Falcon LogScale Collector 1.10.2 GA (2025-10-20)

Version?Type?Release Date?Config.Changes?
1.10.2GA2025-10-20no

Hide file hashes

Show file hashes

Bug fixes and updates

Improvements, new features and functionality

  • Collecting Data

    • Improved performance for the Syslog UDP source on Windows and macOS.

      By utilising workers, the throughput is improved, substantially lowering the risk of dropped messages during peak traffic periods. Internal tests indicate that throughput performance has improved by 100%. The default number of workers is the number of CPU cores.

      This can be customised using the workers parameter in the source.

    • Syslog TCP and TLS Sources: Added a nonTransparentFramingTrailer parameter to customise the trailing character used in non-transparent framing for TCP syslog connections.

      This optional parameter accepts a single character and defaults to newline (‘\n’) when not specified.

  • Debugging

    • The monitor command (and the local API) now features events per second metric.

  • Other

    • To take advantage of the latest optimizations and security updates the Go version has been updated.

  • Fleet Management

    • A new handshake mechanism has been implemented to avoid sending old-format metrics when the server supports new improved metrics.

  • Installation and Deployment

    • The full install command now supports HTTP proxy, which can be enabled using a new command line option.

      This affects downloading, enrolling, and fleet management, but not sink configurations. Configuration of HTTP proxies for sinks are still configured using the proxy parameters under each sink.

    • The helm chart version 1.4.2 has added options to disable the default source/sink configuration, allowing full customization via additionalSources/additionalSinks options. Additionally, options can be appended via additionalOptions for both sources and sinks.

      The following options are added:

      • sources.containers.enabled (default true)

      • sources.containers.additionalOptions

      • sources.journal.enabled (default false)

      • sources.journal.additionalOptions

      • sinks.default.enabled (default true)

      • sinks.default.additionalOptions

Bug Fixes

  • Fleet Management

    • Fleet management legacy mode, (configured with a snippet instead of enrolling into Fleet management), has not been supported since version 1.8.3.

      This would previously cause versions newer than 1.8.3 to crash if a legacy fleet management configuration is encountered as of this release the collector will start and operate with reduced fleet management functionality.

  • Installation and Deployment

    • The full install for systemd-based Linux has been corrected, with the service file path changed from /lib/systemd to /usr/lib/systemd. The old path caused issues on some systemd variants e.g. SUSE Linux.