Brim: alte Versionen herunterladen

Visit the Brim Data download page page to find the package for your platform.
- Update Zed to v1.18.0
- Update Brimcap to v1.18.0, which includes a new Zeek v7.0.0-brim1
- Introduce the Sessions tab in the left panel to persist Query Session histories (#3132)
- Update time display functionality to support local time zones and strftime directives (#3139)
- Fix an issue where the Zui window could not be dragged when Preview & Load was open (#3146)
- Fix a crash that would occur when attempting to create a pool with the same name as an existing pool (#3147)
- Fix an issue where top-level primitive Zed values were incorrectly wrapped in records in the Table view (#3145, #3150)

- Update Zed to v1.11.1

Other Changes
- Update Zed to v1.11.0
- Update Brimcap to v1.5.3
- Zui has a new Preview & Load workflow that allows for shaping data as it's loaded in to a Zed lake (#2834, #2864)
- Fix an issue where editing the "month" portion of a time range pin caused a crash (#2854)
- Fix issues where null values were incorrectly rendered (#2875, #2876)
- Use monospace fonts in more places (#2877)
- Limit column width for large values and add grid lines in the table view (#2881)

- Due to malware false positives, Windows releases no longer include a full initial set of Suricata rules (as always, up-to-date rules will be downloaded on first Internet-connected launch of Zui) (#2858)

Other Changes
- Update Zed to v1.10.0
- Update Brimcap to v1.5.2
- The Zui GitHub repo is now structured as a monorepo (#2818)
- Fix an issue where a community_id field was incorrectly being treated as a prerequisite to activating the Packets button (#2830)
- Zui now uses the Monaco editor, which provides a monospace font and minimal Zed syntax highlighting (#2824, #2836)
- Fix an issue where invoking the -version option on the bundled zed and brimcap binaries was producing incorrect output (#2841)
- Upgrade Electron dependency to 22.3.25 (#2848)

- Any time field can be specified (and if you've configured a pool key other than ts, it will start out using that)
- count() by typeof(this) now populates the stacked bars by default, but you can change this to use any other field
- If a pool is created from an imported pcap, ts and _path are used by default as before
- You can also now toggle the chart off/on and resize it
Other Changes
- Update Zed to v1.9.0
- Update Brimcap to v1.5.1
- The stacked bar chart is now generalized for any time-based data (not just Zeek-like with _path & ts fields) (#2785, #2794, #2805)
- The stacked bar chart is now resizable and can be toggled off/on (#2806, #2810)
- A single Zui window now shows tabs only for the currently selected Zed lake connection (#2797)
- Fix an issue where attempting to save a Zed query that contained a parse error caused a stack dump (#2803)
- Fix an issue where a table of results was sometimes rendered with blank rows (#2813)
- Fix an issue where comments at the end of a Zed program caused the queries that populate the stacked bar chart to fail (#2822)

- Update Zed to v1.8.0
- Update Brimcap to v1.5.0
- Restore "alert" tiles for Suricata events (#2740)
- Fix an issue where use of Chinese and other wide characters caused errors during data import (#2744)
- Fix an issue where Zui would sometimes launch without a main window (#2743)
- Shift+Enter now also runs queries when the Run Query on Enter preference is unchecked (#2764)
- Fix an issue where selecting Reset State from the pull-down menu was having no effect (#2767)