🚀 Features
Section titled “🚀 Features”Introduce the #import_time meta extractor
Section titled “Introduce the #import_time meta extractor”Jan 7, 2022 · @dominiklohmann · #2019
The #import_time meta extractor allows for querying events based on the time
they arrived at the VAST server process. It may only be used for comparisons
with time value
literals,
e.g., vast export json '#import_time > 1 hour ago' exports all events that
were imported within the last hour as NDJSON.
Add a --omit-nulls option to the JSON export
Section titled “Add a --omit-nulls option to the JSON export”Jan 6, 2022 · @dominiklohmann · #2004
The new --omit-nulls option to the vast export json command causes VAST to
skip over fields in JSON objects whose value is null when rendering them.
Implement a selection transform plugin
Section titled “Implement a selection transform plugin”VAST has a new transform step: select, which keeps rows matching the
configured expression and removes the rest from the input.
Create projection plugin
Section titled “Create projection plugin”VAST has a new transform step: project, which keeps the fields with configured
key suffixes and removes the rest from the input. At the same time, the delete
transform step can remove not only one but multiple fields from the input based
on the configured key suffixes.
🔧 Changes
Section titled “🔧 Changes”Prepare repository for VAST v1.0.0-rc1
Section titled “Prepare repository for VAST v1.0.0-rc1”Jan 20, 2022 · @dominiklohmann · #2035
VAST no longer uses calendar-based versioning. Instead, it uses a semantic versioning scheme. A new VERSIONING.md document installed alongside VAST explores the semantics in-depth.
Plugins now have a separate version. The build scaffolding installs README.md and CHANGELOG.md files in the plugin source tree root automatically.
Upgrade the minimum Arrow dependency to 6.0
Section titled “Upgrade the minimum Arrow dependency to 6.0”Jan 18, 2022 · @dispanser · #2033
Building VAST now requires Arrow >= 6.0.
🐞 Bug Fixes
Section titled “🐞 Bug Fixes”Create intermediate dirs for db-directory and respect schema-dirs in bare mode
Section titled “Create intermediate dirs for db-directory and respect schema-dirs in bare mode”Jan 25, 2022 · @dominiklohmann · #2046
VAST no longer ignores the --schema-dirs option when using --bare-mode.
Starting VAST no longer fails if creating the database directory requires creating intermediate directories.
Start the telemetry loop of the index correctly
Section titled “Start the telemetry loop of the index correctly”Jan 14, 2022 · @dominiklohmann · #2032
The index now emits the metrics query.backlog.{low,normal} and
query.workers.{idle,busy} reliably.