v0.15.0

What's Changed

• feat(geo-logs): ASN on the Geo Logs page by @GilbN in #223
• fix(cli): require ASN backfill table by @GilbN in #229
• fix(geo-logs): Show hostnames in long-range Geo Logs by @GilbN in #230

Upgrade notes

Note

The first start after upgrading adds ASN columns to the Geo Logs aggregates and refreshes them over the raw-retention window. On a large database this takes minutes. Let it finish; it only happens once.

Important

Two backfill commands fill in history the upgrade cannot touch. Skipping them leaves gaps rather than broken data: geo events recorded before this release show no ASN or organization and are invisible to the new ASN filters, and Geo Logs ranges over 24 hours show no hostnames for older buckets. Run both once, with the app running:

docker compose exec -u geometrikks app litestar backfill-asn --table geo-events
docker compose exec -u geometrikks app litestar backfill-geo-hostnames

• backfill-asn --table geo-events stamps the ASN and organization onto existing geo events and refreshes the affected aggregates. It only touches rows without an ASN. Compressed chunks are decompressed first and the normal compression policy recompresses them later; expect minutes on a large database. If you skipped the Access Logs ASN backfill from 0.10.0, --table all covers both tables in one run.
• backfill-geo-hostnames fills hostname sets in the Geo Logs aggregates from retained raw events, one day at a time. If it is interrupted, rerun it and it resumes where it stopped.

Note

Both commands reach back as far as raw retention (ANALYTICS_RAW_RETENTION_DAYS, default 180 days). Buckets older than that keep no ASN data and no hostnames, because the raw rows needed to compute them are gone.

[0.15.0] - 2026-09-09

Added

• Geo Logs now records the autonomous system number and organization for every geo event using the GeoLite2 ASN database, including on geo-only installs (LOGPARSER_SEND_LOGS=false). Top IPs shows each IP's organization. Top locations has an ASNs tab with hosting classification and exact unique-IP counts. The grouped table adds optional ASN and Organization columns, the detail panel shows the ASN, and ASN include and exclude filters apply to both the table and embedded map. The API adds GET /api/v1/geo-events/top-asns and the asnIn and asnNotIn parameters to the geo-events and geojson endpoints.
• litestar backfill-asn --table geo-events fills missing ASN data in historical geo events and refreshes the per-IP aggregates without touching Access Logs. The command now requires --table access-logs, --table geo-events, or --table all so it cannot decompress the wrong table by accident. On first start, Geometrikks adds the new aggregate columns and refreshes the raw-retention window. This can make startup slow on large installs. Buckets older than raw retention remain without ASN data.

Fixed

• Geo Logs now shows recording hostnames for ranges over 24 hours. Existing installations can fill retained history with litestar backfill-geo-hostnames; it refreshes one day at a time and resumes after interruption.

Full Changelog: v0.14.3...v0.15.0