Skip to content

Commit

Permalink
Merge pull request #1394 from gravwell/merge/main_to_next-patch
Browse files Browse the repository at this point in the history
chore: Merge main into next-patch
  • Loading branch information
ashnwade authored Feb 5, 2025
2 parents bfb333f + 65c4b38 commit 41a1ab4
Show file tree
Hide file tree
Showing 4 changed files with 36 additions and 30 deletions.
8 changes: 7 additions & 1 deletion changelog/5.7.0.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Changelog for version 5.7.0

## Released 29 January 2024
## Released 29 January 2025

## Gravwell

Expand Down Expand Up @@ -29,3 +29,9 @@
* Fixed an issue where intermediate tag translation would quietly roll over to tag 0.
* Fixed an issue with dangling GIDs that could cause problems with group sharing.

## 5.7.0-2 Hotfix

### Released 05 February 2025

#### Bug Fixes
* Fixed an issue where Alert sharing permissions were not restored from backups. Please note that the sharing information ***is*** preserved when creating the backup.
2 changes: 1 addition & 1 deletion ingesters/win_file_follow.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ Download the Gravwell Windows File Follower installer:

| Ingester Name | Installer | More Info |
| :------------ | :----------- | :-------- |
| Windows File Follower | <a data-bs-custom-class="hash-popover" href="https://update.gravwell.io/archive/5.7.0/installers/gravwell_file_follow_5.7.0.1.msi">Download <i class="fa-solid fa-download"></i></a>&nbsp;&nbsp;&nbsp;<a data-bs-custom-class="hash-popover" href="javascript:void(0);" data-bs-toggle="popover" data-bs-placement="bottom" data-bs-html="true" data-bs-content='<code class="docutils literal notranslate"><span class="pre">e58bfc118b6cc9bc1be41be1d816a89556b261b292788a2a389cd037c457821d</span></code>'>(SHA256)</a> | [Documentation](/ingesters/win_file_follow) |
| Windows File Follower | <a data-bs-custom-class="hash-popover" href="https://update.gravwell.io/archive/5.7.0/installers/gravwell_file_follow_5.7.0.2.msi">Download <i class="fa-solid fa-download"></i></a>&nbsp;&nbsp;&nbsp;<a data-bs-custom-class="hash-popover" href="javascript:void(0);" data-bs-toggle="popover" data-bs-placement="bottom" data-bs-html="true" data-bs-content='<code class="docutils literal notranslate"><span class="pre">0602c6322936aa15156febb7cd04747df630a8a3ccd531cb58cb41d804651a2b</span></code>'>(SHA256)</a> | [Documentation](/ingesters/win_file_follow) |

The Gravwell Windows file follower is installed using a signed MSI package. Gravwell signs both the Windows executable and MSI installer with our private key pairs, but depending on download volumes, you may see a warning about the MSI being untrusted. This is due to the way Microsoft "weighs" files. Basically, as they see more people download and install a given package, it becomes more trustworthy. Don't worry though, we have a well audited build pipeline and we sign every package.

Expand Down
2 changes: 1 addition & 1 deletion ingesters/winevent.md
Original file line number Diff line number Diff line change
Expand Up @@ -49,7 +49,7 @@ Download the Gravwell Windows Events installer:

| Ingester Name | Installer | More Info |
| :------------ | :----------- | :-------- |
| Windows Events | <a data-bs-custom-class="hash-popover" href="https://update.gravwell.io/archive/5.7.0/installers/gravwell_win_events_5.7.0.1.msi">Download <i class="fa-solid fa-download"></i></a>&nbsp;&nbsp;&nbsp;<a data-bs-custom-class="hash-popover" href="javascript:void(0);" data-bs-toggle="popover" data-bs-placement="bottom" data-bs-html="true" data-bs-content='<code class="docutils literal notranslate"><span class="pre">ac0cf940898c5854b2761b096319683d6627af4ffd038f20b0ebc39164aaa917</span></code>'>(SHA256)</a> | [Documentation](/ingesters/winevent) |
| Windows Events | <a data-bs-custom-class="hash-popover" href="https://update.gravwell.io/archive/5.7.0/installers/gravwell_win_events_5.7.0.2.msi">Download <i class="fa-solid fa-download"></i></a>&nbsp;&nbsp;&nbsp;<a data-bs-custom-class="hash-popover" href="javascript:void(0);" data-bs-toggle="popover" data-bs-placement="bottom" data-bs-html="true" data-bs-content='<code class="docutils literal notranslate"><span class="pre">2d27eded361c7e25cab2c9249e231d191602eb713b6a0289a9dfc0054facd619</span></code>'>(SHA256)</a> | [Documentation](/ingesters/winevent) |

Run the .msi installation wizard to install the Gravwell events service. On first installation the installation wizard will prompt to configure the indexer endpoint and ingest secret. Subsequent installations and/or upgrades will identify a resident configuration file and will not prompt.

Expand Down
Loading

0 comments on commit 41a1ab4

Please sign in to comment.