v1.5.6-rc3

Changes

New Features

• remove PAPI feature flag (#2601) @blotus
• Application Security Engine Support (#2273) @buixor
• Loki integration #2 (#2306) @lperdereau

Improvements

• [http plugin] Add capath, certpath, keypath to load custom certs (#2634) @LaurenceJJones
• add new env var to enable console_management (#2599) @he2ss
• docker: add -slim variant to ghcr.io (#2653) @mmetc
• cscli refact / encapsulation (#2650) @mmetc
• restrict file permission from "machines add" (#2648) @mmetc
• Appsec improvement and fixes after merge (#2645) @AlteredCoder
• cwhub: context type (#2631) @mmetc
• cscli refact - encapsulation with types (#2643) @mmetc
• Cwhub refact (#2637) @mmetc
• cscli config show: pretty print struct output (#2633) @mmetc
• Refact bouncer auth (#2456) @mmetc
• cscli machines add: don't overwrite existing credential file (#2625) @mmetc
• [Explain] Ignore blank lines as crowdsec will anyways (#2630) @LaurenceJJones
• command "cscli hub types" (#2632) @mmetc
• manage force_pull message for one blocklist (#2615) @nitescuc
• Refact pkg/cwhub: fix known issues and reorganize files (#2616) @mmetc
• [postoverflow] dump after postoverflow so we can test within hubtest (#2511) @LaurenceJJones
• [cscli] notifications test command and slight re write (#2391) @LaurenceJJones
• Refactor hub management and cscli commands (#2545) @mmetc
• "cscli bouncers add": increase key size, deprecate and ignore --length option (#2531) @mmetc
• *.log: use yyyy-mm-dd (iso8601) in timestamps (#2564) @mmetc
• Improved expr debugger (#2495) @buixor
• Kafka acquisition: warn if no consumer group id and allow to read from a specific partition (#2612) @blotus
• kafkaAcquisition: add more debug (#2609) @he2ss
• Use go 1.21.4 (#2595) @mmetc

Bug Fixes

• copy debian behavior for now for local and online api credentials creation (#2655) @sabban
• fix package tests for 1.5.6-rc2 (#2652) @mmetc
• fix lapi credentials creation for debian package (#2646) @sabban
• cscli context detect: fix nil dereference (#2635) @mmetc
• docker tests: force local machine creation (#2636) @mmetc
• [cscli] Decision import fix format for documentation (#2577) @LaurenceJJones
• [Plugin] Pass down ctx and use it (#2626) @LaurenceJJones
• [Metabase] QOL Changes and chown wal files (#2627) @LaurenceJJones
• CI: avoid pipe in makefile, correctly report error in CI when tests fail (#2621) @mmetc
• force rfc 3339 date format in metrics push (#2402) @blotus
• docker: replace cp -an with rsync to allow bind-mount of files in /etc/crowdsec (#2611) @mmetc
• properly update the cs_syslogsource_parsed_total metric (#2608) @blotus
• fix: typo (#2582) @testwill
• update gantsign.golang name (#2558) @sabban
• Release action: fix asset upload (#2565) @mmetc

Chore / Deps

• update dependency on aws sdk (#2647) @mmetc
• CI: use go 1.21.5 (#2640) @mmetc
• Test for acquisition format errors in crowdsec -t (#2629) @mmetc
• refact BulkDeleteDecisions (#2308) @mmetc
• update dependency: k8s apiserver (including crypto, jwt, prometheus client) (#2476) @mmetc
• Minor dependency updates (#2505) @mmetc
• Bump google.golang.org/grpc from 1.56.1 to 1.56.3 (#2566) @dependabot
• typos/grammar (#2561) @mmetc

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation

Take a look at the installation instructions.

v1.5.6-rc2

Changes

New Features

• remove PAPI feature flag (#2601) @blotus
• Application Security Engine Support (#2273) @buixor
• Loki integration #2 (#2306) @lperdereau

Improvements

• restrict file permission from "machines add" (#2648) @mmetc
• Appsec improvement and fixes after merge (#2645) @AlteredCoder
• cwhub: context type (#2631) @mmetc
• cscli refact - encapsulation with types (#2643) @mmetc
• Cwhub refact (#2637) @mmetc
• cscli config show: pretty print struct output (#2633) @mmetc
• Refact bouncer auth (#2456) @mmetc
• cscli machines add: don't overwrite existing credential file (#2625) @mmetc
• [Explain] Ignore blank lines as crowdsec will anyways (#2630) @LaurenceJJones
• command "cscli hub types" (#2632) @mmetc
• manage force_pull message for one blocklist (#2615) @nitescuc
• Refact pkg/cwhub: fix known issues and reorganize files (#2616) @mmetc
• [postoverflow] dump after postoverflow so we can test within hubtest (#2511) @LaurenceJJones
• [cscli] notifications test command and slight re write (#2391) @LaurenceJJones
• Refactor hub management and cscli commands (#2545) @mmetc
• "cscli bouncers add": increase key size, deprecate and ignore --length option (#2531) @mmetc
• *.log: use yyyy-mm-dd (iso8601) in timestamps (#2564) @mmetc
• Improved expr debugger (#2495) @buixor
• Kafka acquisition: warn if no consumer group id and allow to read from a specific partition (#2612) @blotus
• kafkaAcquisition: add more debug (#2609) @he2ss
• Use go 1.21.4 (#2595) @mmetc

Bug Fixes

• fix lapi credentials creation for debian package (#2646) @sabban
• cscli context detect: fix nil dereference (#2635) @mmetc
• docker tests: force local machine creation (#2636) @mmetc
• [cscli] Decision import fix format for documentation (#2577) @LaurenceJJones
• [Plugin] Pass down ctx and use it (#2626) @LaurenceJJones
• [Metabase] QOL Changes and chown wal files (#2627) @LaurenceJJones
• CI: avoid pipe in makefile, correctly report error in CI when tests fail (#2621) @mmetc
• force rfc 3339 date format in metrics push (#2402) @blotus
• docker: replace cp -an with rsync to allow bind-mount of files in /etc/crowdsec (#2611) @mmetc
• properly update the cs_syslogsource_parsed_total metric (#2608) @blotus
• fix: typo (#2582) @testwill
• update gantsign.golang name (#2558) @sabban
• Release action: fix asset upload (#2565) @mmetc

Chore / Deps

• update dependency on aws sdk (#2647) @mmetc
• CI: use go 1.21.5 (#2640) @mmetc
• Test for acquisition format errors in crowdsec -t (#2629) @mmetc
• refact BulkDeleteDecisions (#2308) @mmetc
• update dependency: k8s apiserver (including crypto, jwt, prometheus client) (#2476) @mmetc
• Minor dependency updates (#2505) @mmetc
• Bump google.golang.org/grpc from 1.56.1 to 1.56.3 (#2566) @dependabot
• typos/grammar (#2561) @mmetc

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation

Take a look at the installation instructions.

v1.5.6-rc1

Changes

New Features

• Application Security Engine Support (#2273) @buixor
• Loki integration #2 (#2306) @lperdereau

Improvements

• cwhub: context type (#2631) @mmetc
• cscli refact - encapsulation with types (#2643) @mmetc
• cwhub refact (#2637) @mmetc
• cscli config show: pretty print struct output (#2633) @mmetc
• refact bouncer auth (#2456) @mmetc
• cscli machines add: don't overwrite existing credential file (#2625) @mmetc
• Ignore blank lines as crowdsec will anyways (#2630) @LaurenceJJones
• command "cscli hub types" (#2632) @mmetc
• manage force_pull message for one blocklist (#2615) @nitescuc
• Refact pkg/cwhub: fix known issues and reorganize files (#2616) @mmetc
• dump after postoverflow so we can test within hubtest (#2511) @LaurenceJJones
• notifications test command and slight re write (#2391) @LaurenceJJones
• refactor hub management and cscli commands (#2545) @mmetc
• "cscli bouncers add": increase key size, deprecate and ignore --length option (#2531) @mmetc
• *.log: use yyyy-mm-dd (iso8601) in timestamps (#2564) @mmetc
• Improved expr debugger (#2495) @buixor
• kafka acquisition: warn if no consumer group id and allow to read from a specific partition (#2612) @blotus
• kafkaAcquisition: add more debug (#2609) @he2ss
• Use go 1.21.4 (#2595) @mmetc

Bug Fixes

• cscli context detect: fix nil dereference (#2635) @mmetc
• docker tests: force local machine creation (#2636) @mmetc
• decision import fix format for documentation (#2577) @LaurenceJJones
• pass down ctx and use it (#2626) @LaurenceJJones
• QOL Changes and chown wal files (#2627) @LaurenceJJones
• CI: avoid pipe in makefile, correctly report error in CI when tests fail (#2621) @mmetc
• force rfc 3339 date format in metrics push (#2402) @blotus
• docker: replace cp -an with rsync to allow bind-mount of files in /etc/crowdsec (#2611) @mmetc
• properly update the cs_syslogsource_parsed_total metric (#2608) @blotus
• fix: typo (#2582) @testwill
• update gantsign.golang name (#2558) @sabban
• Release action: fix asset upload (#2565) @mmetc

Chore / Deps

• CI: use go 1.21.5 (#2640) @mmetc
• Test for acquisition format errors in crowdsec -t (#2629) @mmetc
• refact BulkDeleteDecisions (#2308) @mmetc
• update dependency: k8s apiserver (including crypto, jwt, prometheus client) (#2476) @mmetc
• Minor dependency updates (#2505) @mmetc
• Bump google.golang.org/grpc from 1.56.1 to 1.56.3 (#2566) @dependabot
• typos/grammar (#2561) @mmetc

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation

Take a look at the installation instructions.

v1.5.5

Changes

Improvements

• Runtime whitelist parsing improvement (#2422) @LaurenceJJones
• sort map keys when generating asserts (#2494) @buixor
• leakybucket redundant map creation (#2421) @LaurenceJJones
• File init improvements (#2419) @LaurenceJJones
• Reset grokky once all patterns are compiled (#2420) @LaurenceJJones
• Refact cscli hub / pkg/cwhub (part 6) (#2524) @mmetc
• add missing scenarios in first login when authenticating with TLS (#2454) @mmetc
• pkg/cwhub: cleanup in argument call (#2527) @sabban
• [code] reverse nil statement instead of else (#2530) @LaurenceJJones
• [code] Convert ifelseif to switch statement (#2529) @LaurenceJJones
• Refact pkg/csconfig tests (#2526) @mmetc
• Refact cscli hub / pkg/cwhub (part 5) (#2521) @mmetc
• Refact pkg/cwhub (part 4) (#2518) @mmetc
• Refact pkg/cwhub (part 3) (#2516) @mmetc
• Refact pkg/cwhub (part 2) (#2513) @mmetc
• cscli: refactor hub commands (#2500) @mmetc
• Refact pkg/cwhub (part 1) (#2512) @mmetc
• refact: simplify hubtest CopyDir() (#2509) @mmetc
• notification-email: configurable timeouts (#2465) @mmetc
• cscli setup: accept stdin; fix proftpd detection test and service unmask (#2496) @mmetc
• [cscli] Add alert alias (#2485) @LaurenceJJones
• cscli hubtest whitelist (#2479) @LaurenceJJones

Bug Fixes

• fix null deref in cti calls if key is empty (#2540) @buixor
• cscli config feature-flags: point user to the right location of feature.yaml (#2539) @mmetc
• Use a default duration if no duration is provided in a profile (#2520) @blotus
• lighten bucket logger (#2523) @buixor
• cscli: restore config correctly if acquis.d already exists (#2504) @mmetc
• fix issue #2499 - nil dereference while using capi whitelists (#2501) @mmetc
• [Explain] s02 can cause panic if empty (#2486) @LaurenceJJones
• fix the float comparison for hubtests (#2492) @buixor

Chore / Deps

• [Container] Documentation (#2543) @LaurenceJJones
• use go 1.21.3 (#2535) @mmetc
• use go 1.21.1 (#2418) @mmetc
• lint: pkg/cwhub (#2510) @mmetc
• Support Postgres 16 (update entgo.io/ent to 0.12.4) (#2368) @mmetc
• CI: update test dependencies (#2490) @mmetc

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation

Take a look at the installation instructions.

v1.5.5-rc1

Changes

Improvements

• Runtime whitelist parsing improvement (#2422) @LaurenceJJones
• sort map keys when generating asserts (#2494) @buixor
• leakybucket redundant map creation (#2421) @LaurenceJJones
• File init improvements (#2419) @LaurenceJJones
• Reset grokky once all patterns are compiled (#2420) @LaurenceJJones
• Refact cscli hub / pkg/cwhub (part 6) (#2524) @mmetc
• add missing scenarios in first login when authenticating with TLS (#2454) @mmetc
• pkg/cwhub: cleanup in argument call (#2527) @sabban
• [code] reverse nil statement instead of else (#2530) @LaurenceJJones
• [code] Convert ifelseif to switch statement (#2529) @LaurenceJJones
• Refact pkg/csconfig tests (#2526) @mmetc
• Refact cscli hub / pkg/cwhub (part 5) (#2521) @mmetc
• Refact pkg/cwhub (part 4) (#2518) @mmetc
• Refact pkg/cwhub (part 3) (#2516) @mmetc
• Refact pkg/cwhub (part 2) (#2513) @mmetc
• cscli: refactor hub commands (#2500) @mmetc
• Refact pkg/cwhub (part 1) (#2512) @mmetc
• refact: simplify hubtest CopyDir() (#2509) @mmetc
• notification-email: configurable timeouts (#2465) @mmetc
• cscli setup: accept stdin; fix proftpd detection test and service unmask (#2496) @mmetc
• [cscli] Add alert alias (#2485) @LaurenceJJones
• cscli hubtest whitelist (#2479) @LaurenceJJones

Bug Fixes

• fix null deref in cti calls if key is empty (#2540) @buixor
• cscli config feature-flags: point user to the right location of feature.yaml (#2539) @mmetc
• Use a default duration if no duration is provided in a profile (#2520) @blotus
• lighten bucket logger (#2523) @buixor
• cscli: restore config correctly if acquis.d already exists (#2504) @mmetc
• fix issue #2499 - nil dereference while using capi whitelists (#2501) @mmetc
• [Explain] s02 can cause panic if empty (#2486) @LaurenceJJones
• fix the float comparison for hubtests (#2492) @buixor

Chore / Deps

• [Container] Documentation (#2543) @LaurenceJJones
• use go 1.21.3 (#2535) @mmetc
• use go 1.21.1 (#2418) @mmetc
• lint: pkg/cwhub (#2510) @mmetc
• Support Postgres 16 (update entgo.io/ent to 0.12.4) (#2368) @mmetc
• CI: update test dependencies (#2490) @mmetc

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation

Take a look at the installation instructions.

v1.5.4

Changes

• Use go 1.20.8 (#2473) @mmetc

Bug Fixes

• fix include_capi filter (#2478) @buixor
• strip '=' signs from encoded api keys (#2472) @mmetc
• exclude 'lists' too if we exclude CAPI (#2474) @buixor
• Avoid sending nil body with metrics (#2470) @mmetc
• Fix PO expr whitelist (#2471) @LaurenceJJones

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation

Take a look at the installation instructions.

v1.5.3

Changes

• scenario labels to map string interface (#2201) @AlteredCoder
• do not send more than group_threshold alerts at once to a notification plugin (#2264) @mmetc
• cscli: add G (1e9) suffix to metric units (#2254) @mmetc

New Features

• add sentinel notification plugin (#2268) @blotus
• add bayesian bucket type (#2290) @seemanne
• allow running rootless docker tests (#2281) @mmetc

Improvements

• CI: update pytest-cs - don't remove stopped containers after tests (#2459) @mmetc
• minor log message improvements (#2455) @mmetc
• cscli explain --labels (#2461) @LaurenceJJones
• refact alert/decisions insert/update to avoid database locking in bulk operations (#2446) @mmetc
• add html escape function so it can be invoked from template (#2451) @LaurenceJJones
• fix "cscli console disable --all"; cleanup "cscli console" command (#2444) @mmetc
• make: build with debug symbols in func tests or if DEBUG=1; drop BUILD_VENDOR_FLAGS (#2443) @mmetc
• alternate vendor file (xz compression and version number) (#2425) @mmetc
• move plugins/notifications/* to cmd/notification-* (#2429) @mmetc
• timeout while waiting for events to be flushed (#2423) @mmetc
• unmarshal Json add log context (#2414) @LaurenceJJones
• add method name to child logger (#2411) @LaurenceJJones
• simplify context add (#2408) @AlteredCoder
• add bouncers prune command (#2379) @LaurenceJJones
• update dependency on go-cs-lib; drop the pkg/ part (#2393) @mmetc
• add machines prune command (#2011) @LaurenceJJones
• add metabase version override and update (#2370) @LaurenceJJones
• change output of "cscli metrics -o [json|raw]" from plain list to map with table names (#2375) @mmetc
• reduce log verbosity at startup (#2363) @mmetc
• make: error if BUILD_VERSION does not start with "v" (#2355) @mmetc
• support for stdin with "cscli decision import" and raw values (#2291) @mmetc
• non-fatal error if some datasource can't be run (i.e. journalctl but systemd is missing) (#2309) @mmetc
• build with libre2 by default, options for wasm and static; add mk/gmsl (#2295) @mmetc
• send metrics sooner if agents are added/removed (#2296) @mmetc
• append vendor.tgz to each release (#2288) @mmetc
• CI: vagrant configuration for debian 12 (#2285) @LaurenceJJones
• CI: Remove cache entries when closing a PR (#2289) @mmetc
• update jsonextract.go (#2287) @LaurenceJJones
• implement "crowdsec -fatal" flag; change help message (#2266) @mmetc
• don't log systemd notification error if not running under systemd (#2274) @mmetc
• build against libre2-dev if found (#2255) @mmetc
• log.Warning if a notification is configured twice (#2240) @mmetc
• CI: publish dev-debian docker image (amd64 only) (#2252) @mmetc
• CI: use hub cli to upload release tar (#2244) @mmetc

Bug Fixes

• fix hub directory on fc38 (#2468) @sabban
• Kafka acquisition: do not create empty events when a read error occurs (#2466) @blotus
• fix the behavior of -a option of cscli alerts list : do not hide alerts with no associated decisions (#2435) @buixor
• option db_client.decision_bulk_size (#2440) @mmetc
• update functional tests for build pipeline (#2442) @mmetc
• whitelist reason (#2439) @LaurenceJJones
• remove "and exit." when showing list of commands when running cscli (#2431) @RelativeSure
• remove duplicate line (#2432) @encg
• fix behavior of flag disable_http_retry_backoff (#2426) @mmetc
• conditional overflow doesn't overflow on capacity (#2412) @sabban
• CI: increase test sleep to fix flaky acquisition/file test under win (#2410) @mmetc
• cscli decisions list -o json => [] instead of null; same for alerts (#2397) @mmetc
• cscli bouncer delete fix wrong short (#2404) @LaurenceJJones
• fix the rpm build (#2396) @sabban
• fix unit file after modification (#2395) @sabban
• docker: allow GID with no persistent sqlite db (#2381) @mmetc
• fix "crowdsec-cli/require" log verbosity (#2390) @mmetc
• fix a confusing debug message (#2386) @buixor
• check cscli preconditions with crowdsec-cli/require package (#2388) @mmetc
• replace all imports of path with path/filepath (#2330) @mmetc
• go mod tidy for sentinel plugin (#2377) @blotus
• fix double push of metrics by properly handling tickers (#2374) @mmetc
• fix the ci by adding the ability to enforce event ordering (#2347) @sabban
• add object key in src for S3 acquis (#2342) @blotus
• properly match new files on windows when doing file acquisition (#2329) @blotus
• rename status to state in fire response (#2313) @blotus
• raise error with invalid 'on_success', 'on_failure' in profile (#2303) @mmetc
• docker: always merge .yaml.local in conf_get() (#2272) @mmetc
• change api_key encoding to base64 to comply with bcrypt max size (#2302) @mmetc
• fix error message when failing to parse ip address or range (#2292) @mmetc

Chore / Deps

• CI: remove explicit cache-dependency-path (#2452) @mmetc
• use go 1.20.7 (#2409) @mmetc
• golangci-lint: use v1.54, remove unnecessary byte/string conversions (#2438) @mmetc
• pkg/types cleanup (#2398) @mmetc
• remove calls to log.Fatal (#2399) @mmetc
• apic: minor refactoring (#2415) @mmetc
• update pytest dependencies (#2407) @mmetc
• update pytest dependencies (#2389) @mmetc
• build target for "make tidy" (#2378) @mmetc
• update google/winops dependency (#2366) @mmetc
• update gonic/gin to 1.9.1 (#2230) @mmetc
• expose the FormatAlert function to other packages (#2248) @blotus
• update ansible requirements (#2364) @sabban
• CI: test with postgres 15 (#2149) @mmetc
• update dependency: docker/docker (#2360) @mmetc
• typo fix, uppercase 'API', adjusted log level (#2361) @mmetc
• use same levenshtein package for cscli, ent, hcl (#2359) @mmetc
• use go 1.20.6 (#2358) @mmetc
• update pytest dependencies (#2356) @mmetc
• update dependencies: k8s, swag, jwt (#2357) @mmetc
• update dependency on goccy/go-yaml for arm32 fix (#2343) @mmetc
• CI: bump and lock pytest dependencies (#2340) @mmetc
• update grpc dependency to latest stable version (#2339) @mmetc
• errors.Wrap -> fmt.Errorf (#2333) @mmetc
• CI: reduce test verbosity; set PKG_CONFIG_PATH for re2 in rpm distros (#2331) @mmetc
• update go-re2 dep to fix arm32 build (#2332) @mmetc
• tests: vagrant refactoring (#2328) @mmetc
• CI: update ansible tests for re2 (#2318) @mmetc
• errors.Wrap -> fmt.Errorf (#2317) @mmetc
• func tests: install some dependencies from make, log test helpers (#2314) @mmetc
• rename metabase APIClient to avoid confusion (#2305) @mmetc
• CI: Update setup-go action to v4 (with automatic cache) (#2168) @mmetc
• docker: build same re2 version for alpine/debian; bump yq (#2311) @mmetc
• update debian version to have latest systemd (#2304) @he2ss
• CI: build docker version with c++ re2 (static) (#2307) @mmetc
• errors.Wrap -> fmt.Errorf; clean up imports (#2301) @mmetc
• CI: add fedora-37, -38 to vagrant tests (#2299) @mmetc
• update leakybucket readme (#2298) @mmetc
• errors.Wrap -> fmt.Errorf (#2297) @mmetc
• update go dependencies (#2293) @mmetc
• spellcheck/style leakybucket readme (#2294) @mmetc
• use go 1.20.5 (#2280) @mmetc
• light pkg/parser cleanup (#2279) @mmetc
• trim pkg/types: move DataSet/GetData to pkg/cwhub, removed unused Clone function (#2271) @mmetc
• add missing import (#2275) @mmetc
• minor refactor to pkg/types, cscli machines (#2270) @mmetc
• move grok_pattern.go away from pkg/types to reduce bouncer dependencies (#2269) @mmetc
• don't pre-create log files (not required anymore) (#2267) @mmetc
• CI: add tests for metrics configuration (#2251) @mmetc
• CI: refactor makefile for plugins and vendor target (#2256) @mmetc
• update notif threshold test on windows (#2265) @mmetc
• show option -winsvc only under windows (#2258) @mmetc
• CI: make clean -> remove coverage data (#2259) @mmetc
• make: allow using a development version of Go, with a warning (#2260) @mmetc
• gitignore: ignore .vagrant directories (#2262) @mmetc
• default config: simulation off -> false (yaml 1.2) (#2263) @mmetc
• dependencies: replaced function calls to pkg/types, errors.Wrap (#2235) @mmetc
• CI: refactoring pkg/csplugin (#2247) @mmetc
• CI: separate stderr in all func tests (#2250) @mmetc
• update libsystemd in debian docker image (#2245) @he2ss
• types.InSlice() -> slices.Contains() (#2246) @mmetc

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation

Take a look at the installation instructions.

v1.5.3-rc8

Changes

• scenario labels to map string interface (#2201) @AlteredCoder
• do not send more than group_threshold alerts at once to a notification plugin (#2264) @mmetc
• cscli: add G (1e9) suffix to metric units (#2254) @mmetc

New Features

• add sentinel notification plugin (#2268) @blotus
• Add bayesian bucket type (#2290) @seemanne
• allow running rootless docker tests (#2281) @mmetc

Improvements

• CI: update pytest-cs - don't remove stopped containers after tests (#2459) @mmetc
• minor log message improvements (#2455) @mmetc
• [enhancement] cscli explain --labels (#2461) @LaurenceJJones
• refact alert/decisions insert/update to avoid database locking in bulk operations (#2446) @mmetc
• add html escape function so it can be invoked from template (#2451) @LaurenceJJones
• fix "cscli console disable --all"; cleanup "cscli console" command (#2444) @mmetc
• make: build with debug symbols in func tests or if DEBUG=1; drop BUILD_VENDOR_FLAGS (#2443) @mmetc
• alternate vendor file (xz compression and version number) (#2425) @mmetc
• move plugins/notifications/* to cmd/notification-* (#2429) @mmetc
• timeout while waiting for events to be flushed (#2423) @mmetc
• Unmarshal Json add log context (#2414) @LaurenceJJones
• add method name to child logger (#2411) @LaurenceJJones
• simplify context add (#2408) @AlteredCoder
• add bouncers prune command (#2379) @LaurenceJJones
• update dependency on go-cs-lib; drop the pkg/ part (#2393) @mmetc
• add machines prune command (#2011) @LaurenceJJones
• add metabase version override and update (#2370) @LaurenceJJones
• change output of "cscli metrics -o [json|raw]" from plain list to map with table names (#2375) @mmetc
• reduce log verbosity at startup (#2363) @mmetc
• make: error if BUILD_VERSION does not start with "v" (#2355) @mmetc
• support for stdin with "cscli decision import" and raw values (#2291) @mmetc
• non-fatal error if some datasource can't be run (i.e. journalctl but systemd is missing) (#2309) @mmetc
• build with libre2 by default, options for wasm and static; add mk/gmsl (#2295) @mmetc
• send metrics sooner if agents are added/removed (#2296) @mmetc
• append vendor.tgz to each release (#2288) @mmetc
• CI: vagrant configuration for debian 12 (#2285) @LaurenceJJones
• CI: Remove cache entries when closing a PR (#2289) @mmetc
• update jsonextract.go (#2287) @LaurenceJJones
• implement "crowdsec -fatal" flag; change help message (#2266) @mmetc
• don't log systemd notification error if not running under systemd (#2274) @mmetc
• build against libre2-dev if found (#2255) @mmetc
• log.Warning if a notification is configured twice (#2240) @mmetc
• CI: publish dev-debian docker image (amd64 only) (#2252) @mmetc
• CI: use hub cli to upload release tar (#2244) @mmetc

Bug Fixes

• fix hub directory on fc38 (#2468) @sabban
• kafka acquisition: do not create empty events when a read error occurs (#2466) @blotus
• fix the behavior of -a option of cscli alerts list : do not hide alerts with no associated decisions (#2435) @buixor
• option db_client.decision_bulk_size (#2440) @mmetc
• update functional tests for build pipeline (#2442) @mmetc
• whitelist reason (#2439) @LaurenceJJones
• remove "and exit." when showing list of commands when running cscli (#2431) @RelativeSure
• remove duplicate line (#2432) @encg
• fix behavior of flag disable_http_retry_backoff (#2426) @mmetc
• conditional overflow doesn't overflow on capacity (#2412) @sabban
• CI: increase test sleep to fix flaky acquisition/file test under win (#2410) @mmetc
• cscli decisions list -o json => [] instead of null; same for alerts (#2397) @mmetc
• [cscli] bouncer delete fix wrong short (#2404) @LaurenceJJones
• fix the rpm build (#2396) @sabban
• fix unit file after modification (#2395) @sabban
• docker: allow GID with no persistent sqlite db (#2381) @mmetc
• fix "crowdsec-cli/require" log verbosity (#2390) @mmetc
• fix a confusing debug message (#2386) @buixor
• check cscli preconditions with crowdsec-cli/require package (#2388) @mmetc
• replace all imports of path with path/filepath (#2330) @mmetc
• go mod tidy for sentinel plugin (#2377) @blotus
• fix double push of metrics by properly handling tickers (#2374) @mmetc
• fix the ci by adding the ability to enforce event ordering (#2347) @sabban
• add object key in src for S3 acquis (#2342) @blotus
• properly match new files on windows when doing file acquisition (#2329) @blotus
• rename status to state in fire response (#2313) @blotus
• raise error with invalid 'on_success', 'on_failure' in profile (#2303) @mmetc
• docker: always merge .yaml.local in conf_get() (#2272) @mmetc
• change api_key encoding to base64 to comply with bcrypt max size (#2302) @mmetc
• fix error message when failing to parse ip address or range (#2292) @mmetc

Chore / Deps

• CI: remove explicit cache-dependency-path (#2452) @mmetc
• use go 1.20.7 (#2409) @mmetc
• golangci-lint: use v1.54, remove unnecessary byte/string conversions (#2438) @mmetc
• pkg/types cleanup (#2398) @mmetc
• remove calls to log.Fatal (#2399) @mmetc
• apic: minor refactoring (#2415) @mmetc
• update pytest dependencies (#2407) @mmetc
• update pytest dependencies (#2389) @mmetc
• build target for "make tidy" (#2378) @mmetc
• update google/winops dependency (#2366) @mmetc
• update gonic/gin to 1.9.1 (#2230) @mmetc
• expose the FormatAlert function to other packages (#2248) @blotus
• update ansible requirements (#2364) @sabban
• CI: test with postgres 15 (#2149) @mmetc
• update dependency: docker/docker (#2360) @mmetc
• typo fix, uppercase 'API', adjusted log level (#2361) @mmetc
• use same levenshtein package for cscli, ent, hcl (#2359) @mmetc
• use go 1.20.6 (#2358) @mmetc
• update pytest dependencies (#2356) @mmetc
• update dependencies: k8s, swag, jwt (#2357) @mmetc
• update dependency on goccy/go-yaml for arm32 fix (#2343) @mmetc
• CI: bump and lock pytest dependencies (#2340) @mmetc
• update grpc dependency to latest stable version (#2339) @mmetc
• errors.Wrap -> fmt.Errorf (#2333) @mmetc
• CI: reduce test verbosity; set PKG_CONFIG_PATH for re2 in rpm distros (#2331) @mmetc
• update go-re2 dep to fix arm32 build (#2332) @mmetc
• tests: vagrant refactoring (#2328) @mmetc
• CI: update ansible tests for re2 (#2318) @mmetc
• errors.Wrap -> fmt.Errorf (#2317) @mmetc
• func tests: install some dependencies from make, log test helpers (#2314) @mmetc
• rename metabase APIClient to avoid confusion (#2305) @mmetc
• CI: Update setup-go action to v4 (with automatic cache) (#2168) @mmetc
• docker: build same re2 version for alpine/debian; bump yq (#2311) @mmetc
• update debian version to have latest systemd (#2304) @he2ss
• CI: build docker version with c++ re2 (static) (#2307) @mmetc
• errors.Wrap -> fmt.Errorf; clean up imports (#2301) @mmetc
• CI: add fedora-37, -38 to vagrant tests (#2299) @mmetc
• update leakybucket readme (#2298) @mmetc
• errors.Wrap -> fmt.Errorf (#2297) @mmetc
• update go dependencies (#2293) @mmetc
• spellcheck/style leakybucket readme (#2294) @mmetc
• use go 1.20.5 (#2280) @mmetc
• light pkg/parser cleanup (#2279) @mmetc
• trim pkg/types: move DataSet/GetData to pkg/cwhub, removed unused Clone function (#2271) @mmetc
• add missing import (#2275) @mmetc
• minor refactor to pkg/types, cscli machines (#2270) @mmetc
• move grok_pattern.go away from pkg/types to reduce bouncer dependencies (#2269) @mmetc
• don't pre-create log files (not required anymore) (#2267) @mmetc
• CI: add tests for metrics configuration (#2251) @mmetc
• CI: refactor makefile for plugins and vendor target (#2256) @mmetc
• update notif threshold test on windows (#2265) @mmetc
• show option -winsvc only under windows (#2258) @mmetc
• CI: make clean -> remove coverage data (#2259) @mmetc
• make: allow using a development version of Go, with a warning (#2260) @mmetc
• gitignore: ignore .vagrant directories (#2262) @mmetc
• default config: simulation off -> false (yaml 1.2) (#2263) @mmetc
• dependencies: replaced function calls to pkg/types, errors.Wrap (#2235) @mmetc
• CI: refactoring pkg/csplugin (#2247) @mmetc
• CI: separate stderr in all func tests (#2250) @mmetc
• update libsystemd in debian docker image (#2245) @he2ss
• types.InSlice() -> slices.Contains() (#2246) @mmetc

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation

Take a look at the installation instructions.

v1.5.3-rc7

Changes

• scenario labels to map string interface (#2201) @AlteredCoder
• do not send more than group_threshold alerts at once to a notification plugin (#2264) @mmetc
• cscli: add G (1e9) suffix to metric units (#2254) @mmetc

New Features

• add sentinel notification plugin (#2268) @blotus
• Add bayesian bucket type (#2290) @seemanne
• allow running rootless docker tests (#2281) @mmetc

Improvements

• CI: update pytest-cs - don't remove stopped containers after tests (#2459) @mmetc
• minor log message improvements (#2455) @mmetc
• [enhancement] cscli explain --labels (#2461) @LaurenceJJones
• refact alert/decisions insert/update to avoid database locking in bulk operations (#2446) @mmetc
• Add html escape function so it can be invoked from template (#2451) @LaurenceJJones
• fix "cscli console disable --all"; cleanup "cscli console" command (#2444) @mmetc
• Make: build with debug symbols in func tests or if DEBUG=1; drop BUILD_VENDOR_FLAGS (#2443) @mmetc
• alternate vendor file (xz compression and version number) (#2425) @mmetc
• move plugins/notifications/* to cmd/notification-* (#2429) @mmetc
• Timeout while waiting for events to be flushed (#2423) @mmetc
• Unmarshal Json add log context (#2414) @LaurenceJJones
• Add method name to child logger (#2411) @LaurenceJJones
• Simplify context add (#2408) @AlteredCoder
• Add bouncers prune command (#2379) @LaurenceJJones
• update dependency on go-cs-lib; drop the pkg/ part (#2393) @mmetc
• Add machines prune command (#2011) @LaurenceJJones
• Add metabase version override and update (#2370) @LaurenceJJones
• change output of "cscli metrics -o [json|raw]" from plain list to map with table names (#2375) @mmetc
• Reduce log verbosity at startup (#2363) @mmetc
• Make: error if BUILD_VERSION does not start with "v" (#2355) @mmetc
• support for stdin with "cscli decision import" and raw values (#2291) @mmetc
• non-fatal error if some datasource can't be run (i.e. journalctl but systemd is missing) (#2309) @mmetc
• Build with libre2 by default, options for wasm and static; add mk/gmsl (#2295) @mmetc
• send metrics sooner if agents are added/removed (#2296) @mmetc
• append vendor.tgz to each release (#2288) @mmetc
• CI: vagrant configuration for debian 12 (#2285) @LaurenceJJones
• CI: Remove cache entries when closing a PR (#2289) @mmetc
• Update jsonextract.go (#2287) @LaurenceJJones
• Implement "crowdsec -fatal" flag; change help message (#2266) @mmetc
• don't log systemd notification error if not running under systemd (#2274) @mmetc
• build against libre2-dev if found (#2255) @mmetc
• log.Warning if a notification is configured twice (#2240) @mmetc
• CI: publish dev-debian docker image (amd64 only) (#2252) @mmetc
• CI: use hub cli to upload release tar (#2244) @mmetc

Bug Fixes

• fix the behavior of -a option of cscli alerts list : do not hide alerts with no associated decisions (#2435) @buixor
• option db_client.decision_bulk_size (#2440) @mmetc
• update functional tests for build pipeline (#2442) @mmetc
• Whitelist reason (#2439) @LaurenceJJones
• Remove "and exit." when showing list of commands when running cscli (#2431) @RelativeSure
• Remove duplicate line (#2432) @encg
• fix behavior of flag disable_http_retry_backoff (#2426) @mmetc
• conditional overflow doesn't overflow on capacity (#2412) @sabban
• CI: increase test sleep to fix flaky acquisition/file test under win (#2410) @mmetc
• cscli decisions list -o json => [] instead of null; same for alerts (#2397) @mmetc
• [cscli] bouncer delete fix wrong short (#2404) @LaurenceJJones
• fix the rpm build (#2396) @sabban
• Fix unit file after modification (#2395) @sabban
• docker: allow GID with no persistent sqlite db (#2381) @mmetc
• fix "crowdsec-cli/require" log verbosity (#2390) @mmetc
• fix a confusing debug message (#2386) @buixor
• Check cscli preconditions with crowdsec-cli/require package (#2388) @mmetc
• replace all imports of path with path/filepath (#2330) @mmetc
• go mod tidy for sentinel plugin (#2377) @blotus
• fix double push of metrics by properly handling tickers (#2374) @mmetc
• fix the ci by adding the ability to enforce event ordering (#2347) @sabban
• add object key in src for S3 acquis (#2342) @blotus
• Properly match new files on windows when doing file acquisition (#2329) @blotus
• rename status to state in fire response (#2313) @blotus
• raise error with invalid 'on_success', 'on_failure' in profile (#2303) @mmetc
• docker: always merge .yaml.local in conf_get() (#2272) @mmetc
• Change api_key encoding to base64 to comply with bcrypt max size (#2302) @mmetc
• fix error message when failing to parse ip address or range (#2292) @mmetc

Chore / Deps

• CI: remove explicit cache-dependency-path (#2452) @mmetc
• use go 1.20.7 (#2409) @mmetc
• golangci-lint: use v1.54, remove unnecessary byte/string conversions (#2438) @mmetc
• pkg/types cleanup (#2398) @mmetc
• remove calls to log.Fatal (#2399) @mmetc
• apic: minor refactoring (#2415) @mmetc
• update pytest dependencies (#2407) @mmetc
• update pytest dependencies (#2389) @mmetc
• Build target for "make tidy" (#2378) @mmetc
• update google/winops dependency (#2366) @mmetc
• update gonic/gin to 1.9.1 (#2230) @mmetc
• expose the FormatAlert function to other packages (#2248) @blotus
• Update ansible requirements (#2364) @sabban
• CI: test with postgres 15 (#2149) @mmetc
• Update dependency: docker/docker (#2360) @mmetc
• typo fix, uppercase 'API', adjusted log level (#2361) @mmetc
• Use same levenshtein package for cscli, ent, hcl (#2359) @mmetc
• Use go 1.20.6 (#2358) @mmetc
• Update pytest dependencies (#2356) @mmetc
• Update dependencies: k8s, swag, jwt (#2357) @mmetc
• update dependency on goccy/go-yaml for arm32 fix (#2343) @mmetc
• CI: bump and lock pytest dependencies (#2340) @mmetc
• Update grpc dependency to latest stable version (#2339) @mmetc
• errors.Wrap -> fmt.Errorf (#2333) @mmetc
• CI: reduce test verbosity; set PKG_CONFIG_PATH for re2 in rpm distros (#2331) @mmetc
• Update go-re2 dep to fix arm32 build (#2332) @mmetc
• tests: vagrant refactoring (#2328) @mmetc
• CI: update ansible tests for re2 (#2318) @mmetc
• errors.Wrap -> fmt.Errorf (#2317) @mmetc
• func tests: install some dependencies from make, log test helpers (#2314) @mmetc
• rename metabase APIClient to avoid confusion (#2305) @mmetc
• CI: Update setup-go action to v4 (with automatic cache) (#2168) @mmetc
• docker: build same re2 version for alpine/debian; bump yq (#2311) @mmetc
• update debian version to have latest systemd (#2304) @he2ss
• CI: build docker version with c++ re2 (static) (#2307) @mmetc
• errors.Wrap -> fmt.Errorf; clean up imports (#2301) @mmetc
• CI: add fedora-37, -38 to vagrant tests (#2299) @mmetc
• update leakybucket readme (#2298) @mmetc
• errors.Wrap -> fmt.Errorf (#2297) @mmetc
• Update go dependencies (#2293) @mmetc
• spellcheck/style leakybucket readme (#2294) @mmetc
• Use go 1.20.5 (#2280) @mmetc
• light pkg/parser cleanup (#2279) @mmetc
• trim pkg/types: move DataSet/GetData to pkg/cwhub, removed unused Clone function (#2271) @mmetc
• add missing import (#2275) @mmetc
• minor refactor to pkg/types, cscli machines (#2270) @mmetc
• Move grok_pattern.go away from pkg/types to reduce bouncer dependencies (#2269) @mmetc
• don't pre-create log files (not required anymore) (#2267) @mmetc
• CI: add tests for metrics configuration (#2251) @mmetc
• CI: refactor makefile for plugins and vendor target (#2256) @mmetc
• update notif threshold test on windows (#2265) @mmetc
• show option -winsvc only under windows (#2258) @mmetc
• CI: make clean -> remove coverage data (#2259) @mmetc
• make: allow using a development version of Go, with a warning (#2260) @mmetc
• gitignore: ignore .vagrant directories (#2262) @mmetc
• default config: simulation off -> false (yaml 1.2) (#2263) @mmetc
• dependencies: replaced function calls to pkg/types, errors.Wrap (#2235) @mmetc
• CI: refactoring pkg/csplugin (#2247) @mmetc
• CI: separate stderr in all func tests (#2250) @mmetc
• update libsystemd in debian docker image (#2245) @he2ss
• types.InSlice() -> slices.Contains() (#2246) @mmetc

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation

Take a look at the installation instructions.

v1.5.3-rc6

Changes

• scenario labels to map string interface (#2201) @AlteredCoder
• do not send more than group_threshold alerts at once to a notification plugin (#2264) @mmetc
• cscli: add G (1e9) suffix to metric units (#2254) @mmetc

New Features

• add sentinel notification plugin (#2268) @blotus
• Add bayesian bucket type (#2290) @seemanne
• allow running rootless docker tests (#2281) @mmetc

Improvements

• fix "cscli console disable --all"; cleanup "cscli console" command (#2444) @mmetc
• Make: build with debug symbols in func tests or if DEBUG=1; drop BUILD_VENDOR_FLAGS (#2443) @mmetc
• alternate vendor file (xz compression and version number) (#2425) @mmetc
• move plugins/notifications/* to cmd/notification-* (#2429) @mmetc
• Timeout while waiting for events to be flushed (#2423) @mmetc
• Unmarshal Json add log context (#2414) @LaurenceJJones
• Add method name to child logger (#2411) @LaurenceJJones
• Simplify context add (#2408) @AlteredCoder
• Add bouncers prune command (#2379) @LaurenceJJones
• update dependency on go-cs-lib; drop the pkg/ part (#2393) @mmetc
• Add machines prune command (#2011) @LaurenceJJones
• Add metabase version override and update (#2370) @LaurenceJJones
• change output of "cscli metrics -o [json|raw]" from plain list to map with table names (#2375) @mmetc
• Reduce log verbosity at startup (#2363) @mmetc
• Make: error if BUILD_VERSION does not start with "v" (#2355) @mmetc
• support for stdin with "cscli decision import" and raw values (#2291) @mmetc
• non-fatal error if some datasource can't be run (i.e. journalctl but systemd is missing) (#2309) @mmetc
• Build with libre2 by default, options for wasm and static; add mk/gmsl (#2295) @mmetc
• send metrics sooner if agents are added/removed (#2296) @mmetc
• append vendor.tgz to each release (#2288) @mmetc
• CI: vagrant configuration for debian 12 (#2285) @LaurenceJJones
• CI: Remove cache entries when closing a PR (#2289) @mmetc
• Update jsonextract.go (#2287) @LaurenceJJones
• Implement "crowdsec -fatal" flag; change help message (#2266) @mmetc
• don't log systemd notification error if not running under systemd (#2274) @mmetc
• build against libre2-dev if found (#2255) @mmetc
• log.Warning if a notification is configured twice (#2240) @mmetc
• CI: publish dev-debian docker image (amd64 only) (#2252) @mmetc
• CI: use hub cli to upload release tar (#2244) @mmetc

Bug Fixes

• option db_client.decision_bulk_size (#2440) @mmetc
• update functional tests for build pipeline (#2442) @mmetc
• Whitelist reason (#2439) @LaurenceJJones
• Remove "and exit." when showing list of commands when running cscli (#2431) @RelativeSure
• Remove duplicate line (#2432) @encg
• fix behavior of flag disable_http_retry_backoff (#2426) @mmetc
• conditional overflow doesn't overflow on capacity (#2412) @sabban
• CI: increase test sleep to fix flaky acquisition/file test under win (#2410) @mmetc
• cscli decisions list -o json => [] instead of null; same for alerts (#2397) @mmetc
• [cscli] bouncer delete fix wrong short (#2404) @LaurenceJJones
• fix the rpm build (#2396) @sabban
• Fix unit file after modification (#2395) @sabban
• docker: allow GID with no persistent sqlite db (#2381) @mmetc
• fix "crowdsec-cli/require" log verbosity (#2390) @mmetc
• fix a confusing debug message (#2386) @buixor
• Check cscli preconditions with crowdsec-cli/require package (#2388) @mmetc
• replace all imports of path with path/filepath (#2330) @mmetc
• go mod tidy for sentinel plugin (#2377) @blotus
• fix double push of metrics by properly handling tickers (#2374) @mmetc
• fix the ci by adding the ability to enforce event ordering (#2347) @sabban
• add object key in src for S3 acquis (#2342) @blotus
• Properly match new files on windows when doing file acquisition (#2329) @blotus
• rename status to state in fire response (#2313) @blotus
• raise error with invalid 'on_success', 'on_failure' in profile (#2303) @mmetc
• docker: always merge .yaml.local in conf_get() (#2272) @mmetc
• Change api_key encoding to base64 to comply with bcrypt max size (#2302) @mmetc
• fix error message when failing to parse ip address or range (#2292) @mmetc

Chore / Deps

• use go 1.20.7 (#2409) @mmetc
• golangci-lint: use v1.54, remove unnecessary byte/string conversions (#2438) @mmetc
• pkg/types cleanup (#2398) @mmetc
• remove calls to log.Fatal (#2399) @mmetc
• apic: minor refactoring (#2415) @mmetc
• update pytest dependencies (#2407) @mmetc
• update pytest dependencies (#2389) @mmetc
• Build target for "make tidy" (#2378) @mmetc
• update google/winops dependency (#2366) @mmetc
• update gonic/gin to 1.9.1 (#2230) @mmetc
• expose the FormatAlert function to other packages (#2248) @blotus
• Update ansible requirements (#2364) @sabban
• CI: test with postgres 15 (#2149) @mmetc
• Update dependency: docker/docker (#2360) @mmetc
• typo fix, uppercase 'API', adjusted log level (#2361) @mmetc
• Use same levenshtein package for cscli, ent, hcl (#2359) @mmetc
• Use go 1.20.6 (#2358) @mmetc
• Update pytest dependencies (#2356) @mmetc
• Update dependencies: k8s, swag, jwt (#2357) @mmetc
• update dependency on goccy/go-yaml for arm32 fix (#2343) @mmetc
• CI: bump and lock pytest dependencies (#2340) @mmetc
• Update grpc dependency to latest stable version (#2339) @mmetc
• errors.Wrap -> fmt.Errorf (#2333) @mmetc
• CI: reduce test verbosity; set PKG_CONFIG_PATH for re2 in rpm distros (#2331) @mmetc
• Update go-re2 dep to fix arm32 build (#2332) @mmetc
• tests: vagrant refactoring (#2328) @mmetc
• CI: update ansible tests for re2 (#2318) @mmetc
• errors.Wrap -> fmt.Errorf (#2317) @mmetc
• func tests: install some dependencies from make, log test helpers (#2314) @mmetc
• rename metabase APIClient to avoid confusion (#2305) @mmetc
• CI: Update setup-go action to v4 (with automatic cache) (#2168) @mmetc
• docker: build same re2 version for alpine/debian; bump yq (#2311) @mmetc
• update debian version to have latest systemd (#2304) @he2ss
• CI: build docker version with c++ re2 (static) (#2307) @mmetc
• errors.Wrap -> fmt.Errorf; clean up imports (#2301) @mmetc
• CI: add fedora-37, -38 to vagrant tests (#2299) @mmetc
• update leakybucket readme (#2298) @mmetc
• errors.Wrap -> fmt.Errorf (#2297) @mmetc
• Update go dependencies (#2293) @mmetc
• spellcheck/style leakybucket readme (#2294) @mmetc
• Use go 1.20.5 (#2280) @mmetc
• light pkg/parser cleanup (#2279) @mmetc
• trim pkg/types: move DataSet/GetData to pkg/cwhub, removed unused Clone function (#2271) @mmetc
• add missing import (#2275) @mmetc
• minor refactor to pkg/types, cscli machines (#2270) @mmetc
• Move grok_pattern.go away from pkg/types to reduce bouncer dependencies (#2269) @mmetc
• don't pre-create log files (not required anymore) (#2267) @mmetc
• CI: add tests for metrics configuration (#2251) @mmetc
• CI: refactor makefile for plugins and vendor target (#2256) @mmetc
• update notif threshold test on windows (#2265) @mmetc
• show option -winsvc only under windows (#2258) @mmetc
• CI: make clean -> remove coverage data (#2259) @mmetc
• make: allow using a development version of Go, with a warning (#2260) @mmetc
• gitignore: ignore .vagrant directories (#2262) @mmetc
• default config: simulation off -> false (yaml 1.2) (#2263) @mmetc
• dependencies: replaced function calls to pkg/types, errors.Wrap (#2235) @mmetc
• CI: refactoring pkg/csplugin (#2247) @mmetc
• CI: separate stderr in all func tests (#2250) @mmetc
• update libsystemd in debian docker image (#2245) @he2ss
• types.InSlice() -> slices.Contains() (#2246) @mmetc

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation

Take a look at the installation instructions.