Full Changelog: 0.7.7...0.7.8
- Implemented reading audit logs with filtering by keys from
auditd
ininterpret
mode (interpret results to be human readable, for example, to convert system calls or user IDs, as opposed to the standard reading from the log in raw form from the file system).
- Added a new filtering mode by
timestamp
for journald, docker and podman logs from streams (updated information inREADME
and the help window).
-
Expanded functionality for working in command line mode. Added new flags
--command-fuzzy, -f
and--command-regex, -r
for filtering output via pipe. -
Reworked the Docker log reading process to separate
stdout
andstderr
streams. When the user does not have access to the/var/lib/docker/containers
directory, the user can get data from both streams sorted bytimestamp
. -
#21. Changed
timestamp
for docker logs toYYYY-MM-DDTHH:MM:SS.MS(x9)Z
format, expanded the range of string switching (added values:200
,500
,1000
) and added aCtrl+T
hotkey for switching (disabling and enabling) the timestamp and data type output for stream.