Issues

• user behavioral anomaly detection (login hour, IP, volume)

  needs-triage
  Feature

  utmstack/UTMStack#3072 · Filter by author JocLRojas opened on Nov 9, 2026
  

• Backend crash loop on upgrade to v11.3.0: duplicate key on pk_utm_dashboard_visualization (sequence shares range with fixed system ids)

  utmstack/UTMStack#3056 · Filter by author karlbrown87 opened on Nov 6, 2026

• dashboard surviving tenant

  Bug

  utmstack/UTMStack#3055 · Filter by author AlexSanchez-bit opened on Nov 6, 2026
  

• JSON Input: logs accepted (HTTP 200) but never indexed, no error logged (v11.3.0, multi-node Swarm)

  utmstack/UTMStack#3051 · Filter by author karlbrown87 opened on Nov 5, 2026

• tag filtering on alerts page

  Bug

  utmstack/UTMStack#3048 · Filter by author AlexSanchez-bit opened on Nov 5, 2026
  

• Windows agent auto-update (11.1.4 → 11.1.5) leaves the agent service stopped: updater does not wait for the service to stop, rollback/start fails with exit 1056, next runs fail with 1062

  needs-triage
  utmstack/UTMStack#3047 · Filter by author Klenk-IT opened on Nov 5, 2026

• Invitation and reset emails break their own link

  Bug

  utmstack/UTMStack#3045 · Filter by author AlexSanchez-bit opened on Nov 4, 2026
  

• soar flow sql mode bypassing tenat scoping

  Bug

  utmstack/UTMStack#3044 · Filter by author AlexSanchez-bit opened on Nov 4, 2026
  

• soar flows execution commands

  needs-triage
  Bug

  utmstack/UTMStack#3043 · Filter by author AlexSanchez-bit opened on Nov 4, 2026
  

• TFA security hole

  Bug

  utmstack/UTMStack#3042 · Filter by author AlexSanchez-bit opened on Nov 4, 2026
  

• dashboard creation allowing systemOwned

  Bug

  utmstack/UTMStack#3040 · Filter by author AlexSanchez-bit opened on Nov 4, 2026
  

• dashboard redirections

  Feature

  utmstack/UTMStack#3025 · Filter by author AlexSanchez-bit opened on Nov 2, 2026
  

• pdf report on datasources page

  Feature

  utmstack/UTMStack#3024 · Filter by author AlexSanchez-bit opened on Nov 2, 2026
  

• password on interactive console

  Bug

  utmstack/UTMStack#3009 · Filter by author AlexSanchez-bit opened on Oct 29, 2026
  

• adduser labeling on user-auditor

  Feature

  utmstack/UTMStack#3008 · Filter by author AlexSanchez-bit opened on Oct 29, 2026
  

• predefined alert responses

  Feature

  utmstack/UTMStack#3005 · Filter by author AlexSanchez-bit opened on Oct 28, 2026
  

• manual flow execution

  Feature

  utmstack/UTMStack#3004 · Filter by author AlexSanchez-bit opened on Oct 28, 2026
  

• Adds support for cloud identity providers so the user-auditor module can track user lifecycle events.

  Feature

  utmstack/UTMStack#2989 · Filter by author JocLRojas opened on Oct 27, 2026
  

• (Data Sources) Sources that stop sending logs never become "Disconnected"

  needs-triage
  utmstack/UTMStack#2986 · Filter by author mjabascal10 opened on Oct 27, 2026

• live operations view

  utmstack/UTMStack#2984 · Filter by author AlexSanchez-bit opened on Oct 26, 2026
  

• v12 Alert drawer shows child alert events as empty rows (only id and timestamp)

  Bug

  utmstack/UTMStack#2977 · Filter by author JocLRojas opened on Oct 23, 2026
  

• add empty dashoard shadowing

  Feature

  utmstack/UTMStack#2972 · Filter by author AlexSanchez-bit opened on Oct 23, 2026
  

• new prebuild platform shell nodes

  Feature

  utmstack/UTMStack#2971 · Filter by author AlexSanchez-bit opened on Oct 23, 2026
  

• scope shell templates by platform

  Bug

  utmstack/UTMStack#2970 · Filter by author AlexSanchez-bit opened on Oct 23, 2026
  

• (Threat Management) Alert actions: wrong or unhelpful messages and defaults when creating incidents, tags and tag rules

  needs-triage
  utmstack/UTMStack#2969 · Filter by author mjabascal10 opened on Oct 22, 2026