v0.9.0

Visit the Brim Download page to find the package for your OS platform.

• NOTE: Prior state such as Search History will be lost on upgrade to this version
• Update zq to v0.13.0 (#750)
• Start the Brim wiki for documentation (#660)
• Import of Zeek logs in TSV, JSON, and ZNG formats (see the v0.24.0 docs for info on JSON). (#594, #720, #727, #625, #581, #643, #672, #716, #700, #717, #719, #735, #721, #729, #713)
• Support for Brim on Linux: .deb (#631) and .rpm (#636) installer packages
• Fix an issue where holding down arrow keys could freeze Brim (#670, #692)
• Allow Log Details to be popped out to a separate window by double-clicking an event or via a control at the top of Log Details panel (#651)
• Fix an issue where ZQL queries with double quotes were not escaped in right-click operations (#682)
• Fix an issue where Brim would crash when revisiting a tab for a deleted Space where a pcap had been opened (#681)
• The main search pane now auto-refreshes during pcap import to show additional Zeek logs as they're created (#713)
• Fix an issue where the Wireshark button was not active when re-opening a deleted Space (#722)
• Fix an issue where filenames containing the # character could not be opened in Brim (#723)
• Wrap long error messages (#728)
• Data stored by Brim is now centralized in a per-platform user data directory (#714)
• Fix an issue where Brim on Windows became unusable if every window except for "About" was closed (#737)
• Auto-update added on Windows, which will start to occur with the next release after v0.9.0 (#744)
• Windows releases are signed, but you may see a warning popup when you run
  the installer (unlike our Mac releases). See Microsoft Windows beta limitations for details.

v0.8.0

Visit the Brim Download page to find the package for your OS platform.

• Update zq to v0.11.1 (fixes an issue that was causing the histogram to draw incorrectly) (#640)
• Windows releases are signed, but you may see a warning popup when you run
  the installer (unlike our Mac releases). See Microsoft Windows beta limitations for details.

v0.7.0

• Introduce versioning of app state (NOTE: prior state such as Search History will be lost on upgrade to this version) (#587)
• Update zq to v0.10.0 (#605)
• Fix an issue where the first refresh during pcap load sometimes showed no events (#611)
• Fix an issue where sometimes windows were unable to be closed (#604)
• Up/down arrow keys now affect event highlighting & Log Details contents (#550)
• Use Wireshark icon in toolbar and Log Details view to open pcaps (#562)
• Enable the pcap button for any Zeek event that can be linked to a conn event (#562)
• Fix the "About" box link so it will open on Windows (#583)
• Windows releases are signed, but you may see a warning popup when you run
  the installer (unlike our Mac releases). See Microsoft Windows beta limitations for details.

v0.6.0

• Update zq to v0.9.0 (#551)
• Add auto-update for MacOS (#515)
• Fix error message presentation via content-type inspection (#519)
• Add menu options for Help > About and File > Settings in Windows (#521)
• Add menu options for File > Close Tab, File > Close Window, and File > Exit (Windows only) (#522)
• Remove dependency on unzip executable (#525)
• Fix an issue where slices from pcap filenames containing space chars would not open (#526)
• Store pcap slices in OS temp dir rather than Downloads dir (#528)
• Fix an issue when clicking between multiple tabs during pcap ingest (#527)
• Maintain separate Log Details panel for each Space (#541)
• Show a warning in History panel for items from deleted Spaces (#547)
• Sign the Windows installer (#549)
• Change logging config to use the new waterfall logger in zqd (#540)
• Use a new Zeek launcher on Windows to improve error handling (#548)
• Windows releases are signed, but you may see a warning popup when you run
  the installer (unlike our Mac releases). See Microsoft Windows beta limitations for details.

v0.5.4

• Ensure bundled zeek can run on MacOS version 10.10 and beyond. (#513)
• Update zq to v0.8.0. (#516)
• Fix an issue where a pcap slice error was not being caught. (#514)
• Windows releases are currently unsigned (unlike our Mac releases). See Microsoft Windows beta limitations for details.

v0.5.3

• Update the windows zeek artifact to support pcapng. (#530)
• Windows releases are currently unsigned (unlike our Mac releases). See Microsoft Windows beta limitations for details.

v0.5.2

This is the same as v0.5.1, but addresses a CI issue that stopped the creation of the Windows installer executable.

v0.5.1

• Initial (beta) Windows release creation and support. Windows releases are currently unsigned (unlike our Mac releases). See Microsoft Windows beta limitations for details.
• Warn on close if there are still active pcap ingests.
• Fix some issues saving search history.

v0.5.0

• Update to zq v0.7.0.
• Add zqd logging configuration.
• Add spinner during searches.
• Show progress bar instead of trash icon for spaces actively ingesting on the open tab.
• Provide version and licensing information in the About modal.
• Ensure launching Wireshark on Mac doesn't block the application.
• Display warnings returned from zqd under the search bar.

v0.4.0

update to v0.4.0 (#481)