Bug Fix

Fixes bug introduced in 3.1.2

Maintenance Release

Updated Service APIs
Fixed Pagination bug when getting objects from S3

DONT USE IF YOU HAVE LOTS OF FILES

Maintenance Release

• Updated dependencies
• Updated Service APIs

Lucene backend

This release contains the latest Alpha code that utilises a local lucene database instead of storing the data in memory. This provides two main advantages;

• Firstly with nothing held in memory you can load more full files without memory issues.
• The lucene information is not deleted when the application quits, so you can re-open the application and still have access to the last data you downloaded.

This alpha provides the ability to load VPC Flow Logs and ELB Logs from S3, and should handle compressed files as well.

Things to note:

• Some functionality is currently missing. This is mainly the StackBar Chart and the Resources, Security and Error widgets
• The status bar doesn't have all its functionality
• It is not backwards compatible with the old dashboard.ctd files

Any problems create an Issue.

Thanks,

Mark

VPC and ELB logs

This is the stable release of 3.1.0 which provides the ability to read in VPC Flow Logs and ELB logs as well. Note that you can only read in VPC Flow and ELB logs from the local machine.

This release also updates the Maxmind database used for resolving IP address to locations. It also includes the latest AWS APIs.

VPC Flow Logs and ELB Logs

This is a pre-release that includes the functionality to read and analyse VPC Flow Logs and ELB Logs.

In this release the files must be on the local machine and not compressed.

If you find any problems please raise an issue.

Mark

Version 3 release

This is the first full release of Version 3. It is backwards compatible with the preferences from Version 2.

Its main features include:

• Dashboard and Widgets to provide greater flexibility in what you can analyse.
• The ability to Create addition Dashboards if you need them.
• The ability to configure existing widgets if needed.
• Clicking any table row / chart segment or bar or location on the map populates the Events Table with the appropriate Events.
• The ability to filter the Events Table using the search field.
• Double click a row in the Events Table to see the the RAW JSON of the event.

If you have any problems or feature suggestions then please create an Issue.

Version 3 - beta

This release is a beta release of V3 of CloudTrail Viewer. It has been completely rewritten from the ground up. If you are looking for a stable version then please download the latest v2 release.

V3 now has the concept of dashboard and widgets to make it more customisable to the end user.

• This release is fully working, though might not be 100% stable.
• It can take a few seconds to load, once the splash screen is displayed. This is down to SpringBoot configuration, I'm looking to improve the loading time.
• Not all the widgets can be customised at this time.
• There might be memory issues if you load in a large amount of Events.
• It should be backwards compatible with the V2 database, so you shouldn't lose your preferences if upgrading from version 2. It does make some changes to the database though they should not affect v2 form working.

If you find a bug, or have any feedback then please raise an issue.

GeoFeature Updates

Changes to the GeoFeature based on user feedback.

• The GeoFeature page now shows Continents as well as Cities ordered Highest to Lowest
• The map now uses a simple custom marker that shows the number of API calls made at the location.

Other changes.

• GeoLite database has been updated to the latest version

Maintenance Release

• Added new fields for v1.0.5 of the Event reference
• Parse Event log files now handles JSON keys being in lowercase instead of camelCase e.g. username instead of userName.