v0.26.0
Visit the Brim Download page to find the package for your OS platform.
- zqd: Update Zeek pointer to v3.2.1-brim7 which provides the latest geolocation data (#1855)
- zq: Improve the error message shown when row size exceeds max read buffer (#1808)
- zqd: Remove
listen -pprof
flag (profiling data is now always made available) (#1800) - zson: Add initial ZSON parser and reader (#1806, #1829, #1830, #1832)
- zar: Use a newly-created index package to create archive indices (#1745)
- zq: Fix issues with incorrectly-formatted CSV output (#1828, #1818, #1827)
- zq: Add support for inferring data types of "extra" fields in imported NDJSON (#1842)
- zqd: Send a warning when unknown fields are encountered in NDJSON logs generated from pcap ingest (i.e. Suricata) (#1847)
- zq: Add NDJSON typing configuration for the Suricata "vlan" field (#1851)