Installer and WebUI updates

• updates installer tables to include comments
• fixes in WebUI

Tag Cloud

• adds tag cloud visualization of all tags
• violations runner recovers from errors
• various bug fixes in samui

Bug fixes

• fixes bugs in violations runners

Admin Web UI, misc fixes

Policies and the SnowAlert Management UI

We've been working diligently on a web UI that allows our team to manage, and other teams to view the rules that run on our infrastructure. This also adds a new kind of rule, the Policy, which is intended to aggregate Violations into high level compliance goals and provide a realtime evaluation of your organization's security posture.

More thorough logging and bugfixes

We're spending more time evaluating the performance of our queries, and have added logging to help us do so — specifically, before and after a query executes, and before and after alerts and violations are created. We've also fixed a few bugs around mis-performing queries crashing the runners.

Better run metadata and bug fixes

• run metadata is now stored in a way that is easier to query
• alert queries can now generate >16k events

Fixes Temp Table Bug

v1.4.2

Drops temp table if it exists

Hotfix

Recover better from errors in queries.

Logging to Snowfake

• runtime data is recorded in snowalert.results.metadata
• misc bug fixes

Bug fixes

Includes a variety of bug fixes from manual QA runs.

Bug fix and improvement

• updates violations event_time column to be called alert_time
• fixes error handler bug