Humio Server 1.17.0 Preview (2020-11-18)

VersionTypeRelease DateEnd of SupportUpgrades FromData MigrationConfig. Changes
1.17.0Preview2020-11-182020-11-261.16.0NoYes
ValueJAR Checksum
MD59c47009810132eb67177966d10471544
SHA1341a2607265420b1a2d461ad111c88aca06419ed
SHA25659001d9a738930f8774c11864ce3c36b3b4b4003f8cad0d4b36af13275ceefa9
SHA512ee8e2837a8fba2b28aab8d18b16269f452f19a5c80ad9826ecbeb73eaa062236acdf2191cc448e60d81390f1a2881374637adce7603ebf9f0861ca6246f6c82f

Important Information about Upgrading

Beginning with version 1.17.0, if your current version of Humio is not directly able to upgrade to the new version, you will get an error if you attempt to start up the incompatible version. The 1.17.0 release is only compatible with Humio release 1.16.0 and newer. This means that you will have to ensure that you have upgraded to minimum 1.16.0 before trying to upgrade to 1.17.0. In case you need to do a rollback, this can also ONLY happen back to 1.16.0 or newer, rolling directly back to earlier release can result in data loss.

Bug Fixes

  • Other

    • Fix negating join expressions.

    • Fixes the case where datasources receiving data might not be marked idle, causing Humio to retain too much ingest data in Kafka.

    • New config option ALERT_DESPITE_WARNINGS makes it possible to trigger alerts even when warnings occur.

    • Fixes a bug where unit:convert couldn't handle numbers in scientific notation.

    • New config option IP_FILTER_NOTIFIERS, to set up IP filters for Alert Notifications, see IP Filter reference page.

    • If KAFKA_MANAGED_BY_HUMIO is true, Humio will ensure unclean leader election is disabled on the global-events topic.

    • Tweaked location of diagnostics regarding missing function arguments.

    • Fixes a bug causing join() to not work after an aggregating function.

    • API Changes (Non-Documented API): View Settings REST API has been replaced by GraphQL.

    • Switch from JDK to BouncyCastle provider for AES decrypt to reduce memory usage.

    • New query function concatArray, see concatArray() reference apge.

    • Fixes the issue where Humio could behave incompatibly with Kafka versions prior to 2.3.0 if KAFKA_MANAGED_BY_HUMIO was true.

    • Fixes the case where Humio would consider local node state when deciding which ingest data was safe to delete from Kafka.

    • Setting the default query for a view in the UI has been moved from the "Save as Query" to the View's "Settings" tab.

    • API Changes (Non-Documented API): Saved Query REST API has been replaced by GraphQL.

    • Refuse to boot if the booting node would cause violations of the "Minimum previous Humio version" as listed in the release notes.

    • The notifier list is sorted when selecting notifiers for an alert.

    • Refuse to boot if the global topic in Kafka does not contain the expected starting offset.

    • New experimental query function window(), enabled by config option WINDOW_ENABLED=true, see window() reference page.

    • Crash the node if an exception occurs while reading from the global Kafka topic, rather than trying to recover.

    • Fixes an issue which caused free-text-search to not work correctly for large (>64KB) events.

    • Periodically release object pools used by mapper pipeline, to avoid a possible source of memory leaks.

    • New experimental query function beta:repeating(), see beta:repeating() reference page.

    • Fixes an issue where Humio might try to get admin access to Kafka when KAFKA_MANAGED_BY_HUMIO was false.

    • Allow running Humio on JDK-14 and JDK-15 to allow testing these new builds.

    • Reduce the max fetch size for Kafka requests, as the previous size would sometimes lead to request timeouts.

    • Fixes an issue causing Humio to fail to upload files to bucket storage in rare cases.

    • Fix several cases where Humio might attempt to write a message to Kafka larger than what Kafka will allow.

    • Fixes a bug causing sort()/head()/tail() to work incorrectly after other aggregating functions.

    • New config option ENABLE_ALERTS makes it possible to disable alerts from running (enabled by default).

    • Reduce the number of merge target updates Humio will write to global on digest leader reassignment or reboot.

    • New experimental query function series(), enabled by config option SERIES_ENABLED=true, see series() reference page.

    • Rename a few scheduler threads so they reflect whether they're associated with streaming queries ("streaming-scheduler") or not ("normal-scheduler")

    • Fixes a bug causing the sub-queries of join() etc. to not see events with an @ingesttimestamp occurring later than the search time interval.

    • Fixes a bug where join function in some circumstances would fetch subquery results from other cluster nodes more than once.

    • It is again possible to override a built-in parser in a repository by creating a parser with the same name.

    • New query function parseCEF used to parse events which are formatted according to the Common Event Format(CEF), see parseCEF().

    • Changed default TLS ciphers and protocols accepted by Humio, see TLS Configuration reference page.

    • Free-text search has been fixed to behave more in line with the specification.

    • Improved wording of diagnostics regarding function arguments.

    • The Humio-search-all view will no longer be removed if CREATE_HUMIO_SEARCH_ALL is set to false. The view will instead become possible to delete manually via the admin UI.

    • New query function parameter to parseJson, removePrefixes, see parseJson() reference page.

    • The {events_html} notifier template will now respect the field order from the query.

    • New config option DEFAULT_MAX_NUMBER_OF_GLOBALDATA_DUMPS_TO_KEEP.

    • Improve logic attempting to ensure other live nodes can act as substitutes in case the preferred digest nodes are not available when writing new segments.