v0.5.0-beta.0

New features

• unified filebeat enrollment (with micromdm scepserver and scepclient), configuration, and event processing for the santa logs, the xnumon logs and the jamf server logs.
• API to export the inventory reports as XLSX and zipped CSV files
• Better jamf webhooks events:
  • computer policy finished events are enriched via an extra API call
  • fixed issues with the v10.12 changes
• celery worker for the background tasks:
  • inventory exports
  • osquery file carving archive building
  • MDM device push notifications
• refactoring of all the event pre-processors in one zentral worker.

Breaking changes

• The zentral.contrib.jamf and zentral.contrib.santa apps depend on the zentral.contrib.filebeat app. You may need to include it in the base.json.
• Some tasks which use to happen in dedicated workers have been migrated to celery tasks. You need to run a celery worker (see the docker-compose.yml file for example).
• You need to restart the workers and the gunicorn processes after the update. A reload is not enough.
• The zentral.contrib.audit app has been removed.