Falcon LogScale Collector 1.6.5 GA (2024-04-29)

Version?Type?Release Date?Config.Changes?
1.6.5GA2024-04-29no

Hide file download links

Show file download links

Hide file hashes

Show file hashes

Improvements and bug fixes regarding handling of the file source.

Improvements, new features and functionality

  • Debugging

    • The error message "Failed sink receive." was previously erroneously logged at Log Collector shutdown, in scenarios where the shutdown was intentional and graceful. This has been corrected.

    • On Windows, when file open fails, the error message will now include the path to the file, matching the behaviour on Linux and macOS.

    • The error message "Could not identify file." will only be logged once per file that could not be identified. Previously this message would be logged at each failed attempt to identify the file.

    • The severity of a number of internal Log Collector log messages has been reduced from error to warning, in cases where the error is already handled.

Bug Fixes

  • Collecting Data

    • A race condition which could cause the Log Collector to crash, when using the static_fields transform, has been identified and addressed.

    • In previous versions the file source would hold on to a file handle until the read content was successfully received by LogScale. This could cause the reported disk usage to be higher than expected in scenarios with frequent file-rotation and low bandwidth/loss of connection to LogScale. The Log Collector now releases file handles immediately after reading EOF or detecting files being removed.

    • A race condition during file rotation potentially causing the Log Collector to crash has been identified and addressed.

  • Debugging

    • An issue causing the internal debug logging module to log a warning "Dropped debug log message before they enter the ring buffer" has been fixed.

  • Fleet Management

    • Fixed a bug where Log Collector metrics would fail to run, when any of the metrics could not be collected.