Published on 2020-04-22 00:00:00

Humio 1.9.3

Security Fixes, Bug Fixes, and timechart() Improvements

Version

Type

Release Date

End of Support

Upgrades From

Data Migration

Config. Changes

1.9.3

Preview

2020-04-22

2020-04-27

1.8.5

No

No

JAR Checksum

Value

MD5

e2a84e14721946391ec9dddf66412723

SHA1

4b439142bf46d49c9e1b9c9685a2beacb921ef18

SHA256

646c3069015b1516dae2ef577d827a30d0deb62a393360fead05074a37edc670

SHA512

bf673036d37ec539d1abeb04b9388e87f8c6ddfc781602d67bb7e28a5beda6195b827bba61bc9f769836f4a764330d93a33ae4788700758ca23cd7f8ecb88ae4

TGZ Checksum

Value

MD5

e2a84e14721946391ec9dddf66412723

SHA1

4b439142bf46d49c9e1b9c9685a2beacb921ef18

SHA256

646c3069015b1516dae2ef577d827a30d0deb62a393360fead05074a37edc670

SHA512

bf673036d37ec539d1abeb04b9388e87f8c6ddfc781602d67bb7e28a5beda6195b827bba61bc9f769836f4a764330d93a33ae4788700758ca23cd7f8ecb88ae4

Summary

Security Fixes, Bug Fixes, and timechart() Improvements

Security Fixes

A few security vulnerabilities have been discovered as part of a proactive penetration test. None are known to have been exploited. More information will be forthcoming.

Deal with Missing Data Points in Timecharts

This release improves the handling of missing data points in time charts. Previously you could either interpolate missing data points based on the surrounding data, or leave gaps in the charts. With the introduction of the new charts in 1.9.0 the gaps became more apparent than previously, and we have added new options to deal with missing data points. These replace the previous option “Allow Gaps”, with four new options:

  • Do Nothing - This will leave gaps in your data

  • Linear Interpolation - Impute values using linear interpolation based on the nearest known data points.

  • Replace by Mean Value - Replace missing values with the mean value of the series.

  • Replace by Zero - Replace missing values with zeros.

New Line Interpolation Options

The release also introduces new options for line interpolation.

  • Monotone

  • Natural

  • Cardinal

  • Catmull-Rom

  • Bundle

The latter three are impacted by the ‘tension’ setting in the timechart Style editor.

Change Log

  • Security: [critical] Fixed more security vulnerabilities discovered through proactive penetration testing (more information will be forthcoming).

  • New query function fieldstats().

  • More efficient “collect” function implementation.

  • Allow more concurrent processing to take place in “export” query processing.

  • Styling improvements in the “Style” panel for widgets.

  • New Time Chart interpolation options.

  • New options for dealing with missing data in Time Charts.

  • Improves responsiveness of the recent queries dropdown, and limits the number of stored recent queries to 100 per user per repository.

  • Allow dots in tagged field names.

  • If at startup the global-snapshot.json file is missing, then try loading the “.1” backup copy.

  • Bug fix: The segment queue length metric was not correct when segments got fetched from bucket storage by a query.

  • Bug fix: the query metric only measured time for streaming queries, now it includes non-streaming as well.

  • Bug fix: api-explorer not working due to CSP inline script.

  • Improve disk space monitoring when using bucket storage.