v0.6.0-beta0

New features

• inventory exporters
• Okta webhook events
• Azure Log Analytics as event store
• osquery powershell enrollment script
• jamf client log shipping

Fixes

• jamf server log ingestion
• santa log event parsing
• filebeat enrollment on linux

v0.5.0-beta.1

New feature

• new xnumon event type for the agent stats

Fixes

• jamf and santa app dependencies on the filebeat app.
• separate FQDN for the client cert authentication

v0.5.0-beta.0

New features

• unified filebeat enrollment (with micromdm scepserver and scepclient), configuration, and event processing for the santa logs, the xnumon logs and the jamf server logs.
• API to export the inventory reports as XLSX and zipped CSV files
• Better jamf webhooks events:
  • computer policy finished events are enriched via an extra API call
  • fixed issues with the v10.12 changes
• celery worker for the background tasks:
  • inventory exports
  • osquery file carving archive building
  • MDM device push notifications
• refactoring of all the event pre-processors in one zentral worker.

Breaking changes

• The zentral.contrib.jamf and zentral.contrib.santa apps depend on the zentral.contrib.filebeat app. You may need to include it in the base.json.
• Some tasks which use to happen in dedicated workers have been migrated to celery tasks. You need to run a celery worker (see the docker-compose.yml file for example).
• You need to restart the workers and the gunicorn processes after the update. A reload is not enough.
• The zentral.contrib.audit app has been removed.

v0.4 Signed product archive enrollmemt packages + other things

See the Wiki for the release notes.

v0.3 New style workers + logstash + nagios

See the Wiki for the release notes.