2.30.0

2.30.0 - 2024-11-27

New

• New output: Webex (PR#979 thanks to @k0rventen)
• New output: OTLP Metrics (PR#1012 thanks to @ekoops)
• New output: Datadog Logs (PR#1052 thanks to @yohboy)

Enhancement

• Reuse of the http client for 3-4x increase of the throughput (PR#962 thanks to @alekmaus)
• Improve outputs throughput handling (PR#966 thanks to @alekmaus)
• Batching and gzip compression for the Elastticsearch output (PR#967 thanks to @alekmaus)
• Use the same convention for the Prometheus metrics than Falco (PR#995)
• Add APIKey for Elasticsearch output (PR#980 thanks to @alekmaus)
• Add Pipeline configuration for Elasticsearch output (PR#981 thanks to @alekmaus)
• Add MessageThreadID configuration in Telegram output (PR#1008 thanks to @vashian)
• Support multi-architecture in build (PR#1024 thanks to @nickytd)
• Add falco as source for the Datadog Events (PR#1043 thanks to @maxd-wttj)
• Support AlertManager output in HA mode (PR#1051)

Fix

• Fix PolicyReports created in the same namespace than previous event (PR#978)
• Fix missing customFields/extraFields in the Elasticsearch payload (PR#1033)
• Fix incorrect key name for CloudEvent spec attribute (PR#1051)

Warning

Breaking change: The Prometheus metrics have different names from this release, it might break the queries for the dashboards and alerts.

2.29.0

2.29.0 - 2024-07-01

New

• New output: Dynatrace (PR#575 thanks to @blu3r4y)
• New output: OTLP Traces (PR#613 thanks to @jjo)
• New output: Sumologic (PR#656 thanks to @mencarellic)
• New output: Quickwit (PR#736 thanks to @idrissneumann)
• New output: Falco Talon (PR#929)

Enhancement

• Add global TLS config (PR#588 thanks to @ibice)
• Add source as label for Prometheus metrics (PR#665)
• Better logs when TLS is enabled (PR#668)
• Add test for utils sorting function (PR#694 thanks to @stevemcquaid)
• Refactor of the InitClient (PR#765 thanks to @idrissneumann)
• Allow to use alternative endpoints for the AWS S3 output (PR#791 thanks to @gysel)
• Consistent order for the output_fields and tags (PR#802)
• Allow to add custom headers for AlertManager output (PR#827 thanks to @Umaaz)
• Add more checks for the GCP Storage output (PR#858)
• Possibility to create an index template for the Elasticsearch output (PR#868)
• Possibility to "flatten" the output_fields (replace . by _) for the Elasticsearch output to avoid mapping conflicts (PR#868)
• Truncate the fields with a length > 512 chars to avoid rejection from some outputs (PR#871)
• Change the license to Apache 2.0 (PR#882 thanks to @leogr)
• Revamp the PolicyReport output (PR#899)
• New parameter outputFieldFormat to modify on the fly the format of the output field (PR#901)

Fix

• Fix missing root CA for the Kafka output (PR#581 thanks to @claviola)
• Fix bug with the extension source in the CloudEvent output (PR#587)
• Fix panics in the Prometheus output when hostname field is missing (PR#628)
• Remove refs to deprecated ioutil modules (PR#639 thanks to @testwill)
• Fix locks in the Loki output (PR#647 thanks to @bsod90)
• Split the docs for the outputs into multiple files (PR#648)
• Fix mTLS client verification failures due to missing ClientCAs (PR#666 thanks to @jgmartinez)
• Fix wrong env var for pagerduty output (PR#682)
• Remove hard settings for usernames in Mattermost and Rocketchat (PR#731)
• Fix multi lines json in the error lines (PR#764 thanks to @idrissneumann)
• Fix duplicated custom headers in clients (PR#801, PR#857)
• Fix the labels for the AlertManager output (PR#870 thanks to @Umaaz)

New Contributors

• @blu3r4y made their first contribution in #575
• @claviola made their first contribution in #581
• @testwill made their first contribution in #639
• @bsod90 made their first contribution in #647
• @mencarellic made their first contribution in #656
• @jgmartinez made their first contribution in #666
• @stevemcquaid made their first contribution in #694
• @idrissneumann made their first contribution in #740
• @cccsss01 made their first contribution in #748
• @jjo made their first contribution in #613
• @chaitushiva made their first contribution in #788
• @gysel made their first contribution in #791
• @Umaaz made their first contribution in #826
• @marcomandola made their first contribution in #835
• @oussemos made their first contribution in #908

Full Changelog: 2.28.0...2.29.0

2.29.0-rc.5

Changelog

• 7955940 specify goreleaser version

2.29.0-rc.4

Changelog

• be260db build(deps): bump github.com/nats-io/nkeys from 0.4.5 to 0.4.6

2.29.0-rc.3

Changelog

• 76871b4 fix(loki): fix the deadlock in Loki integration

2.29.0-rc.2

Changelog

• 7c7f9b2 display error message according to standards

2.29.0-rc.1

Changelog

• 5c4e6cf docs(dynatrace): [TR-1498] Add checkcert key to example config

2.28.0

2.28.0 - 2023-07-18

New

• New output: Redis (PR#396 thanks to @pandyamarut)
• New output: Telegram (PR#431 thanks to @zufardhiyaulhaq)
• New output: N8N (PR#462)
• New output: Grafana OnCall (PR#470)
• New output: OpenObserve (PR#509)

Enhancement

• Add output in the description annotation for AlertManager output (PR#341)
• Allow to set the http method for Webhook output (PR#399)
• Add hostname as prometheus label (PR#420 thanks to @Lowaiz)
• Allow to replace the brackets (PR#421)
• Allow to set custom http headers for Loki, Elasticsearch and Grafana outputs (PR#428)
• Add hostname, tags, custom and templated fields for TimescaleDB output (PR#438 thanks to @hileef)
• Allow to set thresholds for the dropped events in AlertManager ouput (PR#439 thanks to @Lowaiz)
• Match the priority with AlertManager severity label (PR#440 thanks to @Lowaiz)
• Add rolearn and externalid for the assume role for AWS outputs (PR#494)
• Allow to set the region for PagerDuty output (PR#500)
• Add TLS option + rewrite send method for the SMTP output (PR#502)
• Add attributes to GCP PubSub messages (PR#505 thanks to @annadorottya)
• Add option for TLS and mTLS for the server (PR#508 thanks to @annadorottya)
• Add setting to auto create the Kafka topic (PR#554)
• Add option to deploy a HTTP only server for specific endpoints (PR#565 thanks to @annadorottya)
• Support multiple bootstrap servers for Kafka output (PR#571 thanks to @ibice)
• Add option for TLS for Kafka output (PR#574)

Fix

• Fix error handling in AWS Security Lake output (PR#390)
• Fix breaking brackets in AWS SNS messages (PR#419)
• Fix setting name for the table of TimescaleDB output (PR#426 thanks to @alika)
• Fix cardinality issue with prometheus labels (PR#427)
• Fix panic when assert output fields which are nil (PR#429)
• Fix dependencies for Wavefront output (PR#432)
• Fix key pattern for AWS Security Lake output (PR#447)
• Fix default settings for Telegram output (PR#495 thanks to @schfkt)
• Fix URL generation for Spyderbat output (PR#506 thanks to @bc-sb)
• Fix nil values in Spyderbat output (PR#527 thanks to @spider-guy)
• Fix duplicated headers in SMTP output (PR#528 thanks to @apsega)
• Fix missing trim for names and values of labels for AlertManager output (PR#563 thanks to @Lowaiz)
• Fix missing returned errors for Kafka output (PR#573)

New Contributors

• @embano1 made their first contribution in #390
• @dependabot made their first contribution in #392
• @pandyamarut made their first contribution in #395
• @alika made their first contribution in #426
• @zufardhiyaulhaq made their first contribution in #431
• @hileef made their first contribution in #441
• @LucaGuerra made their first contribution in #463
• @schfkt made their first contribution in #495
• @annadorottya made their first contribution in #505
• @spyder-guy made their first contribution in #527
• @apsega made their first contribution in #528
• @ibice made their first contribution in #571

Full Changelog: 2.27.0...2.28.0

2.28.0-rc.1

Changelog

• 86fdf22 add setting topiccreation for kafka

2.28.0-rc.0

Changelog

• d0eda67 fix(gha): update dockerhub variable names for release job