Releases: ait-aecid/logdata-anomaly-miner
Releases · ait-aecid/logdata-anomaly-miner
Release of V2.2.3
Bugfixes:
- Fixed error with KafkaEventHandler in YamlConfig
Release of V2.2.2
Bugfixes:
- fixed kafka-version in test-scripts
Changes: - various changes for debian-release
Release of V2.2.1
Bugfixes:
- Fixed warnigs due to files in Persistency-Directory
- Fixed ACL-problems in dockerfile and autocreate /var/lib/aminer/log
Changes:
- Added simple test for dockercontainer
- Negate result of the timeout-command. 1 is okay. 0 must be an error
- Added bullseye-tests
- Make tmp-dir in debian-bullseye-test and debian-buster-test unique
Release of V2.2.0
Changes:
- Added Dockerfile
- Addes checks for acl of persistency directory
- Added VariableCorrelationDetector
- Added tool for managing multiple persistency files
- Added supress-list for output
- Added suspend-mode to remote-control
- Added requirements.txt
- Extended documentation
- Extended yaml-configuration-support
- Standardize command line parameters
- Removed --Forground cli parameter
- Fixed Security warnings by removing functions that allow race-condition
- Refactoring
- Ethical correct naming of variables
- Enhanced testing
- Added statistic outputs
- Enhanced status info output
- Changed global learn_mode behavior
- Added RemoteControlSocket to yaml-config
- Reimplemented the default mailnotificationhandler
Bugfixes:
- Fixed typos in documentation
- Fixed issue with the AtomFilter in the yaml-config
- Fixed order of ETD in yaml-config
- Fixed various issues in persistency
Release of V2.1.0
- Changes:
- Added VariableTypeDetector,EventTypeDetector and EventCorrelationDetector
- Added support for unclean format strings in the DateTimeModelElement
- Added timezones to the DateTimeModelElement
- Enhanced ApacheAccessModel
- Yamlconfig: added support for kafka stream
- Removed cpu limit configuration
- Various refactoring
- Yamlconfig: added support for more detectors
- Added new command-line-parameters
- Renamed executables to aminer.py and aminerremotecontroly.py
- Run Aminer in forgroundd-mode per default
- Added various unit-tests
- Improved yamlconfig and checks
- Added start-config for parser to yamlconfig
- Renamed config templates
- Removed imports from init.py for better modularity
- Created AnalysisComponentsPerformanceTests for the EventTypeDetector
- Extended demo-config
- Renamed whitelist to allowlist
- Added warnings for non-existent resources
- Changed default of auto_include_flag to false
- Bugfixes:
- Fixed some exit() in forks
- Fixed debian files
- Fixed JSON output of the AffectedLogAtomValues in all detectors
- Fixed normal output of the NewMatchPathValueDetector
- Fixed reoccuring alerting in MissingMatchPathValueDetector
Release of V2.0.2
- Changes:
- Added help parameters
- Added help-screen
- Added version parameter
- Adden path and value filter
- Change time model of ApacheAccessModel for arbitrary time zones
- Update link to documentation
- Added SECURITY.md
- Refactoring
- Updated man-page
- Added unit-tests for loadYamlconfig
- Bugfixes:
- Fixed header comment type in schema file
- Fix debian files
Release of V2.0.1
- Changes:
- Updated documentation
- Updated testcases
- Updated demos
- Updated debian files
- Added copyright headers
- Added executable bit to AMiner
Release of V2.0.0
- Changes:
- Updated documentation
- Added functions getNameByComponent and getIdByComponent to
AnalysisChild.py - Update DefaultMailNotificationEventHandler.py to python3
- Extended AMinerRemoteControl
- Added support for configuration in yaml format
- Refactoring
- Added KafkaEventHandler
- Added JsonConverterHandler
- Added NewMatchIdValueComboDetector
- Enabled multiple default timestamp paths
- Added debug feature ParserCount
- Added unit and integration tests
- Added installer script
- Added VerboseUnparsedHandler
- Bugfixes including:
- Fixed dependencies in Debian packaging
- Fixed typo in various analysis components
- Fixed import of ModelElementInterface in various parsing components
- Fixed issues with byte/string comparison
- Fixed issue in DecimalIntegerValueModelElement, when parsing
integer including sign and padding character - Fixed unnecessary long blocking time in SimpleMultisourceAtomSync
- Changed minum matchLen in DelimitedDataModelElement to 1 byte
- Fixed timezone offset in ModuloTimeMatchRule
- Minor bugfixes