Skip to content

v0.28

Choose a tag to compare

View all tags
@justwaters justwaters released this 03 Nov 03:52
· 16 commits to main since this release
v0.28
9470298

Install this version

docker pull ghcr.io/justwaters/siemlite:v0.28

Prebuilt binaries are attached to this release.

New

  • A Reset button next to Add rule in the parser editor puts the default keyword severity rules back. Choosing "from a field" on a parser with no rules fills them in for you.

Improved

  • A new parser's events are now rated by keyword: for example delete is Medium, admin is High, breach is Critical and fail is Low. A failed login now rates Low.
  • The default keyword list is available to admins at GET /api/v1/parsers/severity-defaults.
  • Fatal is no longer offered as a parser severity. Parsers that already use it keep it.

Fixed

  • On the Integrations page the word beside a switch always said "On", so Email read "On" with its switch off. It now follows the switch, including the sign-in switches on the Users page.
  • An integration that isn't set up, such as AI agents (MCP) before the first token, showed its switch on. It now shows Off.
Assets 9
Loading