Release v0.8.4

[jshlbrd]

Substation v0.8.4 is here, read on to see what's new! 🎉

Enriching Data with HTTP Services

This release's major update is an HTTP processor that integrates our real-time data processing with external HTTP(S) services! How you use it is up to you (and your service providers), but here are a few things we tested while building it:

• Enriching data with GreyNoise and automatically tagging malicious IP addresses in VirusTotal
  • Check out our GreyNoise recipe to get started
• Adding geolocation information to IP addresses using IPinfo
• Submitting asynchronous scan requests to Shodan
• Downloading files, like Herman Melville's Moby Dick

The possibilities with this one might actually be endless.

Meet Us On the Playground

We've launched substation.run, a Substation application that runs in the browser. Inspired by the Go Playground, this is a great way to learn about the system's data transformation capabilities without downloading any code. Everything runs locally in the browser using WebAssembly, so it's safe to use as a playground for testing configurations on real event logs.

Other Changes

• Improved the development app by adding support for overwriting configuration settings
  • feat(CLI): adds force-sink flag #84
• Expand processor has SetKey support for newly created objects
  • feat: Add SetKey Support to Expand Processor #81
• Capture processor has SetKey support for named groups
  • feat: Add Object Interpretation to Capture Named Groups #78