e53e782223
Find supernets, don't create them
expand-geo
Dan Milne
2025-12-27 11:56:19 +11:00
108caf2fe6
Expand geo ranges when possible
Dan Milne
2025-12-25 12:06:11 +11:00
225d970123
Update duckdb. use more duckdb. Fix the display of stats
main
Dan Milne
2025-12-25 12:03:25 +11:00
a0ff0edb73
Update duckdb. use more duckdb
Dan Milne
2025-12-25 11:59:53 +11:00
693851f664
Use only parquet files for events
Dan Milne
2025-12-03 17:16:38 +11:00
032243ba6a
Smarter backfil
Dan Milne
2025-12-02 14:01:45 +11:00
1aa77066a1
Catch exceptions in the process waf job, use symbols for actions, Don't create a rule which matches a supernet rule.
Dan Milne
2025-12-01 21:23:23 +11:00
f0ad3b2c90
Two bug fixes
Dan Milne
2025-12-01 19:54:47 +11:00
54d9c3a0d9
Move version file, fix oidc, make jobs use envs
Dan Milne
2025-12-01 15:59:26 +11:00
3eddfe9f7e
Better version support
Dan Milne
2025-11-30 13:31:16 +11:00
179563022e
Drop add_headers - headers can now be added to meta[] to be applied for any action. Consilidate Tagging in a service
Dan Milne
2025-11-30 13:18:17 +11:00
de2eb43e2b
More use of tags - drop add_header action -> allow + headers+tags
Dan Milne
2025-11-20 11:55:04 +11:00
3f274c842c
Fix some blocked/allow laggards after migrating. Add DuckDB for outstanding analyitcs performance. Start adding an import for all bot networks
Dan Milne
2025-11-18 16:40:05 +11:00
ef56779584
Add DuckDB to the Docker build and the Gem
Dan Milne
2025-11-18 16:37:54 +11:00
de1cf0b237
Use network IDS, rather than the CIDR containment method
Dan Milne
2025-11-17 21:45:41 +11:00
4964d1a190
Fix missing network_count in ASN analytics query
Dan Milne
2025-11-17 21:33:56 +11:00
5d3e35a4ac
Add a setting for maximum age of events
Dan Milne
2025-11-17 16:17:59 +11:00
830810305b
Path matching
Dan Milne
2025-11-17 12:12:17 +11:00
093ee71c9f
Merge pull request 'path-matching' (#1) from path-matching into main
Dan Milne2025-11-15 01:55:46 +00:00