Vast Versions Save

Open source security data pipelines.

v4.13.1

1 week ago

This patch release contains the following bug fixes and improvements over Tenzir v4.13:

  • The slice operator no longer waits for all input to arrive when used with a positive begin and a negative (or missing) end value, which rendered it unusable with infinite inputs. Instead, the operator now yields results earlier.
  • The amqp connector now properly signals more errors caused, for example, by networking issues. This enables pipelines using this connector to trigger their retry behavior.
  • The node's CPU usage increased ever so slightly with every persisted partition, eventually causing imports and exports to get stuck. This no longer happens.
  • The enrich, drop, extend, replace, and deduplicate operators failed for empty input events. This no longer happens.

v4.13.0

1 week ago

We're delighted to announce Tenzir v4.13, a release focusing on stability and incremental improvements.

Tenzir v4.13

Discover more about Tenzir v4.13

📣 Dive deeper into the details with our announcement blog post. 🚀 Test the features firsthand on app.tenzir.com. 👉 Embark on your journey with our Get Started guide and a collection of user guides filled with step-by-step tutorials. 🧑‍🎓 Elevate your knowledge about pipelines, the language, operators, connectors, formats, contexts, and the data model. 💡 Understand why we built Tenzir and how it compares to other systems. 📝 Stay informed with the changelog for a complete rundown of changes since our last release.

v4.12.2

3 weeks ago

This patch release contains the following bug fixes and improvements over Tenzir v4.12:

Tenzir v4.12.2

  • The python operator now checks for syntax errors on operator startup.
  • Transformations or sinks used with the every operator modifier did not shut down correctly when exhausting their input. This now works as expected.
  • We fixed a bug that prevented restarts of pipelines containing a listening connector under specific circumstances.
  • The retry delay now works for pipelines that fail during startup.
  • The chart operator failed to render a chart when the y-axis was not specified explicitly and the events contained more than two top-level fields. This no longer happens.
  • We accidentally removed the implicit read json from from tcp in Tenzir v4.12. The short form now works as expected again.
  • The chart operator now accepts the flags --x-axis-type and --y-axis-type for bar, line, and area charts, with the possible values being log and linear, with linear as the default value. Setting these flags defines the scale (logarithmic or linear) on the Tenzir App chart visualization.

Tenzir v4.12.1

  • We fixed a misconfiguration that caused the publish and subscribe operators not to be available in the statically linked Linux builds.
  • We fixed a crash on startup when selectively enabling or disabling plugins when at least two plugins with dependent plugins were disabled.

v4.12.1

3 weeks ago

This patch release contains the following bug fixes and improvements over Tenzir v4.12:

  • We fixed a misconfiguration that caused the publish and subscribe operators not to be available in the statically linked Linux builds.
  • We fixed a crash on startup when selectively enabling or disabling plugins when at least two plugins with dependent plugins were disabled.

v4.12.0

3 weeks ago

We are thrilled to announce Tenzir v4.12, a feature-packed release introducing numerous enhancements. Notable additions include list unrolling, event deduplication, and the deployment of advanced pipeline architectures with publish-subscribe. We've also added a download button, extended support for UDP, and implemented many other refinements to improve your experience.

Tenzir v4.12

Explore the Capabilities of Tenzir v4.12

🔍 Get a detailed overview of Tenzir v4.12 from our insightful announcement blog post. 🎯 Experience and explore the new features on app.tenzir.com. ✔️ Commence your Tenzir adventure with our comprehensive Getting Started guide and intricate user guides. 🎓 Expand your knowledge on pipelines, language, operators, connectors, formats, and the data model. 💭 Understand why Tenzir was developed and how it measures up against the competition. 📌 Stay informed with the specific changelog to track all changes since our last update.

v4.11.2

1 month ago

This patch release contains the following bug fixes and improvements over Tenzir v4.11:

  • The python operator often failed with a 504 Gateway Timeout error on app.tenzir.com when first run. This no longer happens.
  • The python operator now requires Python 3.9 (down from Python 3.10) or newer, making it available on more systems.

v4.11.1

1 month ago

Our latest release delivers powerful automation features, such as scheduling pipelines in a given time interval and sending pipeline data as emails.

Tenzir v4.11

Explore the Capabilities of Tenzir v4.11

🔍 Get a detailed overview of Tenzir v4.11 from our insightful announcement blog post. 🎯 Experience and explore the new features on app.tenzir.com. ✔️ Commence your Tenzir adventure with our comprehensive Getting Started guide and intricate user guides. 🎓 Expand your knowledge on pipelines, language, operators, connectors, formats, and the data model. 💭 Understand why Tenzir was developed and how it measures up against the competition. 📌 Stay informed with the specific changelog to track all changes since our last update.

v4.11.0

1 month ago

This release was yanked; see Tenzir v4.11.1 instead.

v4.10.4

2 months ago

This patch release contains the following bug fixes and improvements over Tenzir v4.10:

Tenzir v4.10.4

  • The http saver now correctly sets the Content-Length header when issuing HTTP requests.
  • Using context load with large context files no longer causes a crash.
  • The sigma operator crashed for some rules when trying to attach the rule to the matched event. This no longer happens.
  • The code passed to the python operator no longer fails to resolve names when the local and global scope are both used.

Tenzir v4.10.3

  • The lookup operator no longer tries to match internal metrics and diagnostics events.
  • The lookup operator no longer returns events for which none of the provided fields exist.
  • Tenzir nodes no longer attempt reconnecting to app.tenzir.com immediately upon failure, but rather wait before reconnecting.

Tenzir v4.10.1

  • Tenzir nodes sometimes failed to start when using configured pipelines for the first time. This no longer happens.

v4.10.3

2 months ago

This patch release contains the following bug fixes and improvements over Tenzir v4.10:

Tenzir v4.10.3

  • The lookup operator no longer tries to match internal metrics and diagnostics events.
  • The lookup operator no longer returns events for which none of the provided fields exist.
  • Tenzir nodes no longer attempt reconnecting to app.tenzir.com immediately upon failure, but rather wait before reconnecting.

Tenzir v4.10.1

  • Tenzir nodes sometimes failed to start when using configured pipelines for the first time. This no longer happens.