SGNL Version 1.181

Disabling or deleting a rule or workflow now cancels its in-flight workflows, so state stays consistent with configuration.

Added CrowdStrike NGSIEM as a log stream destination, so you can forward SGNL logs directly into NGSIEM.

New workflow permission sets give finer-grained control over who can create, edit, and operate workflows.
Transform request logs now include the principal ID and IP address for improved auditability.
The Entra hook endpoint now surfaces the provider-specific URL, making it clearer which endpoint to register on the identity-provider side.
Log queries now backtick-quote dotted field names, so filters against nested fields work reliably.
Log rows are now uniquely keyed per entry, resolving cases where entries sharing a request ID could visually collapse.

Rule versions are now bumped automatically when the content of a referenced snippet changes, so rule history reflects meaningful policy changes.

Release Notes