v1.2.0-rc3

New features

• Support for notification plugins (slack,splunk,ES, http push) (#878)
• Improve community blocklist pull management : prepare for new consensus release (#871)
• Add /health endpoint to local API (#881) @nanikjava

Bugfixes & Improvements

• update to use cdn for hub (#920) @sabban
• Remove last remaining autogen messages in cscli doc (#926) @blotus
• Avoid code duplication for protobuf in plugins (#918) @sbs2001
• fix release drafter + readme + remove dead readme for acquis (#933) @buixor
• fix #919 : display error message (#929) @buixor
• fix datasource prometheus metrics not being registered (#927) @blotus
• enforce a bit more parsing for resillience (#928) @buixor
• allow deleting multiple machines (#930) @AlteredCoder
• Update cscli doc for docusaurus (#924) @blotus
• Add plugin interface code in protobufs package (#921) @sbs2001
• don't try to send/don't notify if plugin chan is nil (#923) @buixor
• add suport for --since in journalctl DSN (#917) @blotus
• Rpm fixes (#909 #911 #912 #913 #914) @sabban
• Minor changes to specific logs (#900) @ThinkChaos
• Makefile: default GOARCH to the arch we are running on (#908) @blotus
• Download datafile (#895) @sabban
• Document scope parameter for stream API (#897) @sbs2001
• import debian & rpm sources (#898) @blotus
• fix #890 : log info if profile is in debug, independently of the result (#894) @buixor
• fix #885 : remove dead dependencies for plugin (#891) @buixor
• set hubBranch to master if not provided in the configuration and if c… (#884) @blotus
• add a hook on fatal/panic to ensure we're logging to stderr as well (#879) @buixor
• Fix big serialized entries (#877) @buixor
• Goroutine leak hunt (#874) @buixor
• don't wait for acquis tomb if we have no sources (#868) @blotus
• check if api:client is present (#867) @buixor
• fix the unit tests (#858) @sabban
• simplify, and only kill/wait on tomb when relevant (#866) @buixor
• allow to override GOARCH and GOOS when building with the Makefile (#862) @blotus
• Update README for FreeBSD (#859) @sbz
• Remove non POSIX sed usage (#855) @sbz
• Fix the notification plugin directory structure (#942) @sabban
• fix stacktrace when mmdb file are not present (#935) @AlteredCoder
• Use our fork of grokky (#953) @blotus
• don't install all items from hub when upgrade --force (#948) @AlteredCoder
• make debian package own /etc/crowdsec/* (#947) @sabban

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation

Take a look at the installation instructions.

v1.2.0-rc2

New features

• Support for notification plugins (slack,splunk,ES, http push) (#878)
• Improve community blocklist pull management : prepare for new consensus release (#871)
• Add /health endpoint to local API (#881) @nanikjava

Bugfixes & Improvements

• update to use cdn for hub (#920) @sabban
• Remove last remaining autogen messages in cscli doc (#926) @blotus
• Avoid code duplication for protobuf in plugins (#918) @sbs2001
• fix release drafter + readme + remove dead readme for acquis (#933) @buixor
• fix #919 : display error message (#929) @buixor
• fix datasource prometheus metrics not being registered (#927) @blotus
• enforce a bit more parsing for resillience (#928) @buixor
• allow deleting multiple machines (#930) @AlteredCoder
• Update cscli doc for docusaurus (#924) @blotus
• Add plugin interface code in protobufs package (#921) @sbs2001
• don't try to send/don't notify if plugin chan is nil (#923) @buixor
• add suport for --since in journalctl DSN (#917) @blotus
• Rpm fixes (#909 #911 #912 #913 #914) @sabban
• Minor changes to specific logs (#900) @ThinkChaos
• Makefile: default GOARCH to the arch we are running on (#908) @blotus
• Download datafile (#895) @sabban
• Document scope parameter for stream API (#897) @sbs2001
• import debian & rpm sources (#898) @blotus
• fix #890 : log info if profile is in debug, independently of the result (#894) @buixor
• fix #885 : remove dead dependencies for plugin (#891) @buixor
• set hubBranch to master if not provided in the configuration and if c… (#884) @blotus
• add a hook on fatal/panic to ensure we're logging to stderr as well (#879) @buixor
• Fix big serialized entries (#877) @buixor
• Goroutine leak hunt (#874) @buixor
• don't wait for acquis tomb if we have no sources (#868) @blotus
• check if api:client is present (#867) @buixor
• fix the unit tests (#858) @sabban
• simplify, and only kill/wait on tomb when relevant (#866) @buixor
• allow to override GOARCH and GOOS when building with the Makefile (#862) @blotus
• Update README for FreeBSD (#859) @sbz
• Remove non POSIX sed usage (#855) @sbz
• Fix the notification plugin directory structure (#942) @sabban

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation installation

Take a look at the installation instructions.

v1.2.0-rc1

New features

• Support for notification plugins (slack,splunk,ES, http push) (#878)
• Improve community blocklist pull management : prepare for new consensus release (#871)
• Add /health endpoint to local API (#881) @nanikjava

Bugfixes & Improvements

• update to use cdn for hub (#920) @sabban
• Remove last remaining autogen messages in cscli doc (#926) @blotus
• Avoid code duplication for protobuf in plugins (#918) @sbs2001
• fix release drafter + readme + remove dead readme for acquis (#933) @buixor
• fix #919 : display error message (#929) @buixor
• fix datasource prometheus metrics not being registered (#927) @blotus
• enforce a bit more parsing for resillience (#928) @buixor
• allow deleting multiple machines (#930) @AlteredCoder
• Update cscli doc for docusaurus (#924) @blotus
• Add plugin interface code in protobufs package (#921) @sbs2001
• don't try to send/don't notify if plugin chan is nil (#923) @buixor
• add suport for --since in journalctl DSN (#917) @blotus
• Rpm fixes (#909 #911 #912 #913 #914) @sabban
• Minor changes to specific logs (#900) @ThinkChaos
• Makefile: default GOARCH to the arch we are running on (#908) @blotus
• Download datafile (#895) @sabban
• Document scope parameter for stream API (#897) @sbs2001
• import debian & rpm sources (#898) @blotus
• fix #890 : log info if profile is in debug, independently of the result (#894) @buixor
• fix #885 : remove dead dependencies for plugin (#891) @buixor
• set hubBranch to master if not provided in the configuration and if c… (#884) @blotus
• add a hook on fatal/panic to ensure we're logging to stderr as well (#879) @buixor
• Fix big serialized entries (#877) @buixor
• Goroutine leak hunt (#874) @buixor
• don't wait for acquis tomb if we have no sources (#868) @blotus
• check if api:client is present (#867) @buixor
• fix the unit tests (#858) @sabban
• simplify, and only kill/wait on tomb when relevant (#866) @buixor
• allow to override GOARCH and GOOS when building with the Makefile (#862) @blotus
• Update README for FreeBSD (#859) @sbz
• Remove non POSIX sed usage (#855) @sbz

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation installation

Take a look at the installation instructions.

v1.1.1

Changes

• remove arm docker image for now, as buildx is half-broken on ubuntu (#856) @blotus
• add codeQL CI (#853) @buixor

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Upgrading installation

Take a look at the upgrade instructions or installation instructions.

v1.1.0

New Features

• add console enroll command to cscli (#828) @blotus
• add support for 'expression' (fix #822) in grok patterns (#830) @buixor
• refactor Acquisition Interface (#773) @buixor
• allow bouncers to filter decisions by scope (#817) @sbs2001
• add postgresql sslmode option (#772) @SanchosPancho

Bug Fixes & improvements

• ensure decisions from CAPI have proper case (#848) @buixor
• load hub file properly when restoring config from tmpdir (#847) @buixor
• fix #842 #837 (#845) @buixor
• refuse to run the dashboard if not on amd64 (#843) @blotus
• fix #840 : check for whiptail in detect mode (#844) @buixor
• cscli: update completion doc (fix #841) (#846) @he2ss
• trivial typo fix adresses -> addresses in msgbox (#832) @Plasma
• fix #823 : lower JsonExtract debug (#824) @buixor
• fix #781 - avoid unconsistent body : do not send NbDeleted on error (#812) @buixor
• improve emoji for local configuration when listing (#811) @blotus
• add docker option to specify local timezone (#803) @flo-mic
• fix #787 : load simulation config at startup (#793) @he2ss
• delete orphan nodes (fix #778) (#794) @buixor
• gen passwd until it satisfies metabase policy (#792) @sbs2001

Documentation & Other changes

• update completion doc (#850) @AlteredCoder
• remove dispatch to packaging repo (#852) @blotus
• fix functional tests (#838) @sabban
• update docker file to reflect change on acquisitions (#834) @buixor
• build docker image for both amd64 and arm64 (#829) @blotus
• fix image links in readme (#821) @blotus
• remove documentation (#820) @blotus
• update documentation for cscli metrics (#814) @AlteredCoder
• doc: update user-guide network section (#813) @he2ss
• ignore CI when it concern documentation (#815) @he2ss
• fix #806 : improve upgrade documentation (#808) @buixor
• update README.md (#810) @AlteredCoder
• fix typo in writing parser documentation (#800) @AlteredCoder
• fix typo in scenario doc (#798) @AlteredCoder
• added steps for proxy on systemd service (#795) @Lamera
• improve proxy doc (#791) @AlteredCoder
• fix some bugs (#788) @AlteredCoder
• update acquisition.md (#784) @AlteredCoder

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Upgrading installation

Take a look at the upgrade instructions or installation instructions.

v1.0.14

Changes

• fix compile source from release (#774) @registergoofy

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Upgrading installation

Take a look at the upgrade instructions or installation instructions.

v1.0.13

New

• add autocompletion for cscli (#717) @AlteredCoder
• refactor configuration management : extend non-root usage (#698) @AlteredCoder
• add TimeNow in the exprlib helpers (#756) @registergoofy

Bug Fixes & Improvements

• fix cscli alerts delete -all (#769) @AlteredCoder
• fix test on prerelease (#768) @registergoofy
• functional tests staticbuild (#767) @registergoofy
• fix makefile for static binaries (#764) @AlteredCoder
• do not leak fd on reload (#748) @buixor
• ent update : 0.7.0 (#692) @buixor
• cscli hub mgmt improvements (#710) @buixor
• bump pyyaml from 5.3.1 to 5.4 in /docs (#720) @dependabot
• bump jinja2 from 2.11.1 to 2.11.3 in /docs (#706) @dependabot
• ensure LAPI logs respect log_media (#707) @buixor
• fix pattern registration (#715) @AlteredCoder
• debian package auto-testing (#701) @buixor
• pkg/apiclient: pick up dropped errors (#676) @alrs
• fix null deref in cscli config (#694) @AlteredCoder
• use --no-cache with apk to skip manual apk update (#689) @PeterDaveHello
• don't hide cscli version (#686) @AlteredCoder
• fix #677 (#684) @AlteredCoder
• reorder Dockerfile to improve image layer caching (#681) @PeterDaveHello
• pattern syntax consistence (#675) @buixor
• fix #670, improve decision delete doc (#673) @buixor
• pkg/metabase: fix dropped error (#652) @alrs
• remove pattern matching valid SSH disconnect (#668) @dani
• pkg/apiserver: fix dropped error (#700) @alrs
• fix #723 : intercept http2 stream closed errors (#724) @buixor
• get rid of tmp stuff (#738) @registergoofy
• Bump pygments from 2.6.1 to 2.7.4 in /docs (#725) @dependabot
• Static release (#737) @registergoofy
• dispatch on tag creation (#734) @sabban
• README update (#730) @buixor
• honor log levels for api : don't log access logs if level is warn/err (#732) @buixor
• cscli machines|bouncers|dashboard error message clarification (#754) @buixor
• cscli: sort meta by key in alerts inspect output (#762) @blotus

Documentation & others

• FreeBSD changes (#718) (#721) @AlteredCoder
• update crowdsec tour documentation (#713) @AlteredCoder
• update README (#714) @AlteredCoder
• fix debian-like installation documentation (#708) @registergoofy
• clarify doc on onsuccess in parsers + add new date formats for dateparse (#703) @buixor
• unified functional tests (#696) @buixor
• misspelling in docker Readme (#688) @thib3113
• up installation documentation (#678) @buixor
• automatically update docker hub readme (github action) (#679) @he2ss
• update the config.yaml file (#674) @AlteredCoder
• clarify help message, fix #659 (#672) @buixor
• fix documentation in write_configurations (#666) @AlteredCoder
• clarify doc on db migration (#747) @buixor
• Updated readme.md (#743) @philippecrowdsec
• fix #741 : document network streams about crowdsec and lapi (#750) @buixor
• Update CI (#760) @blotus
• add System to cwversion to have platform in UA (#763) @buixor

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Upgrading installation

Take a look at the upgrade instructions or installation instructions.

v1.0.12

New

• add autocompletion for cscli (#717) @AlteredCoder
• refactor configuration management : extend non-root usage (#698) @AlteredCoder

Bug Fixes & Improvements

• ent update : 0.7.0 (#692) @buixor
• cscli hub mgmt improvements (#710) @buixor
• bump pyyaml from 5.3.1 to 5.4 in /docs (#720) @dependabot
• bump jinja2 from 2.11.1 to 2.11.3 in /docs (#706) @dependabot
• ensure LAPI logs respect log_media (#707) @buixor
• fix pattern registration (#715) @AlteredCoder
• debian package auto-testing (#701) @buixor
• pkg/apiclient: pick up dropped errors (#676) @alrs
• fix null deref in cscli config (#694) @AlteredCoder
• use --no-cache with apk to skip manual apk update (#689) @PeterDaveHello
• don't hide cscli version (#686) @AlteredCoder
• fix #677 (#684) @AlteredCoder
• reorder Dockerfile to improve image layer caching (#681) @PeterDaveHello
• pattern syntax consistence (#675) @buixor
• fix #670, improve decision delete doc (#673) @buixor
• pkg/metabase: fix dropped error (#652) @alrs
• remove pattern matching valid SSH disconnect (#668) @dani
• pkg/apiserver: fix dropped error (#700) @alrs
• fix #723 : intercept http2 stream closed errors (#724) @buixor
• get rid of tmp stuff (#738) @registergoofy
• Bump pygments from 2.6.1 to 2.7.4 in /docs (#725) @dependabot
• Static release (#737) @registergoofy
• dispatch on tag creation (#734) @sabban
• README update (#730) @buixor
• honor log levels for api : don't log access logs if level is warn/err (#732) @buixor

Documentation & others

• FreeBSD changes (#718) (#721) @AlteredCoder
• update crowdsec tour documentation (#713) @AlteredCoder
• update README (#714) @AlteredCoder
• fix debian-like installation documentation (#708) @registergoofy
• clarify doc on onsuccess in parsers + add new date formats for dateparse (#703) @buixor
• unified functional tests (#696) @buixor
• misspelling in docker Readme (#688) @thib3113
• up installation documentation (#678) @buixor
• automatically update docker hub readme (github action) (#679) @he2ss
• update the config.yaml file (#674) @AlteredCoder
• clarify help message, fix #659 (#672) @buixor
• fix documentation in write_configurations (#666) @AlteredCoder

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Upgrading installation

Take a look at the upgrade instructions or installation instructions.

v1.0.11

New

• add autocompletion for cscli (#717) @AlteredCoder
• refactor configuration management : extend non-root usage (#698) @AlteredCoder

Bug Fixes & Improvements

• ent update : 0.7.0 (#692) @buixor
• cscli hub mgmt improvements (#710) @buixor
• bump pyyaml from 5.3.1 to 5.4 in /docs (#720) @dependabot
• bump jinja2 from 2.11.1 to 2.11.3 in /docs (#706) @dependabot
• ensure LAPI logs respect log_media (#707) @buixor
• fix pattern registration (#715) @AlteredCoder
• debian package auto-testing (#701) @buixor
• pkg/apiclient: pick up dropped errors (#676) @alrs
• fix null deref in cscli config (#694) @AlteredCoder
• use --no-cache with apk to skip manual apk update (#689) @PeterDaveHello
• don't hide cscli version (#686) @AlteredCoder
• fix #677 (#684) @AlteredCoder
• reorder Dockerfile to improve image layer caching (#681) @PeterDaveHello
• pattern syntax consistence (#675) @buixor
• fix #670, improve decision delete doc (#673) @buixor
• pkg/metabase: fix dropped error (#652) @alrs
• remove pattern matching valid SSH disconnect (#668) @dani

Documentation & others

• FreeBSD changes (#718) (#721) @AlteredCoder
• update crowdsec tour documentation (#713) @AlteredCoder
• update README (#714) @AlteredCoder
• fix debian-like installation documentation (#708) @registergoofy
• clarify doc on onsuccess in parsers + add new date formats for dateparse (#703) @buixor
• unified functional tests (#696) @buixor
• misspelling in docker Readme (#688) @thib3113
• up installation documentation (#678) @buixor
• automatically update docker hub readme (github action) (#679) @he2ss
• update the config.yaml file (#674) @AlteredCoder
• clarify help message, fix #659 (#672) @buixor
• fix documentation in write_configurations (#666) @AlteredCoder

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Upgrading installation

Take a look at the upgrade instructions or installation instructions.

v1.0.9

Improvements

• allow for acquisition files to be specified from a directory as well (#619) @buixor
• improve logging cscli and wizard (#643) @AlteredCoder
• add a prometheus_uri option for cscli's config (#625) @buixor

Bug Fixes & various

• docker: fix the perms of SQLite DB for metabase (#647) @buixor
• don't try to login with zero scenarios (#627) @buixor
• skip empty lines to avoid issue of #630 (#631) @buixor
• only set logfile dir if media is file (#615) @buixor
• fix races + significantly improve crowdsec forensic mode shutdown speed (#633) @registergoofy
• truely don't try to send anything with empty online credentials configuration file (#657) @registergoofy

Documentation

• reference faq for metabase without docker (#649) @buixor
• doc api + minor api fixes (#654) @buixor
• update bouncer_machine_management.md (#614) @KINGMilo
• doc improvements (#644) @buixor

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Upgrading installation

Take a look at the upgrade instructions or installation instructions.