Skip to content

Releases: criblpacks/cribl-palo-alto-networks

0.6.3 - Add correlation pipeline

03 Mar 23:11
9b24705
Compare
Choose a tag to compare

What's Changed

  • fixing comments on pipelines to reflect Lookup by @babushka23 in #11
  • Add mermaid markdown process flow diagram for #2 by @bdalpe in #13
  • Add correlation route, pipeline, and sample for correlation event logs for #12 by @bdalpe in #14

New Contributors

Full Changelog: 0.6.2...0.6.3

0.6.2 - Time zone support++

17 Nov 23:00
53322de
Compare
Choose a tag to compare

device_info.csv now uses Olson formatted timezones (e.g. America/Chicago) instead of static offsets and the C.Time.adjustTZ function for better time zone support. Thank you @FusionFC for the request.

0.6.1 - Host name extraction bug fix

03 Nov 18:57
1acd969
Compare
Choose a tag to compare
  • Bug fix - Corrects an issue in the pipeline where the hostname is not correctly extracted if the date is a single digit. Unifies the regex extraction across all pipelines. Thank you @FusionFC!
  • Routes use indexOf filter instead of test for higher performance.

0.6.0 - Time Zone Support

14 Sep 21:11
5b69547
Compare
Choose a tag to compare
  • Adds support for adjusting time zones based on device/host names
  • Time zone configurations can be added into a devices_info.csv file which is applied in all processing pipelines
  • Lookup supports regular expressions allowing matching based on your device naming standards

0.6.0-RC1

14 Sep 19:19
66fc7b3
Compare
Choose a tag to compare
0.6.0-RC1 Pre-release
Pre-release

Adds support for timezone

0.5.2 - Updates for LogStream 3.1

12 Aug 13:55
cb6fecb
Compare
Choose a tag to compare

Adds display name to the pack metadata as this is now supported in LogStream 3.1.

0.5.1

21 Jul 20:35
e5dd660
Compare
Choose a tag to compare

Fixes broken link in README.md

0.5.0

20 Jul 19:43
fecd699
Compare
Choose a tag to compare

Core functionality of the pack including classification of messages, removing the syslog header, and reformatting messages to remove extra timestamps.