FlowSphera 1.11.0 release notes

API tokens (Settings → API): scripts and monitoring systems read FlowTrack — and, with a Read and change token, change what an administrator changes — through Authorization: Bearer ftapi_…, without a password. Shown once, kept as a fingerprint, optional end date, revoked with one click; the list shows when and from where each was last used. A token never manages users, tokens or the license, nor deletes backups; wrong tokens count with the failed logins. Examples and the endpoints: Settings → API and docs/api.md.
Webhooks (Settings → Events → Notifications → Webhook): new events as an HTTP POST — FlowTrack JSON for your own systems, or messages to Slack, Mattermost, Rocket.Chat or Discord — with the same priority, kinds and hourly limit as the other channels, an optional HMAC-SHA256 signature (X-FlowTrack-Signature) and an extra header, retries for an hour, and Send a test.
SIEM / syslog export (Settings → Events → Notifications → Syslog / SIEM): every new event as its own RFC 5424 syslog message over UDP, TCP or TLS, in CEF (ArcSight, QRadar, Splunk, Microsoft Sentinel) or JSON (Elastic, Graylog, Splunk, Wazuh) — source, target, port, protocol, device, first / last seen, country, organisation, ASN and the rule's details; facility local0–local7, its own priority threshold and kinds, no hourly limit, Send a test.