Merge pull request #1100 from gravwell/dev

_static/versions.json

@@ -1,10 +1,14 @@
 [
   {
-    "name": "v5.5.1 (latest)",
-    "version": "v5.5.1",
+    "name": "v5.5.2 (latest)",
+    "version": "v5.5.2",
     "url": "https://docs.gravwell.io/",
     "preferred": true
   },
+  {
+    "version": "v5.5.1",
+    "url": "https://docs.gravwell.io/v5.5.1/"
+  },
   {
     "version": "v5.5.0",
     "url": "https://docs.gravwell.io/v5.5.0/"

changelog/5.5.2.md

@@ -0,0 +1,27 @@
+# Changelog for version 5.5.2
+
+## Released 27 August 2024
+
+## Gravwell
+
+### Additions
+
+* Added the ability for readonly users to select and copy text in query editor. 
+* Added the ability to backup an Extractor when uploading a Kit. 
+* Added the ability to backup a File when uploading a Kit. 
+* Added the ability to backup a Playbook when uploading a Kit. 
+
+### Bug Fixes
+
+* Fixed an issue where erroneous group access modification prevented assets from saving.
+* Fixed an issue that generated an error when another admin attempted to reset the password of the UID 1 admin account. 
+* Fixed an issue where the Notifications API would incorrectly respond with notifications that are ignored. 
+* Improved logging to better troubleshoot queries that stall or have memory problems. 
+* Improved performance for query parsing.
+
+## Ingester Changes
+
+### Bug Fixes
+
+* Fixed an issue where the Gravwell collectd ingester would fail to encode floating point NaN values and would emit an error message on Stderr. It now omits the value and encodes properly.
+* Fixed an issue to catch panics in execute and start functions for the Plugin Preprocessor. 

changelog/list.md

@@ -7,7 +7,7 @@
 maxdepth: 1
 caption: Current Release
 ---
-5.5.1 <5.5.1>
+5.5.2 <5.5.2>
 ```
 
 ## Previous Versions
@@ -18,6 +18,7 @@ maxdepth: 1
 caption: Previous Releases
 ---
 
+5.5.1 <5.5.1>
 5.5.0 <5.5.0>
 5.4.11 <5.4.11>
 5.4.10 <5.4.10>

conf.py

@@ -21,7 +21,7 @@
 project = "Gravwell"
 copyright = f"Gravwell, Inc. {date.today().year}"
 author = "Gravwell, Inc."
-release = "v5.5.1"
+release = "v5.5.2"
 
 # -- General configuration ---------------------------------------------------
 # https://www.sphinx-doc.org/en/master/usage/configuration.html#general-configuration

configuration/parameters.md

@@ -166,7 +166,7 @@ Description:	The Datastore-Insecure-Skip-TLS-Verify parameter instructs the webs
 Applies to:		Webserver  
 Default Value:
 Example:		`External-Addr=10.0.0.1:443`  
-Description:	The External-Addr parameter specifies the address other webservers should use to contact this webserver. This parameter is **required** when using a datastore, as it allows a user on one webserver to load the results of a search performed on another webserver.
+Description:	The External-Addr parameter specifies the IP address or hostname that other webservers should use to contact this webserver. This parameter is **required** when using a datastore, as it allows a user on one webserver to load the results of a search performed on another webserver. If your webservers are using TLS, this address should match one of the names in the certificate.
 
 ### **Search-Forwarding-Insecure-Skip-TLS-Verify**
 Applies to:		Webserver  

ingesters/win_file_follow.md

@@ -14,7 +14,7 @@ Download the Gravwell Windows File Follower installer:
 
 | Ingester Name | Installer    | More Info |
 | :------------ | :----------- | :-------- |
-| Windows File Follower | <a data-bs-custom-class="hash-popover" href="https://update.gravwell.io/archive/5.5.1/installers/gravwell_file_follow_5.5.1.1.msi">Download <i class="fa-solid fa-download"></i></a>&nbsp;&nbsp;&nbsp;<a data-bs-custom-class="hash-popover" href="javascript:void(0);" data-bs-toggle="popover" data-bs-placement="bottom" data-bs-html="true" data-bs-content='<code class="docutils literal notranslate"><span class="pre">6f5686c7a7598111b13f205d08dce4b77dec51eae6e3945978adc0f51a17bcb2</span></code>'>(SHA256)</a> | [Documentation](/ingesters/win_file_follow) |
+| Windows File Follower | <a data-bs-custom-class="hash-popover" href="https://update.gravwell.io/archive/5.5.2/installers/gravwell_file_follow_5.5.2.1.msi">Download <i class="fa-solid fa-download"></i></a>&nbsp;&nbsp;&nbsp;<a data-bs-custom-class="hash-popover" href="javascript:void(0);" data-bs-toggle="popover" data-bs-placement="bottom" data-bs-html="true" data-bs-content='<code class="docutils literal notranslate"><span class="pre">d96a06561170fafa67c1e8c5e693dacca89481589272b211b6cc091ad50e0714</span></code>'>(SHA256)</a> | [Documentation](/ingesters/win_file_follow) |
 
 The Gravwell Windows file follower is installed using a signed MSI package.  Gravwell signs both the Windows executable and MSI installer with our private key pairs, but depending on download volumes, you may see a warning about the MSI being untrusted.  This is due to the way Microsoft "weighs" files.   Basically, as they see more people download and install a given package, it becomes more trustworthy.  Don't worry though, we have a well audited build pipeline and we sign every package.
 

ingesters/winevent.md

@@ -49,7 +49,7 @@ Download the Gravwell Windows Events installer:
 
 | Ingester Name | Installer    | More Info |
 | :------------ | :----------- | :-------- |
-| Windows Events | <a data-bs-custom-class="hash-popover" href="https://update.gravwell.io/archive/5.5.1/installers/gravwell_win_events_5.5.1.1.msi">Download <i class="fa-solid fa-download"></i></a>&nbsp;&nbsp;&nbsp;<a data-bs-custom-class="hash-popover" href="javascript:void(0);" data-bs-toggle="popover" data-bs-placement="bottom" data-bs-html="true" data-bs-content='<code class="docutils literal notranslate"><span class="pre">5a067983bd41d351cf08508d3110a7c2d387e39f62d0eef8368d757515bcc806</span></code>'>(SHA256)</a> | [Documentation](/ingesters/winevent) |
+| Windows Events | <a data-bs-custom-class="hash-popover" href="https://update.gravwell.io/archive/5.5.2/installers/gravwell_win_events_5.5.2.1.msi">Download <i class="fa-solid fa-download"></i></a>&nbsp;&nbsp;&nbsp;<a data-bs-custom-class="hash-popover" href="javascript:void(0);" data-bs-toggle="popover" data-bs-placement="bottom" data-bs-html="true" data-bs-content='<code class="docutils literal notranslate"><span class="pre">48a686d4aa46094435972c3485b805bc9b12931e0f406415cb0e929df9c43fce</span></code>'>(SHA256)</a> | [Documentation](/ingesters/winevent) |
 
 Run the .msi installation wizard to install the Gravwell events service.  On first installation the installation wizard will prompt to configure the indexer endpoint and ingest secret.  Subsequent installations and/or upgrades will identify a resident configuration file and will not prompt.