Skip to main content

EveBox 0.24.0 Released

· One min read

EveBox 0.24.0 has been released with improvements to event filtering, dashboard controls, and SQLite importing.

New and Improved​

  • Added a sensor selector to the Events page
  • Added support for importing xz-compressed EVE JSON files with the SQLite CLI importer
  • Refined the Events page filter controls and layout
  • Unified the Dashboard refresh control layout and button styling
  • Made --config-directory a global CLI argument

SQLite Import Performance​

The SQLite importer now uses a faster tokenizer for printable payload fields. It extracts ASCII words directly, skips base64 and HTTP response body data where appropriate, and avoids regex overhead during ingest.

Fixes and Maintenance​

This release also lowers the log level for lines not ending with a newline, removes stray SQLite retention debug logging, updates Rust and webapp dependencies, and removes the older rusqlite SQLite importer implementation.