v1.1.1

Changes

• remove arm docker image for now, as buildx is half-broken on ubuntu (#856) @blotus
• add codeQL CI (#853) @buixor

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Upgrading installation

Take a look at the upgrade instructions or installation instructions.

v1.1.0

New Features

• add console enroll command to cscli (#828) @blotus
• add support for 'expression' (fix #822) in grok patterns (#830) @buixor
• refactor Acquisition Interface (#773) @buixor
• allow bouncers to filter decisions by scope (#817) @sbs2001
• add postgresql sslmode option (#772) @SanchosPancho

Bug Fixes & improvements

• ensure decisions from CAPI have proper case (#848) @buixor
• load hub file properly when restoring config from tmpdir (#847) @buixor
• fix #842 #837 (#845) @buixor
• refuse to run the dashboard if not on amd64 (#843) @blotus
• fix #840 : check for whiptail in detect mode (#844) @buixor
• cscli: update completion doc (fix #841) (#846) @he2ss
• trivial typo fix adresses -> addresses in msgbox (#832) @Plasma
• fix #823 : lower JsonExtract debug (#824) @buixor
• fix #781 - avoid unconsistent body : do not send NbDeleted on error (#812) @buixor
• improve emoji for local configuration when listing (#811) @blotus
• add docker option to specify local timezone (#803) @flo-mic
• fix #787 : load simulation config at startup (#793) @he2ss
• delete orphan nodes (fix #778) (#794) @buixor
• gen passwd until it satisfies metabase policy (#792) @sbs2001

Documentation & Other changes

• update completion doc (#850) @AlteredCoder
• remove dispatch to packaging repo (#852) @blotus
• fix functional tests (#838) @sabban
• update docker file to reflect change on acquisitions (#834) @buixor
• build docker image for both amd64 and arm64 (#829) @blotus
• fix image links in readme (#821) @blotus
• remove documentation (#820) @blotus
• update documentation for cscli metrics (#814) @AlteredCoder
• doc: update user-guide network section (#813) @he2ss
• ignore CI when it concern documentation (#815) @he2ss
• fix #806 : improve upgrade documentation (#808) @buixor
• update README.md (#810) @AlteredCoder
• fix typo in writing parser documentation (#800) @AlteredCoder
• fix typo in scenario doc (#798) @AlteredCoder
• added steps for proxy on systemd service (#795) @Lamera
• improve proxy doc (#791) @AlteredCoder
• fix some bugs (#788) @AlteredCoder
• update acquisition.md (#784) @AlteredCoder

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Upgrading installation

Take a look at the upgrade instructions or installation instructions.

v1.0.14

Changes

• fix compile source from release (#774) @registergoofy

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Upgrading installation

Take a look at the upgrade instructions or installation instructions.

v1.0.13

New

• add autocompletion for cscli (#717) @AlteredCoder
• refactor configuration management : extend non-root usage (#698) @AlteredCoder
• add TimeNow in the exprlib helpers (#756) @registergoofy

Bug Fixes & Improvements

• fix cscli alerts delete -all (#769) @AlteredCoder
• fix test on prerelease (#768) @registergoofy
• functional tests staticbuild (#767) @registergoofy
• fix makefile for static binaries (#764) @AlteredCoder
• do not leak fd on reload (#748) @buixor
• ent update : 0.7.0 (#692) @buixor
• cscli hub mgmt improvements (#710) @buixor
• bump pyyaml from 5.3.1 to 5.4 in /docs (#720) @dependabot
• bump jinja2 from 2.11.1 to 2.11.3 in /docs (#706) @dependabot
• ensure LAPI logs respect log_media (#707) @buixor
• fix pattern registration (#715) @AlteredCoder
• debian package auto-testing (#701) @buixor
• pkg/apiclient: pick up dropped errors (#676) @alrs
• fix null deref in cscli config (#694) @AlteredCoder
• use --no-cache with apk to skip manual apk update (#689) @PeterDaveHello
• don't hide cscli version (#686) @AlteredCoder
• fix #677 (#684) @AlteredCoder
• reorder Dockerfile to improve image layer caching (#681) @PeterDaveHello
• pattern syntax consistence (#675) @buixor
• fix #670, improve decision delete doc (#673) @buixor
• pkg/metabase: fix dropped error (#652) @alrs
• remove pattern matching valid SSH disconnect (#668) @dani
• pkg/apiserver: fix dropped error (#700) @alrs
• fix #723 : intercept http2 stream closed errors (#724) @buixor
• get rid of tmp stuff (#738) @registergoofy
• Bump pygments from 2.6.1 to 2.7.4 in /docs (#725) @dependabot
• Static release (#737) @registergoofy
• dispatch on tag creation (#734) @sabban
• README update (#730) @buixor
• honor log levels for api : don't log access logs if level is warn/err (#732) @buixor
• cscli machines|bouncers|dashboard error message clarification (#754) @buixor
• cscli: sort meta by key in alerts inspect output (#762) @blotus

Documentation & others

• FreeBSD changes (#718) (#721) @AlteredCoder
• update crowdsec tour documentation (#713) @AlteredCoder
• update README (#714) @AlteredCoder
• fix debian-like installation documentation (#708) @registergoofy
• clarify doc on onsuccess in parsers + add new date formats for dateparse (#703) @buixor
• unified functional tests (#696) @buixor
• misspelling in docker Readme (#688) @thib3113
• up installation documentation (#678) @buixor
• automatically update docker hub readme (github action) (#679) @he2ss
• update the config.yaml file (#674) @AlteredCoder
• clarify help message, fix #659 (#672) @buixor
• fix documentation in write_configurations (#666) @AlteredCoder
• clarify doc on db migration (#747) @buixor
• Updated readme.md (#743) @philippecrowdsec
• fix #741 : document network streams about crowdsec and lapi (#750) @buixor
• Update CI (#760) @blotus
• add System to cwversion to have platform in UA (#763) @buixor

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Upgrading installation

Take a look at the upgrade instructions or installation instructions.

v1.0.12

New

• add autocompletion for cscli (#717) @AlteredCoder
• refactor configuration management : extend non-root usage (#698) @AlteredCoder

Bug Fixes & Improvements

• ent update : 0.7.0 (#692) @buixor
• cscli hub mgmt improvements (#710) @buixor
• bump pyyaml from 5.3.1 to 5.4 in /docs (#720) @dependabot
• bump jinja2 from 2.11.1 to 2.11.3 in /docs (#706) @dependabot
• ensure LAPI logs respect log_media (#707) @buixor
• fix pattern registration (#715) @AlteredCoder
• debian package auto-testing (#701) @buixor
• pkg/apiclient: pick up dropped errors (#676) @alrs
• fix null deref in cscli config (#694) @AlteredCoder
• use --no-cache with apk to skip manual apk update (#689) @PeterDaveHello
• don't hide cscli version (#686) @AlteredCoder
• fix #677 (#684) @AlteredCoder
• reorder Dockerfile to improve image layer caching (#681) @PeterDaveHello
• pattern syntax consistence (#675) @buixor
• fix #670, improve decision delete doc (#673) @buixor
• pkg/metabase: fix dropped error (#652) @alrs
• remove pattern matching valid SSH disconnect (#668) @dani
• pkg/apiserver: fix dropped error (#700) @alrs
• fix #723 : intercept http2 stream closed errors (#724) @buixor
• get rid of tmp stuff (#738) @registergoofy
• Bump pygments from 2.6.1 to 2.7.4 in /docs (#725) @dependabot
• Static release (#737) @registergoofy
• dispatch on tag creation (#734) @sabban
• README update (#730) @buixor
• honor log levels for api : don't log access logs if level is warn/err (#732) @buixor

Documentation & others

• FreeBSD changes (#718) (#721) @AlteredCoder
• update crowdsec tour documentation (#713) @AlteredCoder
• update README (#714) @AlteredCoder
• fix debian-like installation documentation (#708) @registergoofy
• clarify doc on onsuccess in parsers + add new date formats for dateparse (#703) @buixor
• unified functional tests (#696) @buixor
• misspelling in docker Readme (#688) @thib3113
• up installation documentation (#678) @buixor
• automatically update docker hub readme (github action) (#679) @he2ss
• update the config.yaml file (#674) @AlteredCoder
• clarify help message, fix #659 (#672) @buixor
• fix documentation in write_configurations (#666) @AlteredCoder

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Upgrading installation

Take a look at the upgrade instructions or installation instructions.

v1.0.11

New

• add autocompletion for cscli (#717) @AlteredCoder
• refactor configuration management : extend non-root usage (#698) @AlteredCoder

Bug Fixes & Improvements

• ent update : 0.7.0 (#692) @buixor
• cscli hub mgmt improvements (#710) @buixor
• bump pyyaml from 5.3.1 to 5.4 in /docs (#720) @dependabot
• bump jinja2 from 2.11.1 to 2.11.3 in /docs (#706) @dependabot
• ensure LAPI logs respect log_media (#707) @buixor
• fix pattern registration (#715) @AlteredCoder
• debian package auto-testing (#701) @buixor
• pkg/apiclient: pick up dropped errors (#676) @alrs
• fix null deref in cscli config (#694) @AlteredCoder
• use --no-cache with apk to skip manual apk update (#689) @PeterDaveHello
• don't hide cscli version (#686) @AlteredCoder
• fix #677 (#684) @AlteredCoder
• reorder Dockerfile to improve image layer caching (#681) @PeterDaveHello
• pattern syntax consistence (#675) @buixor
• fix #670, improve decision delete doc (#673) @buixor
• pkg/metabase: fix dropped error (#652) @alrs
• remove pattern matching valid SSH disconnect (#668) @dani

Documentation & others

• FreeBSD changes (#718) (#721) @AlteredCoder
• update crowdsec tour documentation (#713) @AlteredCoder
• update README (#714) @AlteredCoder
• fix debian-like installation documentation (#708) @registergoofy
• clarify doc on onsuccess in parsers + add new date formats for dateparse (#703) @buixor
• unified functional tests (#696) @buixor
• misspelling in docker Readme (#688) @thib3113
• up installation documentation (#678) @buixor
• automatically update docker hub readme (github action) (#679) @he2ss
• update the config.yaml file (#674) @AlteredCoder
• clarify help message, fix #659 (#672) @buixor
• fix documentation in write_configurations (#666) @AlteredCoder

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Upgrading installation

Take a look at the upgrade instructions or installation instructions.

v1.0.9

Improvements

• allow for acquisition files to be specified from a directory as well (#619) @buixor
• improve logging cscli and wizard (#643) @AlteredCoder
• add a prometheus_uri option for cscli's config (#625) @buixor

Bug Fixes & various

• docker: fix the perms of SQLite DB for metabase (#647) @buixor
• don't try to login with zero scenarios (#627) @buixor
• skip empty lines to avoid issue of #630 (#631) @buixor
• only set logfile dir if media is file (#615) @buixor
• fix races + significantly improve crowdsec forensic mode shutdown speed (#633) @registergoofy
• truely don't try to send anything with empty online credentials configuration file (#657) @registergoofy

Documentation

• reference faq for metabase without docker (#649) @buixor
• doc api + minor api fixes (#654) @buixor
• update bouncer_machine_management.md (#614) @KINGMilo
• doc improvements (#644) @buixor

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Upgrading installation

Take a look at the upgrade instructions or installation instructions.

v1.0.8

Improvements

• allow for acquisition files to be specified from a directory as well (#619) @buixor
• improve logging cscli and wizard (#643) @AlteredCoder
• add a prometheus_uri option for cscli's config (#625) @buixor

Bug Fixes

• docker: fix the perms of SQLite DB for metabase (#647) @buixor
• don't try to login with zero scenarios (#627) @buixor
• skip empty lines to avoid issue of #630 (#631) @buixor
• only set logfile dir if media is file (#615) @buixor
• fix races + significantly improve crowdsec forensic mode shutdown speed (#633) @registergoofy

Changes

• Update bouncer_machine_management.md (#614) @KINGMilo
• Doc improvements (#644) @buixor

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Upgrading installation

Take a look at the upgrade instructions or installation instructions.

v1.0.7

Changes

Improvements

• allow environment variable in configuration file (#601) @AlteredCoder
• update docker image + documentation (#602) @erenJag
• Add use_forwarded_for_headers configuration option for LAPI (#610) @blotus

Bug fixes

• Fix: typo in apic.go logs (#592) @sbs2001
• Fix: default configurations (#597) @buixor
• create crowdsec group for metabase and crowdsec.db (#606) @AlteredCoder
• fix stack trace when missing cscli in config file (#607) @AlteredCoder
• don't load lapi creds when running only api (#608) @AlteredCoder

Various

• update go.mod (#580) @AlteredCoder
• add link to exported fields in write configuration documentation (#584) @AlteredCoder
• add answer to #589 to FAQ (#590) @buixor
• add two options: configure and noop (#591) @registergoofy
• Docs: Correct link in README for installation via source (#593) @sbs2001
• Documentation update (#596) @JeanDevaux
• Update grammar of index.md for localAPI docs (#598) @KINGMilo
• remove help message backup/restore in wizard (#612) @AlteredCoder

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Upgrading installation

Take a look at the upgrade instructions or installation instructions.

v1.0.6

Changes

Improvements

• allow environment variable in configuration file (#601) @AlteredCoder
• add two options: configure and noop (#591) @registergoofy
• update go.mod (#580) @AlteredCoder

Bug fixes

• Fix: enable items when upgrading a collection (#599) @AlteredCoder
• Fix: default configurations (#597) @buixor
• Fix: typo in apic.go logs (#592) @sbs2001

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Upgrading installation

Take a look at the upgrade instructions or installation instructions.