Skip to content

announcement

First commit!

Wellcome to Clickdetect blog.

Many SIEM platforms invest significant resources into building functional detection engines. I developed this project independently in my free time. Clickdetect is designed to be a practical, agnostic, and versatile engine for log detection and alerting.

I will update this blog with interesting information about new updates, fixes and usage of clickdetect.

Feel free to update and contrib with clickdetect!


Version 1.14.1 changelog

Changelog

[1.14.1] - 2026-06-30

🪝 Webhook Changes

  • (webhook) Add Results to teams integration by @souzomain

Chore

  • (deps) Bump pytest-asyncio from 1.3.0 to 1.4.0 by @dependabot[bot]
  • (deps) Merge pull request #25 from clicksiem/dependabot/uv/pytest-asyncio-1.4.0 by @souzomain
  • (deps) Merge pull request #29 from clicksiem/dependabot/uv/ruff-0.15.15 by @souzomain
  • (deps) Bump redis from 7.4.0 to 8.0.0 by @dependabot[bot]
  • (deps) Merge pull request #28 from clicksiem/dependabot/uv/redis-8.0.0 by @souzomain
  • (deps) Bump clickhouse-connect from 1.0.1 to 1.1.1 by @dependabot[bot]
  • (deps) Merge pull request #27 from clicksiem/dependabot/uv/clickhouse-connect-1.1.1 by @souzomain
  • (deps) Update uv.lock deps by @souzomain
by souzo

Version 1.14.0 changelog

Changelog

[1.14.0] - 2026-05-25

🚀 Features

  • Add sigma backend system by @souzomain
  • Add opensearch sigma rules backend by @souzomain
  • Add opensearch PPL sigma rules backend by @souzomain
  • (sigma) Add new sigma option to threat all rules discovered as sigma by @souzomain
  • (sigma) Add loki sigma backend support by @souzomain
  • (docs) Add opensearch ppl documentation by @souzomain

🐛 Bug Fixes

  • Fix endpoint mismatch the correct is _ppl not _sql by @souzomain
  • Invalid condition causing rule not load by @souzomain
  • Fixed error while rule is updated with neovim (delete + create) by @souzomain

🗃️ Datasource Changes

  • (datasource) Add opensearch PPL datasource by @souzomain
  • (datasource) Add new option to handle sigma rules in datasource by @souzomain

🔧 Other changes

  • (other) Add uv.lock to the project by @souzomain
by souzo