v1.3.5

Version History

v1.3.5

Date	2022-04-06
Kind	Bugfix release
Author	[email protected], [email protected]

• Minor improvements
  • More QRADAR log source type definitions (thx to bitonio)
  • Added docker-compose ETP - Tenant example

v1.3.4

v1.3.4

Date	2022-03-08
Kind	Bugfix release
Author	[email protected] [email protected] huskar20

• Minor improvements
  • Added QRADAR log source type definitions (thx to bitonio)
  • Added SUMO Logic (thx to huskar20 for the contribution)
  • bumped CLI-MFA to v0.0.9
  • added resources, nodeSelector, tolerations and affinity to the helm values.yaml / template

v1.3.3

v1.3.3

Date	2022-02-28
Kind	Bugfix release
Author	[email protected]

• Bugfix
  • Adopted to new MFA CLI Version (only single feed "EVENT" available anymore)
  • Amended new dates to the file headers
  • Added volume to dockerfile as data storage for "autoresume"

v1.3.2

v1.3.2

Date	2022-02-10
Kind	Bugfix release
Author	[email protected]

• Features

  • Kubernetes deployment example / Helm charts added (start here)

• Minor improvements

  • Bumped ETP-CLI to version 0.3.7 in Dockerfile
  • Bumped EAA-CLI version to 0.4.6 in Dockerfile

• Bugfixes

  • fixed issue when using file handler and rotation at "midnight" - running back in time for 30 days
  • added a sanity (dictionary) check for "--httpauthheader"
  • fixed a bug in http reconnecting forever in certain circumstances
  • added a sanity check for "HTTP_OUT_FORMAT" to avoid issues with the ´%s´ seclector
  • removed forced http authentication token "--httpauthheader" (allow None)
  • discovered a bug in configparser -> see FAQ entry

v1.3.1

v1.3.1

Date	2021-12-20
Kind	Bugfix release
Author	[email protected]

• Bugfixes
  • fixed a checkpoint issue when using ETP / THREAD
  • some doc fixes

v1.3.0

Version 1.3.0

Date	2021-12-17
Kind	Feature & Bugfix release
Author	[email protected]

• Features

  • [internal] Added automated test scripts to improve continuous release quality
  • AUTO-RESUME feature enables ULS to automatically continue operation starting from the last saved checkpoint.
  • FileAction support to trigger custom scripts upon file rotation event.

• Minor improvements

  • Bumped ETP-CLI to version 0.3.6 in Dockerfile
  • Bumped EAA-CLI version to 0.4.5 in Dockerfile
  • Added additional fields to the monitoring output (uls_version, event_count_interval)

• Bugfixes

  • removed hard requirement to run ULS via bin/uls.py - can now be run from everywhere
  • introduced HTTP Timeout (for HTTP OUTPUT) to the configuration file (http stream did not issue proper error messages in some cases)
  • Fixed an output issue on "CLI failure", added configureable output handling to the config
  • replaced pip with pip3 in CLI usage docs
  • Fixed a windows bug (bypass blocking on windows) + added a FAQ entry on how fix a installation specific bug

v1.2.0

Date	2021-11-02
Kind	Feature & Bugfix release
Author	[email protected], [email protected]

• Features
  • Transformation Support for output format transformation (additional log formats and integrations) introduced
  • MCAS transformation: Microsoft Cloud Application Security
  • JMESPATH transformation: Create your own pattern / filter / searches
  • added --starttime to tell ULS where to start scratching the logs (EPOCH time required)
  • added --endtime to allow cherry-picking of a specific time-slice (EPOCH time required)
  • added FILE OUTPUT support (writes log streams to a file to the local filesystem)
• Bugfix
  • Fixed a bug in proxy handling (using cli param), re-enabled CLI cmd and amended docs
  • Fixed a bug that prevented "--version" to work properly
  • Fixed a bug that mitigates version display bug on the CLI (solves the symptom only)
  • Fixed a bug that potentially allowed buffered output from the CLI's (CLI calls and DOCKERFILE)
• Minor improvements
  • updated base container to "python:3.10-slim-bullseye" ****
  • Introduced "systemd" example to Command Line Usage docs
  • Introduced docker check to version check and amendment to UA Header
  • Introduced - Message re-transmission on network error
  • ReFactored INPUT / OUTPUT handler to reduce compute & memory footprint
  • bumped EAA CLI Version to 0.4.4 (docker only)
  • Introduced dedicated "OUTPUT" documentation
  • introduced uls own requirements.txt in the bin directory - still trying to keep req's as low as possible.

v1.1.0

v1.1.0

Date	2021-08-18
Kind	Bugfix / Feature
Author	[email protected]

• Features
  • Added DNS and PROXY feeds to ETP Input (<3 Sara)
• Minor improvements
  • Version number fix (Stated 0.9.0 instead of 1.x.x)
  • debug "message" fix ( changed HTTP to HTTP(S) to avoid misunderstanding)
  • documented workaround for discovered proxy issue
  • enabled json highlighting in Log_overview
  • added better error guidance when basic stuff is unset (input / output)
  • moved docker-compose from root dir to /docs
  • added read_only: true to the docker-compose.yml files (security enhancement)

v1.0.0

First stable release for ULS.

v0.9.0

First release candidate for initial stable release