Falcon LogScale Documentation

Humio's Kafka and Zookeeper Docker images have been upgraded to use Kafka 2.0.0. We recommended to keep the update procedure simple and not do a rolling upgrade. Instead shutdown Humio Kafka and Zookeeper. Then fetch the new images and start Zookeeper, Kafka and Humio. For details see Kafka's documentation for upgrading. (Note: This change was listed in release notes for v1.1.20 even though it was applied only to the kafka client there, and not to the server).

Do not reassign partitions in Kafka when there is already sufficient replicas (Only applied when KAFKA_MANAGED_BY_HUMIO=true, the default).

Handle empty uploaded files.

The query planner has been improved, so it can more precisely limit which data to search based on tags.

Improved performance of parsers that have (?<@timestamp>\S+) as their timestamp extractor regex.

Do not remove other topic configs in Kafka when setting those needed by humio (Only applied when KAFKA_MANAGED_BY_HUMIO=true, the default).