Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • Fixed issue where copy_first or copy_last in event correlation would not be able to copy the node name, this caused the synthetic event to use the global node name. if you have been using copy node in the correlation rule you should replace this with node_uuid
  • Script outputs in emails will now render correctly
  • New plugin interface to easily work on other events in parser plugins, docs coming.
    • In a parser plugin the third argument is now a helper interface replacing the full opEvents object.
    • Setting opevents_parser_plugin_use_events_obj to true will allow you to use the full opEvents object to retain pre 4.1.1 functionality

opEvents 4.1.0

Status
subtletrue
colourGreen
titlereleased
  1 December 2021

...