He also recorded a couple of videos showcasing some of the new features recently added to Squert:
Changes v1.1.6: http://www.youtube.com/watch?v=_eheJv0MJDY
Changes v1.1.9: http://www.youtube.com/watch?v=QkgrigopfQA
I've packaged Squert 1.2.0 as securityonion-squert - 20140216-0ubuntu0securityonion2 and the package has been tested by the following (thanks!):
Issue 448: When changing time zone in Squert, it needs to revert to UTC when requesting transcripts
- When you update the package, it will copy new files into place and then display "Updating database". Please do not cancel or interrupt this process.
- You no longer have to hardcode your Sguil credentials in config.php.
- Timestamps are displayed in UTC by default, but you can change this by clicking the arrows to the right of the timeline. De-select UTC, then specify your local timezone offset. Then click the "save TZ" button to save your preference into the database and click "Update" to refresh the page with the new timestamps.
|Do not cancel or interrupt the database update|
|Pivoting on an event and requesting a TCP transcript with the TX button|
The new package is now available in our stable repo. Please see the following page for full update instructions:
If you have any questions or problems, please use our mailing list:
If you and/or your organization have found value in Security Onion, please consider giving back to the community by joining one of our teams:
We especially need help in answering support questions on the mailing list:
We also need help testing new packages: