Cyber Defense with MITRE Framework | Graylog + SOC Prime | On-Demand Webinar >>

The Graylog blog

Announcing Graylog Illuminate v3.0.2

The following Illuminate Spotlight content packs have been updated since Illuminate 3.0.1:

  • Graylog Illuminate 3.0.2:Core Spotlight
  • Graylog Illuminate 3.0.2:Cisco ASA Spotlight
  • Graylog Illuminate 3.0.2:Microsoft Defender Antivirus Spotlight
  • Graylog Illuminate 3.0.2:Fortinet Fortigate Spotlight
  • Graylog Illuminate 3.0.2:Linux Auditbeat Spotlight
  • Graylog Illuminate 3.0.2:O365 Spotlight
  • Graylog Illuminate 3.0.2:Palo Alto 9.1.x Spotlight
  • Graylog Illuminate 3.0.2:Microsoft Sysmon Spotlight
  • Graylog Illuminate 3.0.2:Windows Security Spotlight
  • Graylog Illuminate 3.0.2:SonicWall NGFW Spotlight
  • Graylog Illuminate 3.0.2:Watchguard Firebox Spotlight

Please report bugs and any other issues in our GitHub issue tracker. Thank you!

GRAYLOG ILLUMINATE 3.0.2

Released: 2022-12-16

Fixed

  • Dashboard widgets display “(Empty Value)” for multiple Illuminate dashboards (#986)
  • Sysmon: WMI saved search widgets display empty values (#1001)
  • Fortigate: Dashboard widget uses incorrect severity field (#996)
  • Palo Alto: Dashboard widget not filtering by product (#1000)

Known Issues

  • Auditbeat cannot process events with multiple values assigned to `vendor_event_action` (#622)

 

Let us know what you’d like to have included in our GitHub issue tracker.

Get the Monthly Tech Blog Roundup

Subscribe to the latest in log management, security, and all things Graylog Blog delivered to your inbox once a month.