v0.22.0
Visit the Brim Download page to find the package for your OS platform.
- Add a customizable "Query Library" panel of clickable Z queries for working with Zeek and Suricata logs (#1272)
- Add the
source
field to the JSON typing config to prepare for Zeek v4.xweird
events (#1307) - Allow the export of query results in NDJSON and CSV formats (#1302, #1328)
- Add a correlation visualization in the Log Detail view for pivoting from a Suricata alert back to related Zeek
conn
events (#1310) - Re-style the Log Detail panel and window (#1310)
- Ensure
_path
andevent_type
fields are always displayed directly to the right of thets
timestamp field (#1339) - Pull-down menu option Window > Reset State now clears app state after user confirmation (#1338)
- Update zq to v0.27.1 (follow that link for details of additional changes that may affect Brim)
- Windows releases are signed, but you may see a warning popup when you run the installer (unlike our Mac/Linux releases). See Microsoft Windows beta limitations for details.