Published on 2019-06-26 00:00:00

Humio 1.5.18

Support Ephemeral Drives for Caching

Version

Type

Release Date

End of Support

Upgrades From

Data Migration

Config. Changes

1.5.18

Archive

2019-06-26

2020-03-14

1.5.8

No

No

JAR Checksum

Value

MD5

c4d0166d229209681cd23f4d34ce0e75

SHA1

23aeac090b6069258d168f235d025d497baf6147

SHA256

db78a9fdc47bc3f3687e758c9e1dc5c13c14525626199568889226121eca4629

SHA512

a8b66956d7d58a6bba71884ea01c91fea88d96b1c58ff9ba63a0f111da84f270e8bee16e87e1148415635425704472a5d4156b4300b1d7bb58ddd96091cdee49

TGZ Checksum

Value

MD5

c4d0166d229209681cd23f4d34ce0e75

SHA1

23aeac090b6069258d168f235d025d497baf6147

SHA256

db78a9fdc47bc3f3687e758c9e1dc5c13c14525626199568889226121eca4629

SHA512

a8b66956d7d58a6bba71884ea01c91fea88d96b1c58ff9ba63a0f111da84f270e8bee16e87e1148415635425704472a5d4156b4300b1d7bb58ddd96091cdee49

Summary

New function parseXml and support ephemeral drives for caching.

Change Log

  • Humio can now keep a cache of the latest files on when told the path of a cache-dir using CACHE_STORAGE_DIRECTORY. Humio will then write copies of some of the files from primary and secondary storage here, assuming it is faster to read from the cache. The cache does not need to remain after a restart of Humio. CACHE_STORAGE_PERCENTAGE (Default 90) controls how much of the available space on the drive Humio will try to use. This is useful on system such as AWS where the primary data storage is durable but slow due to being across a network (e.g. EBS) while the server also has fast NVME-drives that are ephemeral to the instance.

  • New function parseXml() for use in parsers

  • New built in parser corelight-es to parse Corelight data send using the Elastic protocol.

  • MAX_EVENT_FIELD_COUNT (default 1000) controls the enforced maximum number of fields in an even in the ingest phase.

  • Bug Fix: Certain regular expressions involving ^ and $ could fail to match.

  • Bug Fix: Parameter input fields for query based parameters initially always showed * even when a default value was set. It now correctly shows the default value for the parameter.

  • Remove configuration flags: REPLICATE_REMOTE_GLOBAL_HOST and REPLICATE_REMOTE_GLOBAL_USER_TOKEN

  • Bug Fix: Reduce size of global snapshots file.