Package infoblox/nios Release Notes

Package infoblox/nios Release Notes Version 1.4.2 (2026-02-24)

  • Fixed JSON parsing issue for DNS answers containing backslashes by adding proper escape handling

  • Added test cases for DNS TYPE65 queries with complex data structures

  • Updated parser version to 3.0.2

Package infoblox/nios Release Notes Version 1.4.1 (2026-02-03)

  • Fixed DNS answers type field mapping to use proper array notation (dns.answers[0].type instead of dns.answers.type)

  • Updated parser version to 3.0.1

Package infoblox/nios Release Notes Version 1.4.0 (2026-01-05)

  • Enhanced DHCP parsing with support for BOOTREPLY, BOOTREQUEST, ICMP, and NOT FREE events

  • Added support for password_expired and logout authentication events in audit logs

  • Improved field mapping with client.address and server.address normalization

  • Added transaction.id field mapping for DHCP events

  • Enhanced DNS parsing with timeout resolution support

  • Updated parser version to 3.0.0

Package infoblox/nios Release Notes Version 1.3.5 (2025-12-16)

  • Enhanced DNS query parsing to support view-specific queries with improved regex pattern

  • Added support for extracting view information from DNS messages

  • Fixed network transport protocol normalization to lowercase format

  • Updated parser version to 2.2.5

Package infoblox/nios Release Notes Version 1.3.4 (2025-12-08)

  • Updated ECS version to 9.2.0

  • Fixed DNS answers type field mapping to use array notation (dns.answers[0].type)

  • Updated parser version to 2.2.4

Package infoblox/nios Release Notes Version 1.3.3 (2025-10-20)

  • Removed timezone parameter from parseTimestamp functions to use system default timezone

  • Updated parser version to 2.2.3

Package infoblox/nios Release Notes Version 1.3.2 (2025-10-09)

  • Fixed DNS client IP extraction regex to improve parsing accuracy

  • Enhanced DNS message handling with proper @ symbol replacement

  • Updated ECS version to 9.1.0 and CPS version to 1.1.0

Package infoblox/nios Release Notes Version 1.3.1 (2025-05-06)

  • Fixed an issue with DNS answers containing quotes

Package infoblox/nios Release Notes Version 1.3.0 (2025-04-07)

  • Improves event categorization.

  • Adds support for additional audit events

  • Enhances DNS field extraction

  • The old parser syslog-utc is now officially removed from the Infoblox Nios package

Package infoblox/nios Release Notes Version 1.2.2 (2024-12-12)

  • Improves the dns.* fields extraction.

  • Bumps the ecs.version to 8.16.0

  • Enhacnes the regex to accept hashes in the host.domain field.

Package infoblox/nios Release Notes Version 1.2.1 (2024-12-06)

  • Adds event.kind field mapped to CPS

Package infoblox/nios Release Notes Version 1.2.0 (2024-10-11)

  • Deprecation notice:

    • The old parser syslog-utc is deprecated, and replaced by the new parser infoblox-nios. In this release, the two parsers are exactly alike, except for the name, but all future changes will only go into the new infoblox-nios parser. We recommend switching to the newer parser as soon as possible, to make for the smoothest upgrade. The old syslog-utc parser will be removed at some point in the future. In your data, the field #type contains the name of the parser, so any queries you may have that searches for this field need to accomodate this change.

  • It extends the support of syslog format.

  • Adds following fields mapped to CPS: dns.question.name, dns.question.class, client.domain, client.ip amd server.ip.

Package infoblox/nios Release Notes Version 1.1.1 (2024-09-24)

  • Improves event categorization and outcomes via the event.category[] and event.type[] arrays and the event.outcome field.

Package infoblox/nios Release Notes Version 1.1.0 (2024-09-05)

  • Simplifies parser logic by removing unnecessary rename operations.

  • Bumps the minimum LogScale version to 1.142 to support assertions in yaml files.

  • Extracts the dns.answer.* and dns.resolved_ip fields.

  • Removes the repeat.message field.

Package infoblox/nios Release Notes Version 1.0.0 (2024-04-17)

  • Adds new event.module, event.dataset and Cps.version fields

  • Removes the Product, related.host and related.ip fields

  • Sets following tags: Cps.version, Vendor, ecs.version, event.dataset, event.kind, event.module, event.outcome, observer.type