Hello everyone, the latest release of the Devo Platform is now live! Release 8.13.0!  This update delivers on customer-requested features with a bang!  Starting with Data Search, we have delivered on the Lookup Syntax convergence, now you can use the same syntax for Lookups in Data search AND API. We have also added a new Lookup Wizard and delivered IP/CIDR matching support in Lookups.   In Alerts, this release delivers multiple PostFiltering improvements including a new Date Picker that takes your timezone into account, parameter action types have been added to the post-filter list of actions.  We have also added Audit Logs for Delco API requests and more!  Read on to find out!

Geo Availability

Table of Contents

New Features

Data Search

Lookup syntax convergence

No longer will Lookups require different syntax to use between Data Search and API!  This release brings the lookup syntax in line with the Data Search syntax.  The old syntax is deprecated, but can still be used.

Lookup wizard now available

This new functionality will help you use and configure your lookup operations! Configure the category, and available operations.  The wizard works with Regular lookups as well as Shared Lookups and contains a Lookup listing that displays the key name and key type. Additionally the wizard includes comprehensive help dialog boxes

IP/CIDR matching is fully supported in Lookups

Available now for newly created lookups.  For lookups created from the UI using a CSV, you can edit them so they are recreated and make use of this new feature.

Alerts

Postfilter Improvements

New Date Picker that uses users time zone added.

Added the parameter action type to the post filter list of actions.

Audit Logs for Delco API requests

User can now monitor audit logs of policy requests done via Delco API in the secops.audit.api table.

Alert definitions now accept the regular syntax for lookup operations

Users can now use the regular syntax for lookup operations when creating or editing any alert query in the UI or through the Alerts API

Flow

Allow data injection in other domains with DevoSink

Users can now inject data into another domain with Devo Sink inside the flow editor using the API key of that external domain.  The API keys can be found under Adminsitration->Credentials→ Access keys in the domain users want to send the data to.

Bug Fixes

Data Search

Fixed edge cases where there was an issue opening a table from finder.

Fixed grouping modal missing when grouping by columns is selected

Fixed Column heading that stays floating indefinitly

Fixed opening a query with group by with alias

Fixed issue with column headers with new columns

Fixed table header visualization caused by hidden columns

Fixed display issue with detail column panel.

Alerts

Fixed post filter validation with special characters

Fixed view of full post filter condition for alerts with existing postfilter