Skip to content

Commit

Permalink
Update version to 1.4.3.
Browse files Browse the repository at this point in the history
  • Loading branch information
chris committed Dec 3, 2019
1 parent 4430cfc commit d1ac349
Show file tree
Hide file tree
Showing 3 changed files with 5 additions and 9 deletions.
2 changes: 1 addition & 1 deletion Makefile
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ MAGE_IMPORT_PATH=${BEAT_PATH}/vendor/github.com/magefile/mage
NO_COLLECT=true

# for build purposes (doesn't fix version command in cmd/root.go):
override BEAT_VERSION=1.4.2
override BEAT_VERSION=1.4.3
override BEAT_VENDOR=Counteractive

# Path to the libbeat Makefile
Expand Down
10 changes: 3 additions & 7 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,12 +2,7 @@

O365beat is an open source log shipper used to fetch Office 365 audit logs from the [Office 365 Management Activity API](https://docs.microsoft.com/en-us/office/office-365-management-api/office-365-management-activity-api-reference) and forward them with all the flexibility and capability provided by the [beats platform](https://github.com/elastic/beats) (specifically, [libbeat](https://github.com/elastic/beats/tree/master/libbeat)).

**The latest release is [v1.4.2](https://github.com/counteractive/o365beat/releases/latest)**. It:

1. Includes new kibana visualizations and a dashboard since v1.4.1, showing `AlertTriggered` events from Microsoft's Advanced Threat Protection service, a chart of common client IP addresses, a list of unique users, and a running stream of summarized activity.
1. Updates processors to better handle certain log fields. Specifically, the API provides `Parameters` and `ExtendedProperties` fields as arrays of objects with just `Name` and `Value` keys, which is _very_ confusing and difficult to work with, and causes issues with elasticsearch. We found this was true of the `ModifiedProperties` field as well. This version ships all those as strings, which can then be deserialized or parsed with string-based tools. Most importantly, it stops indexing errors and dropped events.

It closes a number of issues (#12, #13, and #14), but there is still a lot on the [to-do list](#tasks) and probably more than a few bugs still hiding out there! Please open an issue or submit a pull request if you notice any problems in testing or production.
**The latest release is [v1.4.3](https://github.com/counteractive/o365beat/releases/latest)**. It closes issues related to throttling (#17) and troubleshooting (#21). Please open an issue or submit a pull request if you notice any problems in testing or production, and thanks to the users who have already done so, we appreciate the feedback!

## Getting Started with O365beat

Expand Down Expand Up @@ -214,7 +209,8 @@ This will fetch and create all images required for the build process. The whole

## Changelog

* v1.4.2 - Fixes multiple processor bugs (closes issues #12, #13, and #14)
* v1.4.3 - Fixed bugs related to throttling and troubleshooting (closes issues #17 and #21)
* v1.4.2 - Fixed multiple processor bugs (closes issues #12, #13, and #14)
* v1.4.1 - Added kibana visualizations and dashboard and updated processors to better handle fields containing data arrays
* v1.4.0 - Bumped libbeat to v7.4.0 and fixed throttling issue
* v1.3.1 - Updated documentation and improved error messages
Expand Down
2 changes: 1 addition & 1 deletion cmd/root.go
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ import (
)

var name = "o365beat"
var version = "1.4.2" // TODO consider moving this or pulling from conf or env
var version = "1.4.3" // TODO consider moving this or pulling from conf or env

// RootCmd to handle beats cli
var RootCmd = cmd.GenRootCmdWithSettings(beater.New, instance.Settings{Name: name, Version: version})

0 comments on commit d1ac349

Please # to comment.