Home

Welcome

Welcome to the Brim wiki. These pages provide additional information for your effective use of the Brim desktop application and related tools.

Note: Brim release v0.25.0 brings several significant changes comapred to versions v0.24.0 and older. Docs that are relevant specifically to versions before/after this transition are marked in their headings with the text "(v0.24.0 and older)" or "(v0.25.0+)", respectively. All docs that do not mention a specific version in their heading should be considered relevant to both the old and new versions.

Note: In Brim release v0.25.0 and newer, functionality related to pcap processing (including the generation of Zeek and Suricata summary logs from pcaps) is now handled by Brimcap. Brimcap is bundled with Brim to provide a pcap import/extraction workflow similar to what was present in Brim versions v0.24.0 and older. A separate Brimcap wiki exists that contains current docs related to pcap processing.

Support Resources

• Installation
• Filesystem Paths
• Supported Platforms
• Microsoft Windows beta limitations
• Troubleshooting (v0.25.0+)
• Troubleshooting (v0.24.0 and older)

User Documentation

• Migration of Spaces (v0.25.0+)
• Linux RPM Upgrade (v0.25.0+)
• Importing CSV, JSON, Parquet, and ZST (v0.25.0+)
• Zeek Customization (v0.24.0 and older)

Cookbooks

• Remote Workspaces (v0.25.0+)
• Remote zqd (v0.24.0 and older)
• Query Library Transfer
• Joining Data (v0.25.0+)
• Joining Data (v0.24.0 and older)

Developer Resources

• Code Base Walkthrough
• Adding Migrations