matano

matano copied to clipboard

I noticed that there's consistent throttling of the `IcebergMetadataWriterFunction` (>100/5m) and `LakeWriterAlertsFunction` (>350/5m) lambdas and was wondering if this is expected behavior or if there's some tuning that should be...

damon-edstrom

We're experiencing a problem appears to be resolved recently in the `3a4967d` commit with Athena queries returning the `ICEBERG_CANNOT_OPEN_SPLIT` error when it hits a faulty file pointer. Is the fix...

damon-edstrom

How to just deploy matano in environments where cloud provisioning is guardrail-ed and controlled

3

Hi Matano Team, We are trying to install Matano in our environment. Ours is a highly restricted environment so when we do matano init or deploy we are getting one...

RVaidhy

fix: allows enable/disable of detections via config file

4

Wanted to throw this out there to start a discussion on the implementation. I tested with: - a disabled detection - an enabled detection - both enabled and disabled detection...

rileydakota

Zeek writes logs using TSV / ASCII format by default. These logs are gzipped (by default) by the Zeek log rotation script so most folks will end up uploading gzipped...

hilt86

large file sizes causing OOMKills and timeouts

4

hi all! i'm investigating using matano for some log ingestion, and some of the ALB log files i'm looking at are extremely large - 100MB compressed, multiple GB decompressed. we're...

timcosta

Feature Request: Add options pertaining to snapshot expire schedule as part of config

2

As discussed in discord, some community members including me have been facing inconsistent timeouts and errors during the snapshot expiry process. There seems to be some bug with Athena and...

rams3sh

osquery - Managed Log Source

3

A matano managed log source for osquery has been requested by a few community users, would be great to support pulling logs from osquery (e.g. query results, diffs) and storing...

shaeqahmed

The feature request pertains to having support for managed AWS Health Events logs. Ref : https://docs.aws.amazon.com/health/latest/ug/cloudwatch-events-health.html As on date, from the security standpoint, the health events are only useful during...

rams3sh

Users would like to be able to include custom context inside of their alerts. For example, the alert body should contain data from the event other than the default ECS...

shaeqahmed