v0.23.0
Visit the Brim Download page to find the package for your OS platform.
NOTE - Beginning with this release, a subset of the source code in the github.com/brimsec/brim GitHub repository is covered by a source-available style license, the Polyform Perimeter License (PPL). We've moved the PPL-covered code under a ppl/
directory in the repository. The majority of our source code retains the existing BSD-3-Clause license.
The overwhelming majority of Brim users and developers will not be impacted by this change, including those using Brim in commercial settings. The use of the source-available Polyform Perimeter license prevents use cases like marketing a work as a replacement for the Brim desktop application while using material covered under the PPL.
In general, we are making this change to ensure technology giants can't use the PPL-covered code to make replacement offerings of our projects. We believe users and developers should have access to the source code for our projects, and we need a sustainable business model to continue funding our work. Using the source-available Polyform Perimeter license on portions of the source code lets us realize both.
For more detail regarding licensing, see the CONTRIBUTING.md doc, and feel free to come talk to us on Slack if you have additional questions.
NOTICE for users who have added custom entries to their Query Library:
We've become aware of an issue in Brim v0.22.0 where custom entries in the Query Library will not be saved if you quit by closing all your Brim windows (i.e. hitting the "X" in the upper-right of the window on Windows/Linux, or clicking the "red stoplights" on macOS). They are saved if you quit via the pull-down menu (File > Exit on Windows/Linux, Brim > Quit Brim on macOS). Therefore, when closing Brim in prep for the v0.23.0 upgrade, make sure you quit via pull-down menu. When you're prompted to auto-update to v0.23.0 on Windows/macOS, select the option to Restart Later so that way you can quit via pull-down menu. We've fixed these issues so it should not be a problem in v0.23.0 and going forward. Sorry for the inconvenience!
- Update zq to v0.28.0
- Revise the Troubleshooting doc to describe the use of the Window > Reset State pull-down menu option (#1350)
- Fix an issue where scrolling to the bottom of the main window did not bring up additional events (#1348)
- Fix an issue with inconsistently-created pinned items in the History panel (#1349)
- Adjust the configuration for log generation in the embedded
zqd
(#1353) - Fix an issue where "Restart Required" notifications in the Preferences screen were not fully visible (#1368)
- Fix an issue where results in the "MD5 correlation" visualization were not being updated after event tiles were clicked (#1369)
- Disable the creation of macOS filesystem tags during Export operations (#1370)
- Fix issues where Query Library entries were being lost when exiting/relaunching Brim (#1366, #1387)
- Add a right-click option to Copy field contents into the paste buffer (#1367, #1381)
- A "Connection" (such as to a remote
zqd
) is now known as a "Workspace" (#1372) - Revise the Troubleshooting doc with more detail regarding failures to open flows from pcaps (#1380)
- Windows releases are signed, but you may see a warning popup when you run the installer (unlike our Mac/Linux releases). See Microsoft Windows beta limitations for details.