v0.3.1

Changes

• add support for prometheus aggregation (#192) @buixor

Improvements

• add a warning when a grok pattern ends with \n (#183) @buixor

Bug Fixes

• fix tests (#191) @erenJag
• improve fileInit func by not loading unspecified data (#189) @erenJag
• Fix mulitple plugins support : When ReadAT is called, concat all the plugins results (#185) @buixor

Documentation

• Acquisition extra tests (#188) @buixor
• add extra tests for exprlib visitors (#187) @buixor
• Document plugin writting (#184) @buixor
• documentation improvment (#182) @buixor
• link to prometheus dashboard repository (#180) @buixor
• doc : add debugging in cheatsheets (#179) @buixor

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

v0.3.0

Crowdsec v0.3.0

Changes

New features

• Add support for MySQL databases (#135) : documentation
• Add simulation support for scenarios (#136) : documentation

Improvements

• Support multiple args for all cscli upgrade/install/remove commands (#132)
• Add ability to filter 'ban list' output (--ip --range --as --country --reason) (#115)
• Unify prometheus metrics & stick to conventions : documentation
• Database : Support automatic db flushing to control DB's size (#91)
• Add expr helper to check if IP is in ipRange (#113)
• Add debug expr (#168)
• Add output raw for ban list (#108)
• Allow comments with # in expr wordlists (#125)

BugFixes

• Add possibility to filter the size of cscli ban list returned array (#129)
• fix multi runners : only run several parsers for now (#98)
• fix crash if there is no source in events leading to overflow (#96)
• fix empty machineid (#95)
• fix backup/restore that doesn't backup and restore simulation file (#133)

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

v0.3.0-rc3

Crowdsec v0.3.0-rc2

Changes

• fresh install gif (#170) @buixor
• fix doc for output plugins (#167) @buixor
• improve logging in cwapi pkg (#164) @AlteredCoder
• Advise user to perform a reload when appropriate (#163) @buixor
• SQLite : busy timeout to 10s rather than 1s (#162) @buixor

Improvments

• basic functional tests (#169) @buixor
• tests for pkg/database (#151) @buixor
• improve release-drafter configuration (#165) @AlteredCoder

Bug Fixes

• fix #137 (#166) @AlteredCoder

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

v0.3.0-rc2

Crowdsec v0.3.0-rc2

What’s Changed

Improvments

• add grafana images to show some dashboard examples (#161) @erenJag
• Update doc : metrics (#158) @erenJag

Bugfix

• remove data folder from release and fix binary size (#160) @AlteredCoder
• default config if none specified (#159) @buixor

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

v0.3.0-rc1

Crowdsec v0.3.0-rc1

What’s Changed

New Features:

• add mysql support (#135) @buixor
• Simulation support (#136) @buixor

Improvments:

• support multiple args for all cscli upgrade/install/remove commands (#132) @buixor
• Add possibility to filter the size of cscli ban list returned array (#129) @AlteredCoder
• Allow comments with # in expr wordlists (#125) @AlteredCoder
• Update documentation for crowdsec v0.3.0 (#141) @buixor
• Add unitest in pkg/acquisition and pkg/cwapi (#145) @AlteredCoder
• Add unitest in pkg/cwhub (#144) @buixor
• Add unitest in pkg/csconfig and improve pkg/exprhelpers tests (#150) @AlteredCoder

Bug fixes:

• fix backup/restore that doesn't backup and restore simulation file @AlteredCoder
• wizard now install simulation file also
• Fix#80 (#133) @AlteredCoder
• update crowdsec architecture image (#131) @erenJag
• fix #124 (#127) @erenJag
• Doc landing page : introduce early the concept of parsers scenarios and collections (#130) @buixor
• Doc : fix whitelists documentation + document data for parsers/scenarios + document expr helpers (#126) @buixor
• update documentation for crowdsec installation (#118) @buixor
• give a warning (#120) @FaricaUnknown
• fix debug verbosity (#121) @buixor
• dedup ban_application entries (#143) @buixor
• No sql transaction + proper time-machine wait (#148) @buixor
• Add new workflow to create tag in hub-tests (#153) @AlteredCoder
• fix#154 : match the hashes version in reverse order (#156) @buixor
• rename metrics and update metrics helps (#152) @erenJag
• fix cwapi bug with new sling usage (#157) @AlteredCoder

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

v0.3.0-rc0

Crowdsec 0.3.0

What’s Changed

New Features:

• add mysql support (#135) @buixor
• Simulation support (#136) @buixor

Improvments:

• support multiple args for all cscli upgrade/install/remove commands (#132) @buixor
• Add possibility to filter the size of cscli ban list returned array (#129) @AlteredCoder
• Allow comments with # in expr wordlists (#125) @AlteredCoder

Bug fixes:

• fix backup/restore that doesn't backup and restore simulation file @AlteredCoder
• wizard now install simulation file also
• Fix#80 (#133) @AlteredCoder
• update crowdsec architecture image (#131) @erenJag
• fix #124 (#127) @erenJag
• Doc landing page : introduce early the concept of parsers scenarios and collections (#130) @buixor
• Doc : fix whitelists documentation + document data for parsers/scenarios + document expr helpers (#126) @buixor
• update documentation for crowdsec installation (#118) @buixor
• give a warning (#120) @FaricaUnknown
• fix debug verbosity (#121) @buixor
• dedup ban_application entries (#143) @buixor

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

v0.2.3

Crowdsec 0.2.3

What’s Changed

• add ability to filter 'ban list' output (--ip --range --as --country --reason) (#115) @buixor
• add expr helper to check if IP is in ipRange (#113) @erenJag
• Sqlite : Support automatic db flushing (#91) @buixor
• add output raw for ban list (#108) @AlteredCoder
• Fix postOverflows behaviours to allow better whitelists (see. https://hub.crowdsec.net/author/crowdsecurity/collections/whitelist-good-actors)

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

v0.2.2

Crowdsec 0.2.2

What’s Changed

• fix multi runners : only run several parsers for now (#98) @buixor
• fix #89 : crash if there is no source in events leading to overflow (#96) @buixor
• Fix empty machineid (#95) @AlteredCoder

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

v0.2.1

Crowdsec 0.2.1

What’s Changed

• Allow CrowdSec to start if geoip data are not downloaded (#92) @AlteredCoder
• Fix hub CI (#86) @erenJag

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

v0.2.0

Crowdsec v0.2.0

What’s Changed

• Support for reload (sighup) (#79) (fix #75)
• Metrics are always displayed in the same order (#79)
• Add a metric to count the number of current instance of a given bucket (#79)

Bugfixes

• fix #73 (cscli Atoi error)

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.