Skip to content

Tenzir Node v4.15.0

Download the release on GitHub.

Add label definitions to configured pipelines

Section titled “Add label definitions to configured pipelines”

Pipelines configured as code in the tenzir.yaml configuration file may now contain labels.

By @tobim in #4247.

Add an option for writing JSON arrays of objects

Section titled “Add an option for writing JSON arrays of objects”

Use write json --arrays-of-objects to write JSON arrays per batch of events instead of JSON objects per event.

By @dominiklohmann in #4249.

We now offer an RPM package for RedHat Linux and its derivatives.

By @tobim in #4188.

The sort operator now supports sorting by multiple fields.

By @dominiklohmann in #4242.

Add an option to export both past and future events

Section titled “Add an option to export both past and future events”

The export, metrics, and diagnostics operators now features a --retro flag. This flag will make the operators first export past events, even when --live is set. Specify both options explicitly to first return past events and then immediately switch into live mode.

By @IyeOnline in #4203.

Allow editing definitions of managed pipelines

Section titled “Allow editing definitions of managed pipelines”

The /pipeline/update API endpoint now supports updating definitions of existing pipelines.

By @Dakostu in #4196.

Support IP-in-subnet queries in lookup tables

Section titled “Support IP-in-subnet queries in lookup tables”

The lookup-table context now performs longest-prefix matches when the table key is of type subnet and the to-be-enriched field of type ip. For example, a lookup table with key 10.0.0.0/8 will match when enriching the IP address 10.1.1.1.

By @mavam in #4051.

The https connector supports the new options --skip-peer-verification and --skip-hostname-verification to disable verification of the peer’s certificate and verification of the certificate hostname.

By @mavam in #4248.

Support multiple table slice schemas when dumping contexts

Section titled “Support multiple table slice schemas when dumping contexts”

context inspect will not crash anymore when encountering contexts that contain multi-schema data.

By @Dakostu in #4236.

Add an option to export both past and future events

Section titled “Add an option to export both past and future events”

export --live no longer buffers the last batch of event that was imported, and instead immediately returns all imported events.

By @IyeOnline in #4203.

Add label definitions to configured pipelines

Section titled “Add label definitions to configured pipelines”

Pipelines configured as code no longer always restart with the node. Instead, just like for other pipelines, they only restart when they were running before the node shut down.

By @tobim in #4247.

Last updated: