Falcon LogScale Documentation

Extracting a field from within a tag-field could make the query optimizer fail.

Calendar in query interval selector had time zone problems.

S3 archiving: Include all tag keys in generated file names, also those listed in the configuration.

Allow GET/HEAD on elastic _bulk emulation API without auth. Some client poll that API before posting event.

Bug Fix: When using select() and not including @timestamp, that field got included in exported files anyway. Now it gets included when specified as a selected field.

Expose Humio metrics to Prometheus. The port needs to be configured using the configuration parameter PROMETHEUS_METRICS_PORT.

Allow both Basic-auth and OAuth on all ingest endpoints. We recommend putting tokens in the password field of the authentication.

HEC endpoints now accepts input from Docker Splunk logging driver. You can thus get your docker container logs into Humio using this logging driver. All you need to do is add --log-driver=splunk --log-opt splunk-token=$TOKEN --log-opt splunk-url=https://humioserver to your docker run.

Expose Humio metrics as JMX.

Improved detection of alerts that are canceled to get them restarted.

stats() function (the [] operator for functions) did not pass on the data used to select default widget.

worldMap() function now accepts the precision parameter for the geohash function embedded inside worldMap().