Skip to content

v0.22.0

Compare
Choose a tag to compare
@philrz philrz released this 09 Jan 22:26
f6c7ba3

Visit the Brim Download page to find the package for your OS platform.

  • Add a customizable "Query Library" panel of clickable Z queries for working with Zeek and Suricata logs (#1272)
  • Add the source field to the JSON typing config to prepare for Zeek v4.x weird events (#1307)
  • Allow the export of query results in NDJSON and CSV formats (#1302, #1328)
  • Add a correlation visualization in the Log Detail view for pivoting from a Suricata alert back to related Zeek conn events (#1310)
  • Re-style the Log Detail panel and window (#1310)
  • Ensure _path and event_type fields are always displayed directly to the right of the ts timestamp field (#1339)
  • Pull-down menu option Window > Reset State now clears app state after user confirmation (#1338)
  • Update zq to v0.27.1 (follow that link for details of additional changes that may affect Brim)
  • Windows releases are signed, but you may see a warning popup when you run the installer (unlike our Mac/Linux releases). See Microsoft Windows beta limitations for details.