Repository navigation
v0.25
Install or update
docker compose pull && docker compose up -d
Or set SIEMLITE_IMAGE=ghcr.io/justwaters/siemlite:v0.25 in .env.
New
- AI agents (MCP) on the Integrations page. SIEMLite serves the Model Context Protocol at
/mcp, so Claude Code, the Gemini CLI, OpenCode and other MCP clients can search logs, read alerts and make changes. - Make a token for each agent with a level: Read-only (search events, stats, alerts, rules, sources), Analyst (also acknowledge and close alerts) or Admin (also manage sources and parsers). A new token is shown once with copy-ready setup for Claude Code, Gemini CLI, OpenCode and other clients. Removing a token cuts the agent off at once, and the card's switch keeps all agents out.
- Everything an agent changes is recorded in the audit log under the token's name. Users, passwords, sign-in, certificates, email, backups, retention and alert rules can't be changed by an agent.
Improved
- Database schema v17.