diff --git a/_static/versions.json b/_static/versions.json index 10869626..79152218 100644 --- a/_static/versions.json +++ b/_static/versions.json @@ -1,10 +1,14 @@ [ { - "name": "v5.5.1 (latest)", - "version": "v5.5.1", + "name": "v5.5.2 (latest)", + "version": "v5.5.2", "url": "https://docs.gravwell.io/", "preferred": true }, + { + "version": "v5.5.1", + "url": "https://docs.gravwell.io/v5.5.1/" + }, { "version": "v5.5.0", "url": "https://docs.gravwell.io/v5.5.0/" diff --git a/changelog/5.5.2.md b/changelog/5.5.2.md new file mode 100644 index 00000000..b7efc869 --- /dev/null +++ b/changelog/5.5.2.md @@ -0,0 +1,27 @@ +# Changelog for version 5.5.2 + +## Released 27 August 2024 + +## Gravwell + +### Additions + +* Added the ability for readonly users to select and copy text in query editor. +* Added the ability to backup an Extractor when uploading a Kit. +* Added the ability to backup a File when uploading a Kit. +* Added the ability to backup a Playbook when uploading a Kit. + +### Bug Fixes + +* Fixed an issue where erroneous group access modification prevented assets from saving. +* Fixed an issue that generated an error when another admin attempted to reset the password of the UID 1 admin account. +* Fixed an issue where the Notifications API would incorrectly respond with notifications that are ignored. +* Improved logging to better troubleshoot queries that stall or have memory problems. +* Improved performance for query parsing. + +## Ingester Changes + +### Bug Fixes + +* Fixed an issue where the Gravwell collectd ingester would fail to encode floating point NaN values and would emit an error message on Stderr. It now omits the value and encodes properly. +* Fixed an issue to catch panics in execute and start functions for the Plugin Preprocessor. \ No newline at end of file diff --git a/changelog/list.md b/changelog/list.md index feffaa4a..34813032 100644 --- a/changelog/list.md +++ b/changelog/list.md @@ -7,7 +7,7 @@ maxdepth: 1 caption: Current Release --- -5.5.1 <5.5.1> +5.5.2 <5.5.2> ``` ## Previous Versions @@ -18,6 +18,7 @@ maxdepth: 1 caption: Previous Releases --- +5.5.1 <5.5.1> 5.5.0 <5.5.0> 5.4.11 <5.4.11> 5.4.10 <5.4.10> diff --git a/conf.py b/conf.py index 659affc8..93129228 100644 --- a/conf.py +++ b/conf.py @@ -21,7 +21,7 @@ project = "Gravwell" copyright = f"Gravwell, Inc. {date.today().year}" author = "Gravwell, Inc." -release = "v5.5.1" +release = "v5.5.2" # -- General configuration --------------------------------------------------- # https://www.sphinx-doc.org/en/master/usage/configuration.html#general-configuration diff --git a/configuration/parameters.md b/configuration/parameters.md index 39761250..17a53d1a 100644 --- a/configuration/parameters.md +++ b/configuration/parameters.md @@ -166,7 +166,7 @@ Description: The Datastore-Insecure-Skip-TLS-Verify parameter instructs the webs Applies to: Webserver Default Value: Example: `External-Addr=10.0.0.1:443` -Description: The External-Addr parameter specifies the address other webservers should use to contact this webserver. This parameter is **required** when using a datastore, as it allows a user on one webserver to load the results of a search performed on another webserver. +Description: The External-Addr parameter specifies the IP address or hostname that other webservers should use to contact this webserver. This parameter is **required** when using a datastore, as it allows a user on one webserver to load the results of a search performed on another webserver. If your webservers are using TLS, this address should match one of the names in the certificate. ### **Search-Forwarding-Insecure-Skip-TLS-Verify** Applies to: Webserver diff --git a/ingesters/win_file_follow.md b/ingesters/win_file_follow.md index 7cb18541..a5ee163d 100644 --- a/ingesters/win_file_follow.md +++ b/ingesters/win_file_follow.md @@ -14,7 +14,7 @@ Download the Gravwell Windows File Follower installer: | Ingester Name | Installer | More Info | | :------------ | :----------- | :-------- | -| Windows File Follower | Download    (SHA256) | [Documentation](/ingesters/win_file_follow) | +| Windows File Follower | Download    (SHA256) | [Documentation](/ingesters/win_file_follow) | The Gravwell Windows file follower is installed using a signed MSI package. Gravwell signs both the Windows executable and MSI installer with our private key pairs, but depending on download volumes, you may see a warning about the MSI being untrusted. This is due to the way Microsoft "weighs" files. Basically, as they see more people download and install a given package, it becomes more trustworthy. Don't worry though, we have a well audited build pipeline and we sign every package. diff --git a/ingesters/winevent.md b/ingesters/winevent.md index 5a1b424b..b2c44d7d 100644 --- a/ingesters/winevent.md +++ b/ingesters/winevent.md @@ -49,7 +49,7 @@ Download the Gravwell Windows Events installer: | Ingester Name | Installer | More Info | | :------------ | :----------- | :-------- | -| Windows Events | Download    (SHA256) | [Documentation](/ingesters/winevent) | +| Windows Events | Download    (SHA256) | [Documentation](/ingesters/winevent) | Run the .msi installation wizard to install the Gravwell events service. On first installation the installation wizard will prompt to configure the indexer endpoint and ingest secret. Subsequent installations and/or upgrades will identify a resident configuration file and will not prompt. diff --git a/quickstart/downloads.md b/quickstart/downloads.md index 5a38d2f5..f73cc9e5 100644 --- a/quickstart/downloads.md +++ b/quickstart/downloads.md @@ -4,14 +4,14 @@ | Ingester Name | Installer | More Info | | :------------ | :----------- | :-------- | -| Windows Events | Download    (SHA256) | [Documentation](/ingesters/winevent) | -| Windows File Follower | Download    (SHA256) | [Documentation](/ingesters/win_file_follow) | +| Windows Events | Download    (SHA256) | [Documentation](/ingesters/winevent) | +| Windows File Follower | Download    (SHA256) | [Documentation](/ingesters/win_file_follow) | ## macOS Ingesters | Ingester Name | Installer | More Info | | :------------ | :----------- | :-------- | -| File Follower | Download    (SHA256) | [Documentation](/ingesters/file_follow) | +| File Follower | Download    (SHA256) | [Documentation](/ingesters/file_follow) | ## Other Installers @@ -23,7 +23,7 @@ The Debian and RHEL repositories are more easily maintained than these standalon The Gravwell core installer contains the indexer and webserver frontend. You'll need a license; either get a Community Edition free license, or contact info@gravwell.io for commercial options. -Download Gravwell Core Installer Download    (SHA256) +Download Gravwell Core Installer Download    (SHA256) ### Ingesters @@ -32,24 +32,24 @@ The core suite of ingesters are available for download as installable packages. #### Current Ingester Releases | Ingester Name | Installer | More Info | | :------------ | :----------- | :-------- | -| Amazon Kinesis | Download    (SHA256) | [Documentation](/ingesters/kinesis)| -| Amazon S3 | Download    (SHA256) | [Documentation](/ingesters/s3)| -| Amazon SQS | Download    (SHA256) | [Documentation](/ingesters/sqs)| -| Apache Kafka | Download    (SHA256) | [Documentation](/ingesters/kafka)| -| Apache Kafka Federator | Download    (SHA256) | [Documentation](/ingesters/federators/kafkafederator)| -| Collectd Collector | Download    (SHA256) | [Documentation](/ingesters/collectd) | -| File Follower | Download    (SHA256) | [Documentation](/ingesters/file_follow) | -| Google PubSub | Download    (SHA256) | [Documentation](/ingesters/pubsub)| -| HTTP Ingester | Download    (SHA256) | [Documentation](/ingesters/http) | -| Ingest Federator | Download    (SHA256) | [Documentation](/ingesters/federators/federator) | -| IPMI Ingester | Download    (SHA256) | [Documentation](/ingesters/ipmi)| -| Microsoft Azure EventHub | Download    (SHA256) | [Documentation](/ingesters/eventhubs)| -| Microsoft Graph API | Download    (SHA256) | [Documentation](/ingesters/msg)| -| Netflow Capture | Download    (SHA256) | [Documentation](/ingesters/netflow) | -| Network Capture | Download    (SHA256) | [Documentation](/ingesters/pcap) | -| Office 365 Logs | Download    (SHA256) | [Documentation](/ingesters/o365)| -| Simple Relay | Download    (SHA256) | [Documentation](/ingesters/simple_relay)| -| SNMP Traps | Download    (SHA256) | [Documentation](/ingesters/snmp)| +| Amazon Kinesis | Download    (SHA256) | [Documentation](/ingesters/kinesis)| +| Amazon S3 | Download    (SHA256) | [Documentation](/ingesters/s3)| +| Amazon SQS | Download    (SHA256) | [Documentation](/ingesters/sqs)| +| Apache Kafka | Download    (SHA256) | [Documentation](/ingesters/kafka)| +| Apache Kafka Federator | Download    (SHA256) | [Documentation](/ingesters/federators/kafkafederator)| +| Collectd Collector | Download    (SHA256) | [Documentation](/ingesters/collectd) | +| File Follower | Download    (SHA256) | [Documentation](/ingesters/file_follow) | +| Google PubSub | Download    (SHA256) | [Documentation](/ingesters/pubsub)| +| HTTP Ingester | Download    (SHA256) | [Documentation](/ingesters/http) | +| Ingest Federator | Download    (SHA256) | [Documentation](/ingesters/federators/federator) | +| IPMI Ingester | Download    (SHA256) | [Documentation](/ingesters/ipmi)| +| Microsoft Azure EventHub | Download    (SHA256) | [Documentation](/ingesters/eventhubs)| +| Microsoft Graph API | Download    (SHA256) | [Documentation](/ingesters/msg)| +| Netflow Capture | Download    (SHA256) | [Documentation](/ingesters/netflow) | +| Network Capture | Download    (SHA256) | [Documentation](/ingesters/pcap) | +| Office 365 Logs | Download    (SHA256) | [Documentation](/ingesters/o365)| +| Simple Relay | Download    (SHA256) | [Documentation](/ingesters/simple_relay)| +| SNMP Traps | Download    (SHA256) | [Documentation](/ingesters/snmp)| ### Other downloads @@ -57,8 +57,8 @@ Some Gravwell components are distributed as optional additional installers, such | Component Name | Installer | More Info | | :------------- | :----------- | :-------- | -| Datastore | Download    (SHA256) | [Documentation](/distributed/frontend) | -| Cloud Archive Server | Download    (SHA256) | [Documentation](/configuration/archive) | -| Offline Replicator | Download    (SHA256) | [Documentation](/configuration/replication) | -| Load Balancer | Download    (SHA256) | [Documentation](/distributed/loadbalancer) | -| Gravwell Tools | Download    (SHA256) | [Documentation](/tools/tools)| +| Datastore | Download    (SHA256) | [Documentation](/distributed/frontend) | +| Cloud Archive Server | Download    (SHA256) | [Documentation](/configuration/archive) | +| Offline Replicator | Download    (SHA256) | [Documentation](/configuration/replication) | +| Load Balancer | Download    (SHA256) | [Documentation](/distributed/loadbalancer) | +| Gravwell Tools | Download    (SHA256) | [Documentation](/tools/tools)| diff --git a/quickstart/quickstart.md b/quickstart/quickstart.md index c9c2e8e5..05e7b76c 100644 --- a/quickstart/quickstart.md +++ b/quickstart/quickstart.md @@ -19,7 +19,7 @@ This guide is suitable for Community Edition users as well as users with a paid You may find the [installation checklist](checklist) and the [glossary](/glossary/glossary) useful companions to this document. -If you are interested in a complete training package, please see the [complete training PDF](https://github.com/gravwell/training/releases/download/v5.5.1/gravwell_training_v5.5.1.pdf). The Gravwell training PDF is the complete training manual which is paired with labs and exercises. The exercises are built from the open source [Gravwell Training](https://github.com/gravwell/training) repository. +If you are interested in a complete training package, please see the [complete training PDF](https://github.com/gravwell/training/releases/download/v5.5.2/gravwell_training_v5.5.2.pdf). The Gravwell training PDF is the complete training manual which is paired with labs and exercises. The exercises are built from the open source [Gravwell Training](https://github.com/gravwell/training) repository. ```{note} Community Edition users will need to obtain their own license from [https://www.gravwell.io/download](https://www.gravwell.io/download) before beginning installation. Paid users should already have received a license file via email.