Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Released on 11.25.2025
These are the release notes for version v2.162.0 of Falcon Onum.
[General] Fixed an error that made hidden and secret fields visible in request payloads.
[Actions] Fixed an error in the Parser Action that did not allow users to remove the first delimiter in Manual mode.
[Actions] In the Field Transformation Action, Pipeline fields were not shown when using the inEventField argument. This has been fixed.
[Data Sinks] We've fixed some minor design errors in the Splunk HEC Data Sink.
[UI] Fixed some visual errors with charts visualization in the main areas of the platform when choosing the Stacked view.
Released on 07.30.2025
These are the release notes for version v2.38.0 of the Onum platform.
The HTTP Data sink has been updated to v2.1.0!
The Data sink has been updated to support gzip data compression. Also, some parameter names have been renamed to use more user-friendly values.
Learn more in .
[Actions] Fixed an issue where an Action changelog appeared after updating a different Action in a Pipeline.
[UX] Some Pipeline stat names have been updated.
Released on 12.10.2025
These are the release notes for version v2.169.0 of Falcon Onum.
We've added a new Listener type to our catalog: the Azure Blob Storage Listener.
The Azure Blob Storage Listener connects to your Azure Storage account and detects when new files are uploaded. It works by monitoring an Azure Storage Queue that receives notifications from Azure Event Grid whenever a blob is created. The Listener then retrieves the file content and makes it available for processing in your workflows.
Released on 10.10.2025
These are the release notes for version v2.99.0 of the Onum platform.
The Falcon NG-SIEM Data sink has been updated to v2.0.0! We've made some minor updates related to user experience.
The Azure Event Hubs Listener has been updated to v1.0.1! We've added execution control by environment variables.
[UI] Metric series (EPS) showed zero when values were very low. This has been fixed.
The Field Transformation Action has been updated to v1.6.0! We've added the operation, which allows you to convert JSON files into Protobuf (Protocol Buffers) format.
Learn more about the Field Transformation Action in .
The Field Generator Action has been updated to v1.1.0! We've added a new option to generate a field that includes UUID v4 identifiers.
Learn more about this Action in .
The HTTP Data Sink has been updated to v3.1.0! We've added a new option for Stacked JSON objects in the bulk configuration settings. Using this option, each record will appear as series of individual JSON objects concatenated together, usually separated by a newline character (\n)
Read more in .
The Apache Kafka Listener has been updated to v2.1.1! We've made some improvements in the error managament system.
Read more about the Apache Kafka Listener in .
The Amazon Kinesis Data Stream Listener has been updated to v0.0.2! We've added a new output error to handle errors.
Learn more about this Listener in .
[UI] Fixed an error that made invisible and secret fields be shown in auto-generated forms.
[UI] The tag filter option was incorrectly displayed and enabled for some resources that had no tags applied. This has been fixed.
[Actions] Fixed an error that did not allow users to remove the first delimiter on manual mode in the Parser Action.
[Actions] Pipeline fields were not shown in the Field Transformation Action. This has been fixed.
[Actions] Fixed some design errors in the Splunk HEC Data Sink.
We've added new Data sinks for Apache Kafka and MongoDB!
You can now send data messages to a Kafka topic and your Mongo databases, using information from events to construct messages.
Read more about the Apache Kafka Data sink in , and check for more info about the MongoDB Data sink.
The Twilio Data sink has been updated to v1.0.0! The configuration form of the Data sink has been modified for a better user experience.
Learn more in .
The Field Transformation Action has been updated to v1.1.2! The filter invert parameter is now marked as mandatory.
Learn more in .
We have improved search functionality in all home pages (Listeners, Pipelines, Sinks) to eliminate lag time.
[Pipelines] Fixed layout changes when viewing the info of the Data Volume metric.
[User Interface] Improved the appearance of the Net Saved info pop-up.
[Alerts] Fixed visual impairments when using the group by function.
The Office 365 Listener has been updated to v0.0.3! We've solved some issues related to error notifications and how the Listener handles them.
Learn more in .
The Azure Events Hub Listener has been updated to v0.0.2! The maximum number of receivers allowed is now limited to 1 per partition in your Event Hub.
Learn more in .
[General] We've homogenized the way we work with email validations in the platform.
[AI Assistant] Fixed an issue where users got an unexpected error when pressing backspace repeatedly to delete multiple actions.
[UX] Some metadata values were displayed with the wrong background color. This has been fixed.
Released on 08.06.2025
These are the release notes for version v2.45.0 of the Onum platform.
You can now easily locate your required Listener/Data sink type in their corresponding screens. Use the new search bar at the top of the window or sort the list using the options at the top-right menu.
The TCP Data sink has been updated to v1.0.0! You can now compress your data using gzip if you need to reduce the size of your files.
Learn more in .
[Actions] Fixed an error where an Action eligible to be updated appeared repeated in the upgrade screen when there were 2 or more Actions of the same type ready to be updated.
[Actions] We've fixed the Accumulator Action to show at least one input event and set it as required.
[Home] Fixed an error where the info icon in the Home area stats displayed wrong info in some cases.
Released on 11.21.2025
These are the release notes for version v2.155.0 of of Falcon Onum.
The Amazon S3 Listener has been updated to v2.0.1! We've added a new JSON type where you can specify the path you want to retrieve and if you want to generate one event for each array element or the whole element.
Learn more in .
The Falcon NG-SIEM Data Sink has been updated to v3.0.0! We've removed the Port option from the configuration menu.
Learn more in .
[Actions] Fixed an issue where the select menu showed raw literals instead of user-friendly values in the Conditional Action.
The Parser Action has been updated to v1.1.0!
You can now use the optional operator in the PCL syntax to include conditions in your parsed data. Use it to indicate that a group in your syntax could be present or not in your parsed data.
Learn more in .
The Field Generator Action has been updated to v1.0.0!
We've added some new date operations to the Action:
This Year
This Month
This Week
Also, there are new options in the date operations to set the required timezone and format of the resulting dates.
Learn more in .
The HTTP Data sink has been updated to v2.2.0!
We've added a new retry logic in case of errors when sending data. Set the parameters in the Retry configuration area of the Pipeline configuration of the Data sink to configure the required retry logic.
Learn more in .
[Pipelines] Fixed an error that rerendered the original coordinates of a Pipeline when dragging some Actions.
[Actions] Fixed an error where the field names in the Conditional Action appeared shortened.
[Actions] Fixed an error in the Field Transformation Action that crashed the app when deleting an operation with more than one chain.
[UX] Some metrics in the app were displayed using binary units instead of common units. This has been fixed.
[UX] Fixed wrong image in the app loading screen.
You can now see if a Data sink in your tenant is used in a Pipeline or not. Access the Data sink details, and you'll see a new section at the bottom of the pane, including all the Pipelines where the Data sink is used, along with its version.
We've added a new Data sink! You can now send your events to Falcon Next-Gen SIEM without the need for intermediary files or complex configurations.
Learn more about the Falcon NG-SIEM Data sink in .
The Message Builder Action has been updated to v1.1.0! Users can now select JSON types in literal values (string, number, or boolean).
Learn more about the Message Builder Action in .
[Actions] Fixed an issue that caused a console error when closing an Actions detail window with the escape shortcut.
Released on 10.14.2025
These are the release notes for version v2.101.0 of the Onum platform.
We have included a checkbox option for boolean operations instead of a drop-down menu.
The table header style has been adapted to better fit the Onum UI.
[Tenant] Several issues with date/time range selector have been fixed.
Released on 08.01.2025
These are the release notes for version v2.41.0 of the Onum platform.
The Slack Data sink has been updated to v1.0.0!
You can now send messages to multiple Slack channels at the same time. Use the new Slack channels parameter in the Pipeline configuration settings of the Data sink.
Learn more in .
The Field Transformation Action has been updated to v1.2.0!
You can now use the following operations to count the number of elements in a list of elements of different types:
Learn more about the Field Transformation Action in .
We've implemented some small updates to the areas that display the Cards/Table options. The default Cards visualization option appears first now. Also, we've fixed the scroll movement that occurred when switching between modes.
[Actions] We've resolved some issues in the Parser Action related to map-typed XPath fields in XML files.
Released on 07.09.2025
These are the release notes for version v2.0.1 of the Onum platform.
The PagerDuty Data sink has been updated to v1.0.0!
The configuration form of the Data sink has been modified. The Proxy configuration is now under an Advanced configuration section. Also, the output configuration of the Data sink in a Pipeline has been improved for a better user experience.
Learn more in .
The Google Cloud Storage Data sink has been updated to v0.0.3!
We've included a new option in the Compression parameter of the configuration form. You can now compress your events in gzip format.
Learn more in .
Released on 11.20.2025
These are the release notes for version v2.153.0 of Falcon Onum.
You can now send data to your Falcon LogScale instances using our new Falcon LogScale Data Sink! It is an efficient and flexible way to ingest data into Falcon LogScale without the need for intermediary files or complex configurations. Events can be sent in either raw or JSON format.
Learn more about the Falcon LogScale Data Sink in .
The HTTP Data Sink has been updated to v3.0.0! We've added support for dynamic list of headers. Learn more .
[Home] The Last 24 Hours button incorrectly displayed the Yesterday label. This has been fixed.
Released on 11.05.2025
These are the release notes for version v2.138.0 of the Onum platform.
When reviewing and debugging the pipeline using the Test Pipeline functionality, you can now highlight specified field names or search in this view for a specified field name for each port output.
[Home] The actions page was throwing an unknown error when updating actions.
[Users] Oops error occurs when attempting to invite users with the filter enabled
Released on 11.17.2025
These are the release notes for version v2.150.0 of the Onum platform.
[Charts] Fixed an issue with armcharts that were wrongly distributing on axis Y.
[Charts] To maximize the use of available space, we have eliminated any unused margins at the beginning and end of the grouping to utilize the full width effectively.
[Labels] Both procIdRegex and hostnameRegex are now displayed correctly on a single line, and the regex value uses an ellipsis if necessary.
We have added the ability to enter a default value if the field returns a null result.
While the conditional action sends to the port of the first matching condition, we have added an "All conditions match" mode that sends the event to every matching condition's port.
[Charts] Fixed an error handling zoom on charts.
[Authentication] Fixed an error that did not log a user out after inactivity.
[Authentication] Fixed minor errors when renewing tokens.
[Tenant] Fixed session expiration causing the user to switch from custom tenant to default tenant on signing back in.
[UI] Style changes to the interface to enable smoother scrolling.
Our platform now supports authentication via SAML!
This new feature allows users to securely log in using their existing identity providers, such as Google, Microsoft, or any SAML-compliant service. By integrating SAML, we’re streamlining the login process, enhancing security, and making access management more flexible.
Learn more in .
The Amazon S3 Data sink has been updated to v1.0.1! We've fixed some issues when uploading Parquet files.
Learn more about the Amazon S3 Data sink in .
The Syslog Listener has been updated to v1.1.2! We've solved some issues with malformed Syslog messages.
Learn more about the Syslog Listener in .
[Data sinks] Fixed an error that did not allow users to create new Data sinks.
This has been implemented in several places:
In the details pane
When creating/editing a Listener or Data Sink
In the details pane when accessing from within a Pipeline
[Tenant] Fixed UI issues that occur when the first character of a tenant name is a special character.
You can now access your Falcon NG-SIEM instance and listen for its data in Onum using the as a collector.
We have added descriptions for various fields and tooltips throughout the UI, including boolean fields.
[Pipelines] Removed an unnecessary tooltip from the Pipeline focus panel.
[UI] Corrected extra spaces in drop-down footers.
Released on 10.03.2025
These are the release notes for version v2.89.0 of the Onum platform.
We’ve redesigned the Single Sign-On (SSO) login page to allow you to enter your Tenant credentials when you log in.
We've added a new Data sink! You can now send your events to Redis without the need for intermediary files or complex configurations.
Learn more about the Redis Data sink in .
The Redis Action has been updated to v2.0.0! Users can now connect to the Redis server using the new and improved interface.
Learn more about the Redis Action in .
The Mail sink has been updated to v1.0.0.
The Azure Event Hubs Action has been updated to v1.0.0! This includes many more fields to configure your listener, such as Checkpointing and processing options, batch settings, backoff processing, and more!
[Debugger] Fixed an issue that caused users to be unable to remove field-based filters in the Debugger once selected.
[Listeners] Changed the oops page when trying to create a Listener.
[Actions] Realigned the output ports in the Conditional Action.
[Actions]
Released on 08.14.2025
These are the release notes for version v2.56.0 of the Onum platform.
The Field Transformation Action has been updated to v1.3.0! You can now use the following operations:
Learn more about the Field Transformation Action in .
[Listeners / Data sinks / Pipelines] Fixed an error in the Table view of the Pipelines, Listeners, and Data sinks areas that did not show the Delete option in some cases.
[Pipelines] Fixed an error that displayed the Pipelines status dropdown menu empty.
[Administration] Roles are now displayed in order (from highest to lowest rank), and the dropdown menu has been fixed.
Released on 07.18.2025
These are the release notes for version v2.27.1 of the Onum platform.
The creation date and last update time of Listeners, Data sinks, and Pipelines are now displayed in a user-friendly format, showing the date and time together. Previously, the time was only available through a tooltip.
The Message Builder has been updated to allow users to set a default value in case the mapped field/variable is null in JSON objects. It must either be a fixed/constant value or a null value.
Read more about the Message Builder in .
[Home] Fixed an issue where the Net saved in the Home area showed some discrepancies.
[Actions] Fixed an issue in the JSON Transformation Action where the Save button did not work with empty data in the configuration form.
Released on 08.22.2025
These are the release notes for version v2.59.1 of the Onum platform.
You can now receive and send data to Amazon Kinesis Data Stream using the new Amazon Kinesis Data Stream Listener and Data sink!
Amazon Kinesis Data Streams is a fully managed, serverless streaming data service that allows you to ingest, store, and process real-time data streams. You can receive data in Onum, transform it as required, and send it back.
Check the Listener article and read more about the Data sink .
The HTTP Pull Listener has been updated to v0.0.2! We've added new throttle and retry parameters for the collection and enumeration phases, as well as a new HMAC authentication option.
Learn more about the HTTP Pull Listener in .
The Field Transformation Action has been updated to v1.4.0! You can now use the following operations:
Learn more about the Field Transformation Action in .
The ServiceNow Data sink has been updated to v1.0.0! The configuration form of the Data sink has been modified for a better user experience.
Learn more about the ServiceNow Data sink .
[Actions] Fixed an error that allowed saving the Field Transformation Action configuration with some required parameters empty.
Released on 07.16.2025
These are the release notes for version v2.18.0 of the Onum platform.
Our platform now supports authentication via OpenID Connect!
This new feature allows users to securely log in using their existing identity providers, such as Google, Microsoft, or any OpenID-compliant service. By integrating OpenID, we’re streamlining the login process, enhancing security, and making access management more flexible.
Learn more in .
Users can now double-click the required Listener / Data sink type in the corresponding menu to access its configuration directly, making the process more intuitive and straightforward.
The Action is now deprecated and will no longer receive support.
From now on, users can use the Action as a replacement, which will include the Flat operation and all the available JSON operations you can perform in your Pipelines.
[Listeners] Fixed an issue where the Tick Listener configuration appeared in the wrong place.
[Listeners / Data sinks] Fixed an issue where the New listener / New data sink button disappeared.
[Actions] Fixed an issue in the Field Transformation Action where values are stored incorrectly in collapsed mode.
Released on 09.08.2025
These are the release notes for version v2.69.0 of the Onum platform.
We've added a new section in the left panel: the Command Palette!
Check the most recent creations and modifications made to your Tenant. You can select the type of resource (Listener, Pipeline, Data sink, Enrichment, etc) to open, or use the search bar to filter by type, name, or tags.
Learn more in .
We've added a new SNMP Trapd Listener!
The SNMP Trapd Listener is a powerful and intelligent Listener that receives SNMP traps from network devices, parses them using embedded MIB (Management Information Base) files, and converts them into structured Onum events.
Learn more in .
[Actions] Fixed an error in the Parser Action that did not allow users to see and update the PCL when no data was flowing through the Pipeline.
[Actions] The View details modal persisted after closing or refreshing with the Action details panel. This is fixed now.
[Administration] Fixed an issue where the metrics in the Usage area of the app displayed inconsistent data.
[General] Fixed an issue where metrics in the main areas of the app are cached when switching to a different tenant.
[UX] The close animation did not show in certain elements of the platform. This has been fixed.
The Field Transformation Action has been updated to v1.5.0!
We've added a new operation: . You can use it to transform your input strings representing bytes encoded in EBCDIC 037 to a string in the selected output format.
Besides, the following issues have been solved:
Fixed issue with operation returning numbers in scientific notation.
Changed Format parameter to a dropdown list.
Learn more about the Field Transformation Action in .
The Syslog Data sink has been updated to v3.0.0! We've fixed some minor issues to improve the user experience.
Learn more in .
[Pipelines] Fixed an issue that showed some icons in the Pipelines area wrongly.
[Pipelines] Fixed an issue where no error message was displayed when adding a tag to a Pipeline with less than 2 characters.
[AI Assistant] The AI Assistant was not aligned with the footer properly in the expanded view. This is fixed now.
Released on 10.23.2025
These are the release notes for version v2.113.0 of the Onum platform.
You can now collect your database data using the The Relational Databases Listener!
The Relational Databases Listener allows you to read data from a database using the MySQL, Oracle, Postgres, SQL Server and SQLite database management systems.
Check the Listener article .
The Falcon NG-SIEM Data sink has been updated to v2.0.1! Check all the new updates in the .
The Apache Kafka Listener has been updated to v2.1.0! We've fixed some minor issues to improve the user experience.
[UI] Fixed and issue with sorting in charts.
[UI] Fixed an error that showed inactivity messages in unexpected cases.
[UI] Fixed some minor errors when submitting new users.
[UI] Fixed an error that did not log users out when inactive.
[Pipelines] Fixed and issue with publish confirmation messages in Pipelines.
[Actions] Fixed some errors with JSON output format in the Message Builder Action.
[Actions] In some cases, nodes did not appear properly in the Message Builder Action. This has been fixed.
[Actions] Fixed some issues with underscores in the Message Builder Action.
Released on 11.07.2025
These are the release notes for version v2.144.0 of the Onum platform.
The Azure Event Hubs Listener has been updated to v2.0.0!
We've added a new set of parameters to decide where to begin reading the event stream.
Learn more about the Azure Event Hubs Listener in .
The Slack Data Sink has been updated to v2.0.0!
You can now connect to your Slack channel using your Slack API token, instead of adding the webhook as in previous versions. We recommend to use this option from now on.
Learn more about the Slack Data Sink in .
[Lookups] Lookups could not be updated when the CSV did not have headers. This has been fixed.
[General] Fixed an error that occurred when an Admin invites new user to a Tenant.
