Humio Server 1.17.0 Preview (2020-11-18)

VersionTypeRelease DateEnd of SupportUpgrades FromData MigrationConfig. Changes
ValueJAR Checksum

Important Information about Upgrading

Beginning with version 1.17.0, if your current version of Humio is not directly able to upgrade to the new version, you will get an error if you attempt to start up the incompatible version. The 1.17.0 release is only compatible with Humio release 1.16.0 and newer. This means that you will have to ensure that you have upgraded to minimum 1.16.0 before trying to upgrade to 1.17.0. In case you need to do a rollback, this can also ONLY happen back to 1.16.0 or newer, rolling directly back to earlier release can result in data loss.

Bug Fixes

  • Other

    • Fix negating join expressions.

    • Fixes the case where datasources receiving data might not be marked idle, causing Humio to retain too much ingest data in Kafka.

    • New config option ALERT_DESPITE_WARNINGS makes it possible to trigger alerts even when warnings occur.

    • Fixes a bug where unit:convert couldn't handle numbers in scientific notation.

    • New config option IP_FILTER_NOTIFIERS, to set up IP filters for Alert Notifications, see IP Filter reference page.

    • If KAFKA_MANAGED_BY_HUMIO is true, Humio will ensure unclean leader election is disabled on the global-events topic.

    • Tweaked location of diagnostics regarding missing function arguments.

    • Fixes a bug causing join() to not work after an aggregating function.

    • API Changes (Non-Documented API): View Settings REST API has been replaced by GraphQL.

    • Switch from JDK to BouncyCastle provider for AES decrypt to reduce memory usage.

    • New query function concatArray, see concatArray() reference apge.

    • Fixes the issue where Humio could behave incompatibly with Kafka versions prior to 2.3.0 if KAFKA_MANAGED_BY_HUMIO was true.

    • Fixes the case where Humio would consider local node state when deciding which ingest data was safe to delete from Kafka.

    • Setting the default query for a view in the UI has been moved from the "Save as Query" to the View's "Settings" tab.

    • API Changes (Non-Documented API): Saved Query REST API has been replaced by GraphQL.

    • Refuse to boot if the booting node would cause violations of the "Minimum previous Humio version" as listed in the release notes.

    • The notifier list is sorted when selecting notifiers for an alert.

    • Refuse to boot if the global topic in Kafka does not contain the expected starting offset.

    • New experimental query function window(), enabled by config option WINDOW_ENABLED=true, see window() reference page.

    • Crash the node if an exception occurs while reading from the global Kafka topic, rather than trying to recover.

    • Fixes an issue which caused free-text-search to not work correctly for large (>64KB) events.

    • Periodically release object pools used by mapper pipeline, to avoid a possible source of memory leaks.

    • New experimental query function beta:repeating(), see beta:repeating() reference page.

    • Fixes an issue where Humio might try to get admin access to Kafka when KAFKA_MANAGED_BY_HUMIO was false.

    • Allow running Humio on JDK-14 and JDK-15 to allow testing these new builds.

    • Reduce the max fetch size for Kafka requests, as the previous size would sometimes lead to request timeouts.

    • Fixes an issue causing Humio to fail to upload files to bucket storage in rare cases.

    • Fix several cases where Humio might attempt to write a message to Kafka larger than what Kafka will allow.

    • Fixes a bug causing sort()/head()/tail() to work incorrectly after other aggregating functions.

    • New config option ENABLE_ALERTS makes it possible to disable alerts from running (enabled by default).

    • Reduce the number of merge target updates Humio will write to global on digest leader reassignment or reboot.

    • New experimental query function series(), enabled by config option SERIES_ENABLED=true, see series() reference page.

    • Rename a few scheduler threads so they reflect whether they're associated with streaming queries ("streaming-scheduler") or not ("normal-scheduler")

    • Fixes a bug causing the sub-queries of join() etc. to not see events with an @ingesttimestamp occurring later than the search time interval.

    • Fixes a bug where join function in some circumstances would fetch subquery results from other cluster nodes more than once.

    • It is again possible to override a built-in parser in a repository by creating a parser with the same name.

    • New query function parseCEF used to parse events which are formatted according to the Common Event Format(CEF), see parseCEF().

    • Changed default TLS ciphers and protocols accepted by Humio, see TLS Configuration reference page.

    • Free-text search has been fixed to behave more in line with the specification.

    • Improved wording of diagnostics regarding function arguments.

    • The Humio-search-all view will no longer be removed if CREATE_HUMIO_SEARCH_ALL is set to false. The view will instead become possible to delete manually via the admin UI.

    • New query function parameter to parseJson, removePrefixes, see parseJson() reference page.

    • The {events_html} notifier template will now respect the field order from the query.


    • Improve logic attempting to ensure other live nodes can act as substitutes in case the preferred digest nodes are not available when writing new segments.