Skip to main content

FPL JavaScript (ES6) Support (v8.250515)

Sysadmin
Sysadmin
Fluency Sysadmin

FPL now runs JavaScript (ES6). Parsers and reports written in JavaScript, including code generated by AI tools, run without modification, and existing FPL code runs unchanged. The release also adds notification endpoints and restricted API tokens in tenant mode, AlienVault OTX feed lookups, and a LavaLake data-lake sink (beta). It rolled out to all instances the weekend of May 17–18, 2025.

FPL: JavaScript (ES6) support​

Syntax​

  • else if, alongside the existing elseif.
  • === and !==.
  • Optional semicolons at the end of a line.
  • ++ and -- in prefix and postfix form, inside expressions as well as statements.
  • while, do…while, for…in and for…of loops, and iterators.
  • switch blocks.
  • Template strings, the spread operator (...) and array destructuring, including empty slots such as const [, host, service] = match.
  • JavaScript regular-expression literals.

Built-in objects and methods​

  • The common JavaScript String and Array methods, array.length, and array-like objects.
  • Math, Number(), JSON.parse, JSON.stringify, Array.isArray, Object.keys, Object.values, Object.entries and console.log.

Known limitations​

  • Regular expressions do not take the global (/g) flag, so matchAll() is not available.
  • A single-line if without braces is not accepted. Put the body in { }.

See the FPL reference.

Notifications and API tokens​

  • Notification endpoints can be configured in tenant mode. See Notifications.
  • An API token created in tenant mode can be marked restricted. See API Tokens.

Behavior summaries​

  • Each behavior summary carries a uuid, and each rule summary within it a ruleID, so a system that receives alerts by webhook can match an update to the summary it already has.

Threat intelligence​

  • AlienVault OTX feed lookup. With your OTX API key, the instance downloads the OTX pulse feed once a day and matches incoming events against it.

Data lake​

  • New data-lake sink for LavaLake (beta).

Fixes​

  • Fixed a caching bug in REST API integrations.
  • Fixed processors being duplicated in tenant mode.