Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Released on 11.25.2025
These are the release notes for version v2.162.0 of the Onum platform.
[General] Fixed an error that made hidden and secret fields visible in request payloads.
[Actions] Fixed an error in the Parser Action that did not allow users to remove the first delimiter in Manual mode.
[Actions] In the Field Transformation Action, Pipeline fields were not shown when using the inEventField argument. This has been fixed.
[Data Sinks] We've fixed some minor design errors in the Splunk HEC Data Sink.
[UI] Fixed some visual errors with charts visualization in the main areas of the platform when choosing the Stacked view.
Released on 06.11.2025
These are the release notes for version v1.840.0 of the Onum platform.
[Actions] The Bulk allow and Allow TLS configuration fields were not displayed in the HTTP Request Action. This is fixed now.
[Pipelines] Fixed an issue that caused an error when unlinking some components in a Pipeline after configuring them.
Released on 04.16.2025
These are the release notes for version v1.730.0 of the Onum platform.
[Pipelines] Solved an issue that caused errors after publishing or stopping some Pipelines.
[Pipelines] Data sinks did not appear in Pipeline debug mode. This has been fixed.
[Pipelines] Notifications that appear after publishing or stopping Pipelines did not appear in some cases. This is fixed now.
[Pipelines] Some Action links disappeared after updating Actions and saving the Pipeline. This is fixed now.
[Listeners] Fixed an issue that caused 2 notifications to appear when a Listener was deleted.
[Actions] The toggle switches did not work in some Action configuration menus, and this has been fixed now.
[Actions] Fixed an issue that did not allow deleting Actions after being unlinked in a Pipeline.
[Actions] Some Actions fields did not appear in the configuration menu until refreshing. This is fixed now.
[Actions] Fixed an issue that caused a crash when saving a Pipeline after changing Action names.
[Actions] Null values were not appearing in the Parser Action output data. This has been fixed.
[Actions] Fixed an issue that caused problems with some Action fields when the configuration menu was opened while the Pipeline was being saved.
[Actions] The Field Generator Action did not show the update color properly after being updated. This is fixed now.
Released on 08.12.2025
These are the release notes for version v2.51.0 of the Onum platform.
The Parser Action has been updated to v1.1.0!
You can now use the optional operator in the PCL syntax to include conditions in your parsed data. Use it to indicate that a group in your syntax could be present or not in your parsed data.
Learn more in .
The Field Generator Action has been updated to v1.0.0!
We've added some new date operations to the Action:
This Year
This Month
This Week
Also, there are new options in the date operations to set the required timezone and format of the resulting dates.
Learn more in .
The HTTP Data sink has been updated to v2.2.0!
We've added a new retry logic in case of errors when sending data. Set the parameters in the Retry configuration area of the Pipeline configuration of the Data sink to configure the required retry logic.
Learn more in .
[Pipelines] Fixed an error that rerendered the original coordinates of a Pipeline when dragging some Actions.
[Actions] Fixed an error where the field names in the Conditional Action appeared shortened.
[Actions] Fixed an error in the Field Transformation Action that crashed the app when deleting an operation with more than one chain.
Released on 07.18.2025
These are the release notes for version v2.27.1 of the Onum platform.
The creation date and last update time of Listeners, Data sinks, and Pipelines are now displayed in a user-friendly format, showing the date and time together. Previously, the time was only available through a tooltip.
The Message Builder has been updated to allow users to set a default value in case the mapped field/variable is null in JSON objects. It must either be a fixed/constant value or a null value.
Read more about the Message Builder in .
[Home] Fixed an issue where the Net saved in the Home area showed some discrepancies.
[Actions] Fixed an issue in the JSON Transformation Action where the Save button did not work with empty data in the configuration form.
Released on 10.14.2025
These are the release notes for version v2.101.0 of the Onum platform.
We have included a checkbox option for boolean operations instead of a drop-down menu.
The table header style has been adapted to better fit the Onum UI.
[Tenant] Several issues with date/time range selector have been fixed.
Released on 07.07.2025
These are the release notes for version v1.896.0 of the Onum platform.
The Parser Action has been updated to v1.0.1! We've fixed some issues regarding serialization in UPD messages.
Learn more in .
[Listeners / Data sinks / Pipelines] We've improved the message that appears when updating a Listener, Data sink, or Pipeline.
[Listeners] Fixed an issue where users could not save their Kafka Listener configuration when leaving the second topic ID blank.
[Listeners] Fixed an issue where the Kafka Listener was not counting the ingested bytes properly.
Released on 12.04.2024
[Labels] Both procIdRegex and hostnameRegex are now displayed correctly on a single line, and the regex value uses an ellipsis if necessary.
[Data sinks] The warning message that indicates that you'll lose all data if you close the configuration window of a new Data sink did not appear. This has been fixed now.
[Data sinks] Some Data sink configuration forms sent unnecessary fields in the payload. This has been fixed.
[Pipelines] Solved issue that made some Actions unavailable for certain Data sinks.
[Pipelines] prevOutput property removed from Pipeline updates.
[Actions] Fixed an issue where the select menu showed raw literals instead of user-friendly values in the Conditional Action.
[Actions] Fixed an issue in the Redis Action that caused the Field/Value pairs option not to show when HSET is selected.
[Actions] The Parser Action did not display events with list type fields. This has been fixed.
The Falcon NG-SIEM Data sink has been updated to v2.0.0! We've made some minor updates related to user experience.
The Azure Event Hubs Listener has been updated to v1.0.1! We've added execution control by environment variables.
[UI] Metric series (EPS) showed zero when values were very low. This has been fixed.
[Authentication] Password security has been increased. It now requires 10 characters, uppercase and lowercase letters, a special character, and a number.
[Enrichment] Fixed bug that allowed users to use lookups with errors.
[Pipelines] Fixed error with bulk operations menu in the Pipelines area.
Released on 01.17.2025
These are the release notes for version v1.616.1 of the Onum platform.
[Administration] We've fixed some problems with zooming in/out to check data fields in the Data history area.
[Administration] Wrong colors in the Data history graphs fixed.
[Pipelines] The tooltip in the graphs at the top of the Pipeline does not show when the data count is 0. This issue is fixed now
[Pipelines] Data sinks now show the proper names in the Configured section.
[Pipelines] Using a Parser after an HTTP Action resulted in an error. This has been fixed.
[Tenants] Flickering issue in the Tenant menu has been fixed.
[Tenants] The Tenant selector menu colors have been fixed.
[Actions] Some issues in the dropdown menu of the Message Builder Action have been fixed.
[Data sinks] The Syslog sink default configuration did not work properly. This has been fixed.
[UI] Dropdown menus had some issues when you clicked them twice. This is fixed now.
Released on 12.02.2024
Released on 11.05.2025
These are the release notes for version v2.138.0 of the Onum platform.
When reviewing and debugging the pipeline using the Test Pipeline functionality, you can now highlight specified field names or search in this view for a specified field name for each port output.
[Home] The actions page was throwing an unknown error when updating actions.
[Users] Oops error occurs when attempting to invite users with the filter enabled
[UX] Fixed wrong image in the app loading screen.
[Data sinks] Fixed an issue where the info icon in the Data sink cards showed in an incorrect place.
[Data sinks] Fixed an issue found when sending data using the zip compression option to the Splunk HEC Data sink
[Actions] Fixed an issue with height in some Action components.
[Actions] Fixed an issue with the notification that appears when renaming an Action.
[Administration] Fixed an issue where the content was not properly displayed in the Secrets area.
[Administration] Improved error messages when creating an empty secret.
[Roles] Fixed some mismatches between roles and accessible sections in the app.
We've added a new Data sink! You can now send your events to Redis without the need for intermediary files or complex configurations.
Learn more about the Redis Data sink in .
The Redis Action has been updated to v2.0.0! Users can now connect to the Redis server using the new and improved interface.
Learn more about the Redis Action in .
The Mail sink has been updated to v1.0.0.
The Azure Event Hubs Action has been updated to v1.0.0! This includes many more fields to configure your listener, such as Checkpointing and processing options, batch settings, backoff processing, and more!
[Debugger] Fixed an issue that caused users to be unable to remove field-based filters in the Debugger once selected.
[Listeners] Changed the oops page when trying to create a Listener.
[Actions] Realigned the output ports in the Conditional Action.
[Actions] Fixed an issue in the Parser action whereby removing the first delimiter at initial position caused a crash
We have added the ability to enter a default value if the field returns a null result.
While the conditional action sends to the port of the first matching condition, we have added an "All conditions match" mode that sends the event to every matching condition's port.
[Charts] Fixed an error handling zoom on charts.
[Authentication] Fixed an error that did not log a user out after inactivity.
[Authentication] Fixed minor errors when renewing tokens.
[Tenant] Fixed session expiration causing the user to switch from custom tenant to default tenant on signing back in.
[UI] Style changes to the interface to enable smoother scrolling.
You can now collect your database data using the The Relational Databases Listener!
The Relational Databases Listener allows you to read data from a database using the MySQL, Oracle, Postgres, SQL Server and SQLite database management systems.
Check the Listener article .
The Falcon NG-SIEM Data sink has been updated to v2.0.1! Check all the new updates in the .
The Apache Kafka Listener has been updated to v2.1.0! We've fixed some minor issues to improve the user experience.
[UI] Fixed and issue with sorting in charts.
[UI] Fixed an error that showed inactivity messages in unexpected cases.
[UI] Fixed some minor errors when submitting new users.
[UI] Fixed an error that did not log users out when inactive.
[Pipelines] Fixed and issue with publish confirmation messages in Pipelines.
[Actions] Fixed some errors with JSON output format in the Message Builder Action.
[Actions] In some cases, nodes did not appear properly in the Message Builder Action. This has been fixed.
[Actions] Fixed some issues with underscores in the Message Builder Action.
The PagerDuty Data sink has been updated to v1.0.0!
The configuration form of the Data sink has been modified. The Proxy configuration is now under an Advanced configuration section. Also, the output configuration of the Data sink in a Pipeline has been improved for a better user experience.
Learn more in .
The Google Cloud Storage Data sink has been updated to v0.0.3!
We've included a new option in the Compression parameter of the configuration form. You can now compress your events in gzip format.
Learn more in .
You can now access your Falcon NG-SIEM instance and listen for its data in Onum using the as a collector.
We have added descriptions for various fields and tooltips throughout the UI, including boolean fields.
[Pipelines] Removed an unnecessary tooltip from the Pipeline focus panel.
[UI] Corrected extra spaces in drop-down footers.
[Actions] In the Conditional Action, dynamic ports can now be connected when conditions have custom names.
[Actions] Various dependency issues fixed in the Sigma Rules Action.
[Listeners] Fixed issue where Edit button from some Listeners menu opens the configuration tab instead of the labels tab.
Learn more about Filtering Actions .
[Actions] Usability improvements in the .
Learn more about Transformation Actions .
[UX] Fixed some usability issues in the web application.
[Pipelines] Fixed an issue that caused an error when accessing a Data sink options menu in the Pipeline left menu.
[Pipelines] Fixed an error that occurred when trying to update a Pipeline version after updating the Data sink config from the Pipeline canvas.
[Tags] Fixed issues with tag character limit.
Our platform now supports authentication via SAML!
This new feature allows users to securely log in using their existing identity providers, such as Google, Microsoft, or any SAML-compliant service. By integrating SAML, we’re streamlining the login process, enhancing security, and making access management more flexible.
Learn more in .
The Amazon S3 Data sink has been updated to v1.0.1! We've fixed some issues when uploading Parquet files.
Learn more about the Amazon S3 Data sink in .
The Syslog Listener has been updated to v1.1.2! We've solved some issues with malformed Syslog messages.
Learn more about the Syslog Listener in .
[Data sinks] Fixed an error that did not allow users to create new Data sinks.
[Actions] Fixed a bug that did not allow users to drag fields in the Math Expression Action configuration.
[Pipelines] Fixed errors with modals when deleting Pipelines in bulk.
[Actions] Fixed an error in the Field transformation Action that made it unable to convert strings into integers due to a cache issue.
[Actions] Fixed an issue that occurred when selecting the SHA3 operation in the Field transformation Action.
[Pipelines] When users renamed a Pipeline, there was a problem with the focus, which stayed in the name field.
[Pipelines] When Actions are not configured, links should appear in grey and not with the color of the Action category.
[Listeners] Disabled Listeners displayed contextual menus in the Pipeline detail view. This has been fixed.
[Actions] When you have a Pipeline with a Lookup Action configured and you add a new one, the latter appears with the configuration of the first one. This is already solved.
[Listeners / Data sinks] The Listener and Data sinks versions are now displayed in their configuration windows.
[Actions] Fixed an error that prevented the configuration dropdown menu from moving along an Action when dragged to a different location.
[Actions] Fixed layout error in Field Transformation Action when the output was too long.
[Tags] When a new tag is added, the cache was not updated properly.
Released on 11.07.2025
These are the release notes for version v2.144.0 of the Onum platform.
The Azure Event Hubs Listener has been updated to v2.0.0!
We've added a new set of parameters to decide where to begin reading the event stream.
Learn more about the Azure Event Hubs Listener in .
The Slack Data Sink has been updated to v2.0.0!
You can now connect to your Slack channel using your Slack API token, instead of adding the webhook as in previous versions. We recommend to use this option from now on.
Learn more about the Slack Data Sink in .
[Lookups] Lookups could not be updated when the CSV did not have headers. This has been fixed.
[General] Fixed an error that occurred when an Admin invites new user to a Tenant.
Released on 07.16.2025
These are the release notes for version v2.18.0 of the Onum platform.
Our platform now supports authentication via OpenID Connect!
This new feature allows users to securely log in using their existing identity providers, such as Google, Microsoft, or any OpenID-compliant service. By integrating OpenID, we’re streamlining the login process, enhancing security, and making access management more flexible.
Learn more in .
Users can now double-click the required Listener / Data sink type in the corresponding menu to access its configuration directly, making the process more intuitive and straightforward.
The Action is now deprecated and will no longer receive support.
From now on, users can use the Action as a replacement, which will include the Flat operation and all the available JSON operations you can perform in your Pipelines.
[Listeners] Fixed an issue where the Tick Listener configuration appeared in the wrong place.
[Listeners / Data sinks] Fixed an issue where the New listener / New data sink button disappeared.
[Actions] Fixed an issue in the Field Transformation Action where values are stored incorrectly in collapsed mode.
Released on 07.23.2025
These are the release notes for version v2.29.0 of the Onum platform.
We've added new Data sinks for Apache Kafka and MongoDB!
You can now send data messages to a Kafka topic and your Mongo databases, using information from events to construct messages.
Read more about the Apache Kafka Data sink in , and check for more info about the MongoDB Data sink.
The Twilio Data sink has been updated to v1.0.0! The configuration form of the Data sink has been modified for a better user experience.
Learn more in .
The Field Transformation Action has been updated to v1.1.2! The filter invert parameter is now marked as mandatory.
Learn more in .
We have improved search functionality in all home pages (Listeners, Pipelines, Sinks) to eliminate lag time.
[Pipelines] Fixed layout changes when viewing the info of the Data Volume metric.
[User Interface] Improved the appearance of the Net Saved info pop-up.
[Alerts] Fixed visual impairments when using the group by function.
Released on 06.18.2025
These are the release notes for version v1.855.1 of the Onum platform.
Note that this Data sink is only available in certain Tenants. if you don't see it and want to access it.
We've added a new Data Sink type to our catalog!
The Syslog Resilient Data Sink differs from the basic Syslog Data Sink in that it has a special port used to deliver events that could not be delivered to the destination due to connectivity issues.
Head to to learn more about it.
The Apache Kafka Listener has been updated to v2.0.0!
There's now a new authentication method available to set in the Apache Kafka Listener configuration settings: SCRAM (Salted Challenge Response Authentication Mechanism).
Learn more about this in .
The Field Transformation Action has been updated to v1.0.1!
You can now use the Protobuf to JSON operation to convert your messages into JSONs, making it easier to share data with systems that do not support the standard Protobuf binary wire format.
Learn more in .
[Actions] Fixed an issue in the Parser Action that caused an error when typing an operation in PCL.
[Pipelines] Fixed a problem with refreshing in Pipelines that caused a blink effect when performing some actions.
Released on 10.08.2025
These are the release notes for version v2.94.0 of the Onum platform.
The Field Transformation Action has been updated to v1.5.0!
We've added a new operation: . You can use it to transform your input strings representing bytes encoded in EBCDIC 037 to a string in the selected output format.
Besides, the following issues have been solved:
Fixed issue with operation returning numbers in scientific notation.
Changed Format parameter to a dropdown list.
Learn more about the Field Transformation Action in .
The Syslog Data sink has been updated to v3.0.0! We've fixed some minor issues to improve the user experience.
Learn more in .
[Pipelines] Fixed an issue that showed some icons in the Pipelines area wrongly.
[Pipelines] Fixed an issue where no error message was displayed when adding a tag to a Pipeline with less than 2 characters.
[AI Assistant] The AI Assistant was not aligned with the footer properly in the expanded view. This is fixed now.
Released on 04.09.2025
These are the release notes for version v1.725.1 of the Onum platform.
[Authentication] Admin users can now activate Two-factor authentication for the users in their Tenants. Learn more in .
[Pipelines] OutEventField is now supported on lists.
[Pipelines] The Input field parameter was displayed with a wrong style and has been fixed.
[Listeners] Fixed the Update button color in Listeners to make it more visible.
Released on 08.06.2025
These are the release notes for version v2.45.0 of the Onum platform.
You can now easily locate your required Listener/Data sink type in their corresponding screens. Use the new search bar at the top of the window or sort the list using the options at the top-right menu.
The TCP Data sink has been updated to v1.0.0! You can now compress your data using gzip if you need to reduce the size of your files.
Learn more in .
[Actions] Fixed an error where an Action eligible to be updated appeared repeated in the upgrade screen when there were 2 or more Actions of the same type ready to be updated.
[Actions] We've fixed the Accumulator Action to show at least one input event and set it as required.
[Home] Fixed an error where the info icon in the Home area stats displayed wrong info in some cases.
Released on 12.25.2024
These are the release notes for version v1.606.1 of the Onum platform.
[User activity] Users are now able to filter data by user.
[Pipelines] The update date was removed from Pipeline details as it is duplicated.
[UI] Drop-down navigation using keyboard arrows to move up and down.
[Pipelines] Focus lag when hovering over a label without a tooltip and attempting to drag.
[Pipelines] Label and Configuration drop-downs overlap in the canvas view.
[Pipelines] General scroll issues fixed in the labels area.
[Pipelines] The scroll is disabled on the Actions menu if the pointer remains still.
Released on 08.14.2025
These are the release notes for version v2.56.0 of the Onum platform.
The Field Transformation Action has been updated to v1.3.0! You can now use the following operations:
Learn more about the Field Transformation Action in .
[Listeners / Data sinks / Pipelines] Fixed an error in the Table view of the Pipelines, Listeners, and Data sinks areas that did not show the Delete option in some cases.
[Pipelines] Fixed an error that displayed the Pipelines status dropdown menu empty.
[Administration] Roles are now displayed in order (from highest to lowest rank), and the dropdown menu has been fixed.
Released on 12.19.2024
These are the release notes for version v1.597.3 of the Onum platform.
[Pipelines] New option to duplicate Pipelines from the Pipelines area, in both Cards and Tables views. Learn more .
[Pipelines] New Created by filter in the Pipelines area. Learn more .
[Pipelines] Fixed error that made the app crash when you open a Pipeline with a recently deleted Listener.
[Pipelines] After duplicating a Pipeline, cards displayed a wrong color.
[Actions] Fixed error that refreshed the app when using the To Timestamp operation in the Field Transformation Action.
Released on 11.29.2024
These are the release notes for version v1.577.2 of the Onum platform.
[Enrichments] A new spinner has been added to indicate that a new Enrichment version is being uploaded. Learn more .
[Pipelines] The charts in the cards and the preview view do not match. This has been fixed.
[Pipelines] The style of the left panel broke the aspect ratio when you have a Listener with a long name.
[Actions] Drag to reorder operations should be initiated only when clicking outside fields.
[Actions] Fixed error that allowed users to connect Actions to themselves.
Released on 07.30.2025
These are the release notes for version v2.38.0 of the Onum platform.
The HTTP Data sink has been updated to v2.1.0!
The Data sink has been updated to support gzip data compression. Also, some parameter names have been renamed to use more user-friendly values.
Learn more in .
[Actions] Fixed an issue where an Action changelog appeared after updating a different Action in a Pipeline.
[UX] Some Pipeline stat names have been updated.
Released on 02.11.2025
These are the release notes for version v1.649.0 of the Onum platform.
[AI Assistant] A set of Actions now has a new AI assistant that helps you with configuration and updates. Learn more in .
Learn more about the AI Assistant .
[Pipelines] Users can switch between events and bytes now in the Pipelines area chart.
[Listeners] Fixed an error that returned a blank page when creating a Kafka listener.
Released on 05.08.2025
These are the release notes for version v1.753.1 of the Onum platform.
[Actions] The has been updated to allow the extraction of XML values.
Learn more about Transformation Actions .
[Pipelines] Some Pipeline texts were wider than their tooltips. This has been fixed.
[Actions] Fixed an error in the Field Transformation Action that displayed arguments when an operation was not available.
[Actions] Operations were not properly updated and caused issues in the Field Transformation Action. This has been fixed.
Released on 10.10.2024
These are the release notes for version v1.513.0 of the Onum platform.
[Listeners] When creating a Listener with deploymentType: cloud, exiting the configuration will show a confirmation message before deleting it and losing the changes.
[Pipelines] Once a button has been clicked, it is disabled to show that the request is being carried out.
[Pipeline] Once a button has been disabled when creating a draft version of a Pipeline, it is not reenabled.
[Parser] Adapt the Parser Actions list of options to light mode.
[Parser] Drop-down values in the Input and Parser fields show as disabled when they are not.
[Parser]
Released on 11.11.2024
These are the release notes for version v1.554.2 of the Onum platform.
[Pipelines / Listeners / Data sinks] The border of selected cards (Pipelines, Data sinks, and Listeners) is wider now to better highlight them.
[Actions] Operation field names were cut when dragging them in the Field Tranformation Action window.
[Alerts] Table rows showed incorrect heights on the Alerts view.
[UX] Issue when trying to collapse several groups in tables.
[Actions] Fixed a problem that made users lose their work when clicking outside an Action working area.
Released on 11.21.2025
These are the release notes for version v2.155.0 of the Onum platform.
The Amazon S3 Listener has been updated to v2.0.1! We've added a new JSON type where you can specify the path you want to retrieve and if you want to generate one event for each array element or the whole element.
Learn more in .
The Falcon NG-SIEM Data Sink has been updated to v3.0.0! We've removed the Port option from the configuration menu.
Learn more in .
Released on 05.12.2025
Released on 01.22.2025
These are the release notes for version v1.628.0 of the Onum platform.
[Actions] There's a new area called Actions under Your Vault, where users can check which Actions have updates pending. You will also see updated tags in your Pipelines, next to those Actions that have new updates. Learn more in .
[Actions] The parser version was not sent when switching to manual mode. This is fixed now.
[Actions] Error when using the in operator in the Group by Action. This is fixed now.
[API keys] Fixed issues with the icon and notification when deleting an API key.
[UX] Solved issues with the delete button in some areas.
[Pipelines/Listeners/Data sinks] Line charts in the Pipelines, Listeners, and Data sinks area show events per second (EPS) now, instead of total events as they did before.
[UI] Action tooltips appeared in dark when in light mode. This is fixed now.
[UI] Fixed problem with data visualization in cards.
[Pipelines] Issue with tooltip borders in Pipeline details solved.
[Pipelines] Preview and tooltip event info did not match. This is fixed now.
[Pipelines] Fixed minor issues with graph visualization in the Pipelines area.
[Listeners] Fixed message issues in the Listener creation process.
[Actions] Fixed problem with Parser output events, which did not show the last changes made manually.
[Data sinks] Fixed problem with metrics in Data sinks.
[Home] Table metrics did not change when choosing a different date in the picker. This has been solved.
[Pipelines] The Data sink tooltip remains visible in the side panel.
[Pipelines] General scroll issues fixed.
[Actions] Tabulation issues in Parser Action.
[Actions] Output section is empty or field name does not work properly when the expression contains aliases in Parser Action.
[Actions] LEEF version 2 auto parser is not detecting field delimiter in Parser Action.
[Actions] Fields in Parser preview not auto-adjusting to height.
[Actions] Field names tooltip in the Message Builder Action do not disappear as expected.
[Data sinks] Bulk option set to false doesn't save in the Splunk Data sink.
[Listeners] Filtering in the Listener list was not working properly.
[Administration] Fixed an issue where the metrics in the Usage area of the app displayed inconsistent data.
[General] Fixed an issue where metrics in the main areas of the app are cached when switching to a different tenant.
[UX] The close animation did not show in certain elements of the platform. This has been fixed.
[Actions] The expand feature was not working properly and has been fixed now.
[Data sinks] Fixed problem with config black pages in some Data sinks.
[Enrichment] The Delete button did not appear in the lookup cards of the Enrichment area. This has been fixed.
[Administration] The Forgot your password? button of the Email and password area was inactive and has been fixed.
[Actions] The Parser Action showed some errors in its dropdown menu.
[Actions] Fixed some issues when extracting JSON fields using the Parser Action.
[Actions] Fixed some issues when unselecting delimiters in the Parser Action.
[Listeners / Data sinks] Fixed some issues with breadcrumb names in Listeners and Data sinks.
This has been implemented in several places:
In the details pane
When creating/editing a Listener or Data Sink
In the details pane when accessing from within a Pipeline
[Tenant] Fixed UI issues that occur when the first character of a tenant name is a special character.
[Listeners / Data sinks] Fixed errors when creating a new Listener / Data sink using shortcuts.
[Pipelines] Some elements were not properly aligned in the Pipeline canvas left panel list. It is fixed now.
[Actions] Fixed issue with null values in the JSON Transformation Action.
[Actions] Fixed issue when removing an operation in the Field Transformation Action.
[Actions] Fixed problems with cursor location while typing in the Message Builder Action.
[Data sinks] The Message field was mandatory in some Data sink output configurations, and it should not be. This is fixed now.
[Data sinks] Fixed Proxy configuration layout issues in some Data sinks.
[Alerts] Fixed an issue that made a 404 error appear when refreshing the Alerts area.
The Slack Data sink has been updated to v1.0.0!
You can now send messages to multiple Slack channels at the same time. Use the new Slack channels parameter in the Pipeline configuration settings of the Data sink.
Learn more in .
The Field Transformation Action has been updated to v1.2.0!
You can now use the following operations to count the number of elements in a list of elements of different types:
Learn more about the Field Transformation Action in .
We've implemented some small updates to the areas that display the Cards/Table options. The default Cards visualization option appears first now. Also, we've fixed the scroll movement that occurred when switching between modes.
[Actions] We've resolved some issues in the Parser Action related to map-typed XPath fields in XML files.
The Office 365 Listener has been updated to v0.0.3! We've solved some issues related to error notifications and how the Listener handles them.
Learn more in .
The Azure Events Hub Listener has been updated to v0.0.2! The maximum number of receivers allowed is now limited to 1 per partition in your Event Hub.
Learn more in .
[General] We've homogenized the way we work with email validations in the platform.
[AI Assistant] Fixed an issue where users got an unexpected error when pressing backspace repeatedly to delete multiple actions.
[UX] Some metadata values were displayed with the wrong background color. This has been fixed.
Natural logarithm
LN(field)
Logarithm with given base
LOG(base, field)
Exponential function
EXP(field)
Constant π
PI()
Trigonometric functions (in radians)
SIN(field)
COS(field)
TAN(field)
Inverse trigonometric functions
ASIN(field)
ACOS(field)
ATAN(field)
Hyperbolic functions (in radians)
SINH(field)
COSH(field)
TANH(field)
Inverse hyperbolic functions
ASINH(field)
ACOSH(field)
ATANH(field)
Learn more about Transformation Actions .
[Pipelines] When changing the type of column chart in Pipelines to Not stacked, some Data sinks labels changed. This is fixed now.
[Data sinks] New Include in metrics option in the Data sink creation form. This allows users to decide whether to include or not the Data sink metrics in the Home page analytics.
[Data sinks] Data sinks not included in metrics show an info icon with this information in the Data sinks area. This is also indicated in each Data sink detail view.
[Home page] New info icon in the Donut chart and the metrics of the Home page to indicate that some Data sinks are excluded from those metrics. Learn more .
[Actions] Fixed error with delimiters in the Message Builder Action.
[Actions] The output field in the Field Transformation Action allowed special characters, but it should not. This has been fixed.
[Actions] Fixed issues with reparsing in the Parser Action.
Fixed some issues with the time range selector.
Fixed some color issues in the Tenant selector menu.
We've added a new section in the left panel: the Command Palette!
Check the most recent creations and modifications made to your Tenant. You can select the type of resource (Listener, Pipeline, Data sink, Enrichment, etc) to open, or use the search bar to filter by type, name, or tags.
Learn more in .
We've added a new SNMP Trapd Listener!
The SNMP Trapd Listener is a powerful and intelligent Listener that receives SNMP traps from network devices, parses them using embedded MIB (Management Information Base) files, and converts them into structured Onum events.
Learn more in .
[Actions] Fixed an error in the Parser Action that did not allow users to see and update the PCL when no data was flowing through the Pipeline.
[Actions] The View details modal persisted after closing or refreshing with the Action details panel. This is fixed now.
[Pipelines] Fixed several issues with the label tooltip within a pipeline.
[Actions] Fixed error in the Conditional Action where dependent conditional fields are not disabled depending on the option selected.
[AI Assistant] No longer calls the debugger when the Pipeline has errors.
[Enrichment] Lookups now have a file size limit of 3.91 GB.
[Enrichment] Fixed error that caused a crash when an XLSX file was uploaded to create a lookup.
[Pipelines] Fixed error with bulk operations menu in the Pipelines area.
[Actions] Fixed a bug with null list values in the Group By Action.
[Actions] Fixed an issue with default values in Actions.
[Actions] Fixed an issue with first-level aliases in the Parser Action.
[Data sinks] Tags did not update properly in the Data sinks area. This is fixed now.
[UX] Fixed border style that appears when you hover over buttons.
[UX] Light mode showed some elements partially hidden. This has been fixed.
[Listeners / Data sinks] You can now filter by author in the Listeners and Data sinks areas.
[Data sinks] Some fields did not show properly due to an error with the horizontal scroll. This is fixed now.
[Data sinks] When an error was triggered during the save action, some Data sinks config was not properly stored or reset. This is fixed now.
[Actions] Fixed issue that misinterpreted the property names in some Actions.
The Syslog Listener has been updated to v1.1.1! We've fixed some issues regarding serialization in UPD messages.
Learn more in .
The closing animation for app notifications has been updated to a simple fade-out, replacing the previous animation where notifications would shift slightly upward before disappearing.
[Listeners / Data sinks / Pipelines] issue where events in/out were displayed in bytes instead of EPS in the Listeners, Data sinks, and Pipelines areas.
[Pipelines] Fixed an issue that displayed a trend for the very first value in the Pipelines graph, which did not make sense.
[Pipelines] Fixed an issue where the border of a duplicated Pipeline card disappeared.
[Actions] Fixed an issue that occurred when editing an Action name that reached the maximum length. With the default window size, the length broke the layout.
[Actions] Fixed an issue in the Parser Action where the configuration panel added .0 to all float values when they did not have any decimals.
[Actions] Fixed an issue in the Field Transformation Action where the output preview did not work in certain operations that receive list-type event fields.
[Actions] Fixed an issue in the Message Builder Action where, in Free Mode with delimiters enabled, manually typing values did not trigger the display of the delimiters.
[UX] Fixed an issue where menu sections with no content were displayed in the left panel.
[UX] Fixed an issue where URLs in the changelog menus did not open in a separate browser tab.
[Actions] The supports new grammar.
New page shows when Onum is under maintenance.
[Listeners] Deleting a label after creating it when editing a listener returns an Oops error.
[Listeners] Secrets failing on listeners when out of sync.
[Listeners] Labels don't need to have a hover state.
[Pipelines] Incorrect edit listener route on pipeline view.
[Listeners] If your Listener is deployed in the Cloud, you will see an extra step for the Network properties.
Copy the ID of Listeners, Sinks, or Pipelines from the home view.
Date picker creating non-customizable values & Yesterday option changing to Custom.
[Pipelines] Pipelines appear incorrectly as Untitled in canvas view.
[Pipelines] Pipeline versions running in different clusters.
Flickering Label drop-down.
Each cluster in the list has a new switch button next to it to activate/deactivate them.
New filter at the top of the window to search for specific clusters (only appears when there are more than 10 clusters in the list).
[Actions] Behavior issue with Field Transformation Action operations fixed.
[Pipelines] Solved several Pipeline usability problems.
[Pipelines] Incorrect behavior in the Pipelines deletion form solved.
[Pipelines] The Data sink menu in Pipelines was inconsistent with the rest of the areas in the app.
[Pipelines] Users were able to perform start/stop bulk actions with no cluster selected.
[User Management] Issue when performing bulk actions in the Users area has been fixed.
[AI Assistant] Actions are canceled if the user closes the assistant. Fixed behavior.
[Data sinks] Some Data sinks disappeared from the list when creating a new one.
[Listeners] The top line in the Listeners trees in the selection menu was not displayed properly.
[Listeners / Data sinks] Updated Metadata section for Listeners and Data sinks.
Tooltip transformation title background color.
Pipelines filter by status is just showing "draft" status.
Duplicated fields on action field selector.
MessageBuilder: Not possible to delete non-alphanumeric charactes.
Unable to delete a Listener.
A stopped tag will show the same in the cards and details page.
Action Metadata Fails to Create/Update on Save.
General visual improvements.
Released on 08.22.2025
These are the release notes for version v2.59.1 of the Onum platform.
You can now receive and send data to Amazon Kinesis Data Stream using the new Amazon Kinesis Data Stream Listener and Data sink!
Amazon Kinesis Data Streams is a fully managed, serverless streaming data service that allows you to ingest, store, and process real-time data streams. You can receive data in Onum, transform it as required, and send it back.
Check the Listener article and read more about the Data sink .
The HTTP Pull Listener has been updated to v0.0.2! We've added new throttle and retry parameters for the collection and enumeration phases, as well as a new HMAC authentication option.
Learn more about the HTTP Pull Listener in .
The Field Transformation Action has been updated to v1.4.0! You can now use the following operations:
Learn more about the Field Transformation Action in .
The ServiceNow Data sink has been updated to v1.0.0! The configuration form of the Data sink has been modified for a better user experience.
Learn more about the ServiceNow Data sink .
[Actions] Fixed an error that allowed saving the Field Transformation Action configuration with some required parameters empty.
Released on 11.20.2025
These are the release notes for version v2.153.0 of the Onum platform.
You can now send data to your Falcon LogScale instances using our new Falcon LogScale Data Sink! It is an efficient and flexible way to ingest data into Falcon LogScale without the need for intermediary files or complex configurations. Events can be sent in either raw or JSON format.
Learn more about the Falcon LogScale Data Sink in .
The HTTP Data Sink has been updated to v3.0.0! We've added support for dynamic list of headers. Learn more .
[Home] The Last 24 Hours button incorrectly displayed the Yesterday label. This has been fixed.
Released on 11.05.2024
These are the release notes for version v1.548.0 of the Onum platform.
[Pipelines] New Updated by section in Pipelines detail view. Learn more .
[Actions] New options in the .
[Actions] Subfield names in Parser timestamps can now be changed.
[Actions] The Utils category displayed the wrong icon in the left menu.
[Actions] Double pipes cannot be used as a field delimiter in the Message Builder.
[Pipelines] Some Listeners did not appear when you dragged them to a Pipeline.
Released on 10.25.2024
These are the release notes for version v1.535.0 of the Onum platform.
[Actions] The Power operation in the has changed from ^ to **.
[Listeners] Show a loading icon when a Cloud Listener is still creating.
[Listeners] Cards show a creation notification when they are created in the Cloud.
[Pipelines] New tabs to display configured/not configured Data sinks.
[Pipelines] Listeners traceability improved:
Listener names are now visible in the Pipeline view when you hover over a label.
The Listener name appears in the Listener detail view.
Users can now filter by Listener name using the search box.
[Listeners] Users couldn't filter fields in the Syslog Data sink.
[Secrets] The expiration date drop-down shouldn't appear when the expiration date is switched off.
[Listeners] Clicking outside the Confirm changes popup doesn't register properly as a cancel action.
[Actions] Adding underscores in the Math Expression action fields was not allowed.
Released on 05.16.2025
These are the release notes for version v1.781.0 of the Onum platform.
[Pipelines] Users can now delete a Pipeline directly from the edit view by clicking the Remove option in the ellipsis menu. Learn more .
[Two-factor authentication] New option to recover your two-factor credentials and receive a link via email. Learn more .
[Interface] Wrong spacing after center delete icon fixed.
[Pipelines] Fixed error 300 where a Pipeline loses the Listener ID property.
[Roles] User roles were not changing after being updated. This is fixed now.
[Data sinks] Ability to handle "deploymentType" 401 error for PagerDuty sink.
Released on 04.04.2025
These are the release notes for version v1.716.0 of the Onum platform.
[Enrichment] You can now download your lookups as CSV files in the Enrichment area. Learn more in .
Learn more about lookups .
[Listeners / Data sinks] The Listener / Data sink type is now displayed in the breadcrumbs upon creation or edition.
[UI] Error notifications are now displayed as a stacked group.
[Pipelines] We fixed a problem that caused a crash when you removed digits from the calendar filter in the Pipelines area.
[Actions] Fixed some issues with numeric input values in Actions.
[Labels] Filters were not visible for labels created under the Unparsed category. This has been fixed.
[Enrichment]
Released on 09.10.2025
These are the release notes for version v2.75.0 of the Onum platform.
You can now see if a Data sink in your tenant is used in a Pipeline or not. Access the Data sink details, and you'll see a new section at the bottom of the pane, including all the Pipelines where the Data sink is used, along with its version.
We've added a new Data sink! You can now send your events to Falcon Next-Gen SIEM without the need for intermediary files or complex configurations.
Learn more about the Falcon NG-SIEM Data sink in .
The Message Builder Action has been updated to v1.1.0! Users can now select JSON types in literal values (string, number, or boolean).
Learn more about the Message Builder Action in .
[Actions] Fixed an issue that caused a console error when closing an Actions detail window with the escape shortcut.
Released on 11.26.2024
These are the release notes for version v1.573.1 of the Onum platform.
[Global settings] You can now remove secrets in the Secrets management area of your global settings. Learn more .
[Global settings] The search bar in the Users and Secrets management areas has been improved to be always visible and fully displayed.
[Actions] The order of the Actions in the Pipeline view menu has been updated.
[Actions] The Math expression action fields have been updated to make them consistent with the other Actions.
[Actions] The field placeholders of the Group by Action have been updated.
[Pipelines] Users can now access a specific Pipeline version by accessing its URL.
[Pipelines] When users delete a resource that is used in a Pipeline, a window appears displaying all the Pipeline versions. These are now ordered by status (Stopped, Draft, and Running).
[Pipelines] The message that appears after editing a Pipeline has been improved to explain better that the current draft will be overwritten.
[Data sinks] New parameter Test Mode added to the Syslog Sink.
[Actions] Fields in the Math expression Action displayed some notation errors in their fields.
[Global settings] The search bar in the Secrets management area was case-sensitive. This is fixed now.
[Data sinks] Error in generic Data sink fields fixed.
[Data sinks]
Released 2024.11.09
These are the release notes for version v1.485.2 of the Onum platform.
[Actions] List and hide discontinued Actions.
[Listeners] Network configuration step in the creation process for Listeners deployed in the Cloud.
[Listeners] Sample and show real-time logs when editing a Listener.
[Lookups] Lookup enrichment versions.
Vulnerability fixes.
Ability to upload lookups.
Pipeline version is published but does not start in the selected cluster(s).
General visual improvements.
Released on 10.30.2024
[AI Assistant] The AI Assistant in the Message Builder Action is now disabled if the linked Actions are not properly configured.
[Pipelines] The duplicate Pipeline feature was not working properly from the Table view. This has been fixed.
[Actions] When you paste a log containing a large number into the Parser Action, it now returns a response with that number rounded up.
[Actions] Fixed several behavior issues in some Actions fields.
[Actions] Fixed an issue in the Field Transformation Action that did not allow choosing a second operation after selecting Extract IP.
[Actions] Opening an Action with a field using a default value when the Pipeline is being saved caused an error. This has been fixed.
[Actions] Some Actions event field default value added extra double quotes. This has been fixed.
[Listeners] Fixed configuration error with Kafka Listener.
[Listeners] Some delete buttons were displayed over the text in some Listener configuration menus. This has been fixed.
[Data Sinks] The label name did not appear in the Output Configuration event input field of the Google Cloud Storage Data Sink. This is fixed now.
[Labels] Filters with names in camel case were converted to lowercase when sent to the backend. This resulted in incorrect configurations for label filters, as the original camel case format is not preserved. This has been fixed.
[Activity Log] The Entity and Operation filters showed some empty values. This is fixed now.
[AI Assistant] Fixed several performance and interface issues in the Action Assistant.
[Home area] Fixed issue with the chart buttons.
[UI] Fixed issue with the x-axis min and max time in charts.
[Pipelines] Pipelines displayed wrong versions when updated.
[Pipelines] Some Pipelines used to crash when switching between versions.
[Listeners] The secrets endpoint was incorrectly called in the Listener detail view.
[Data sinks] Field names overlapped with the terms users entered to search for.
[Lookups] Fixed message when no fields are loaded
[Interface] Fixed misaligned user's chevron in the roles view.
[Parser] Fixed crash when the incoming JSON is malformed.
[AI Assistant] Fixed an issue that caused an unexpected error when deleting Pipelines defined with the AI Assistant.
[UI] The browser tab logo was not displayed correctly while the web is loading.
The Field Transformation Action has been updated to v1.1.1!
You can now use the following operations:
Float to String - This operation transforms a float into a string using a Go format string. .
From Base32 - Use this operation to decode data that has been encoded in Base32 format back into its original form. .
To Base32 - This operation is used to encode data into a Base32 string. Supports custom alphabets or standards (RFC4648 or Hex Extended). .
There's a new info icon in the Data volume indicator of the Pipelines area to warn users that the displayed volume is the total number of events from all configured Listeners in the tenant, whether they are used in a Pipeline or not.
The Amazon SQS Data sink has been updated to v1.0.0!
The configuration form has been updated with new sections to make the configuration more intuitive.
Also, the Output configuration form has been redesigned for a better user experience.
Learn more in .
The Google Cloud Storage Listener has been updated to v1.0.1!
We've improved the Listener internal configuration, and files are now read as a stream into a buffer instead of being loaded into memory. Also, we've added support for compression types (gzip and bzip2).
Learn more in .
[Listeners] Fixed an issue where the Syslog Listener returned an error when receiving data with deeply nested labels.
[Data sinks] Fixed an issue in some Data sinks where the fields and their titles were displayed too close.
[User settings] Fixed an issue where the user permissions were not displayed properly.
[UX] Fixed an issue where the Last updated field displayed the Creation date value instead of the correct last update date.
[UX] Fixed an issue in Listeners and Data sinks where the horizontal scroll bar did not show when titles were too long.
Admin users can now access a new section in the settings area: Usage
In this new section, Admin users can easily track their ingestion and egress levels over a specific period of time. You can also monitor the ingestion and egress per specific Listeners and Data sinks in the tenant.
Learn more about this in .
The Splunk HEC Data sink has been updated to v1.0.1!
The Data sink has been updated to include new limits and default values in event amount and event size for bulk configuration.
Learn more in .
The Amazon SQS Data sink has been updated to improve some visual aspects of the configuration menu:
Animation and behavior of the Bulk configuration toggle improved.
Fields and headers in the Bulk configuration section have been properly aligned.
The space between elements and padding has been updated.
Check it .
[Actions] Fixed an issue in the Message Builder Action where field names do not appear properly if they are too long.
[Actions] Fixed an issue where Actions could not be updated if the Action configuration was open in a different tab.
[Actions] Fixed an issue where, when trying to filter the name of a field in an operation, part of the text used to search remains in the operation space. The issue was produced when using an underscore to filter.
[Data sinks] Fixed an issue where Test mode did not persist after creation in the QRadar and Devo Data sinks.
[Listeners] Download certificate option to Listener details
[Listeners] Network view for cloud listener creation
New bulk actions design
[Pipelines] Debugger action tabs turn invisible in light mode.
[Pipelines] Debugger search fields keeps original selection.
[Pipelines] In light mode you can only see the flowing traffic of the first action in debug mode.
[Actions] Enums unsupported in Field transformation.
[Actions] Operation Select field on Feld Transformation is flickering.
[Settings] User Management table shows overlapping characters over Name.
[Pipelines] Users can now select where to publish their Pipelines when publishing in bulk from the Pipelines area. A new window appears to select the required clusters. Learn more .
[Pipelines] The Pipeline last update date is now displayed next to the version title. Also, the information in the details is now displayed vertically. Learn more .
[Pipelines] The Pipelines detail view includes new 3 tabs to group the different Pipeline statuses: Running, Draft, and Stopped. If there's not any Pipeline running or stopped, those tabs will not appear. Learn more .
[Pipelines] Collapsible sections for Pipeline versions have been updated. When there's a single version, you cannot collapse the information. Learn more .
[Pipelines] Some Pipelines appeared duplicated in the table view. This is now fixed.
[Pipelines] There was a visual malfunction in the details view of some Pipelines.
[Pipelines] Some field names used to appear partially cut.
The loading icon displayed strange spinning behavior.
Unexpected behavior when resizing tenant user columns.
Issue with column resizing is now fixed.
Degrees/radians conversion
DEGREES(field)
RADIANS(field)
Released on 03.04.2025
These are the release notes for version v1.673.1 of the Onum platform.
[Listeners] Users can now define Listeners in Cloud deployments. Learn more about Cloud Listeners in .
[Actions] The is now available in the Field Transformation Action.
[Actions] Visual improvements in the Actions configuration menus.
[Pipelines] Fixed issue with the Pipeline Net Saved donut chart.
[Pipelines] Pipeline canvas view shows metrics in EPS instead of bytes. This has been fixed.
[Pipelines] Fixed visual issues with the Hide metrics button.
[Listeners / Data sinks]
[Data sinks] Fixed some errors with Data sinks icons.
[Enrichement] Fixed issues when loading the Enrichement area.
[Enrichment] Some lookups appeared "in use" even when they were not. This is fixed now.
[Enrichment] Fixed issues with the Set as key column button, which did not remain visible and had text overlay.
[Enrichement] Fixed issues with the illustration that appears when no lookups are defined.
[UI] Fixed some visual issues in the light mode theme.
The Redis Action has been updated to v1.1.0!
We've added a couple of new commands to the output configuration of the Redis Action:
HSET - This command overwrites the values of specified fields that exist in the hash. If the key doesn't exist, a new key holding a hash is created.
HGET - This command returns the value associated with the field in the hash stored at key.
Learn more in .
