents filter rule in the logger model may keep its previous log schema. Delete the rule and reinstall the app to restore the correct schema binding**
Fixed bugs
- Fixed an issue where the dashboard time filter was not applied
- Fixed an issue where unknown logs were included in dashboard aggregation
First release
- Support for Claude Desktop, Claude Code
First release
* TippingPoint SMS ArcSight CEF Format v4.2 parser, SMS 2.5 Syslog Format parser, logger model, log schema, dashboard
Initial Release
- Provides a dedicated parser, log schemas and logger model for F5 BIG-IP Zero Trust Access logs.
Fixed network topology view failing to display in large-scale Event IP environments
Improvements & Changes
- Added the ASM dashboard.
- Changed the standard for the severity option in the quaxar-asm-assets command (now based on risk_factor_severities).
Bug Fixes
- Fixed an issue where threat feed synchronization looped infinitely.
- Fixed an issue where normal responses were misclassified as authentication failures.
Feature Updates
• Added an option to enable/disable payload decoding upon parser execution (configurable in the Parser menu)
• Improved CPU field parsing performance
Log Specification v1.1.1 Support
* Supports the XTG log parser specification v1.1.1 format
* Added the User Event (2405) log type and the `xtg-user-event` log schema
* Added session action, floating IP, source domain, application traffic counter, and proxy session type fields to Traffic Allow (2101) and Traffic Deny (2102)
* Added floating IP fields to Blocklist (2103), Regional Block (2104), IP/MAC Control (2105), and Protocol Anomaly (2106)
* Added the `xff_ip` field carrying the original client IP from the XFF header to Website Filter (2207)
* Stores the destination domain in both the existing `domain` field and the standard `dst_domain` field to maintain backward compatibility
First release
- kipris-patent-search, kipris-patent-biblio, kipris-patent-docs commands
Akamai Guardicore Web Console UI Implementation
- 14 query commands for assets, labels, rules, revisions management
- 8 menus: Dashboard, Network Log, Explore, Saved Maps, Rules, Revisions, Assets, Labels
Parser Improvements
- Added parsing logic for MNX detection information (Playbook detection info) types.
First Release
* Provides dedicated parsers, logger model, and log schemas for logs sent by AXGATE Next-Generation Firewall (NF) over Syslog (14 types including session, IPS, application, and anti-virus)
* Provides extended commands to look up and remotely modify/apply security policies and address, service, time, and NAT objects
* Provides extended commands to manage blacklist, whitelist, and blacklist-exclude entries and to block IP/MAC addresses
* Supports block integration that blocks attacker IPs in conjunction with real-time and batch detection
Improvement of Sonar version compatibility guard for SSO feature
Improvement of sonar version compatibility guard for SSO feature
Initial Release
- Provides a dedicated parser, logger model and log schemas for FortiManager 7.0.10 logs.
- Added Microsoft Intune logger model (Devices, DeviceComplianceOrg, OperationalLogs, AuditLogs)
- Supports Entra ID `NonInteractiveUserSignInLogs`
- Fixed Azure Firewall NAT Rule routing error