...
- Fixed issue where copy_first or copy_last in event correlation would not be able to copy the node name, this caused the synthetic event to use the global node name. if you have been using copy node in the correlation rule you should replace this with node_uuid
- Script outputs in emails will now render correctly
- New plugin interface to easily work on other events in parser plugins, docs coming.
- In a parser plugin the third argument is now a helper interface replacing the full opEvents object.
- Setting opevents_parser_plugin_use_events_obj to true will allow you to use the full opEvents object to retain pre 4.1.1 functionality
opEvents 4.1.0
1 December 2021 Status subtle true colour Green title released
...