Upcoming Changes

This page lists the upcoming changes that have been identified in the release notes. Where possible, notification of the change and version number will be provided.

Type?EntryClassFirst RegisteredLast Supported Version
Advance Warning

Our documentation homepage, functionality, and content will undergo a series of improvements before the end of August 2026. As the volume of content on the site has grown significantly, we recognize that finding the right information can be challenging. These changes are designed to improve navigation, make content easier to find, and provide clearer distinctions between content areas.

Functionality and Navigation

  • New Default Homepage โ€” Improved navigation and organization to help you find information more quickly. The existing legacy homepage will remain available.

  • Curated Content Pages โ€” Topic-specific pages that provide key resources tailored to different areas of the documentation. Each page includes:

    • Search scoped to that specific content area

    • Highlights of new and recently updated pages

  • Guided Workflow Pages โ€” Step-by-step, page-by-page guides to help you learn about specific areas of LogScale.

  • Bookmark Groups โ€” Organize bookmarks into custom groups to create your own categorized link collections.

  • Page Watching and Notifications โ€” Monitor pages and content for changes, so you're always aware of updates to the content you use most.

  • Custom Homepage โ€” Set a Curated Content page as your homepage, so visiting library.humio.com takes you directly to your preferred content area.

Content Improvements

  • New CrowdStrike Query Language (CQL) Manual โ€” A standalone manual covering:

    • Query structure and execution context

    • Internal data representation

    • Datatypes used in queries and functions

    • Function types, input and output values, and related functions

    • Common query patterns organized by use case and challenge

    • Guides for translating SQL to CQL

  • New Getting Data Out Manual โ€” Covers the different ways to extract information from LogScale, including APIs, the search interface, dashboards, and automation.

  • New Getting Data In Manual โ€” Covers the methods, tools, and integrations available for ingesting data into LogScale.

  • New Administration Manuals โ€” Separate, dedicated manuals for Self-Hosted and Cloud customers.

We will provide updates as each improvement becomes available โ€” we welcome your feedback as the changes roll out.

Documentation1.249.01.255.0
Advance Warning

Starting in version 1.258, the queryjobs endpoint will always use pagination, even when no pagination arguments have been given. When no arguments are provided, the endpoint will return the maximum page size and an offset of 0. Unless the dynamic configuration parameter QueryResultRowCountLimit has been raised from its default value, this will initially be the entire result.

All clients should begin transitioning to use the paginated polling method ahead of version 1.258.

API1.250.01.258.0
Breaking Changes

LogScale LTS version 1.258 will include a breaking change to subquery semantics for the worldMap() and sankey() functions. Result fields will no longer be automatically detected, and results must be assigned to a specific field - magnitude for worldMap() and weight for sankey() respectively.

This change avoids unpredictable behavior in sub-queries, and allows further development on related systems. The following is an example of a query that is impacted by this change:

logscale
worldMap(lat=lat,lon=lon,magnitude={ w_squared := w*w | sum(w_squared) | magnitude := math:sqrt(_sum) })

Currently, the query will be interpreted as:

logscale
worldMap(lat=lat,lon=lon,magnitude={ w_squared := w*w | magnitude := sum(w_squared) })

From version 1.258, the math:sqrt part of the query will no longer be discarded.

Functions1.251.01.258.0
Behavior Changes

After an organization is soft deleted using the removeOrganization mutation, you can now only call the following mutations on that organization:

Previously, you could call any mutation on a soft-deleted organization.

GraphQL API1.246.01.258.99
Deprecation

The userId parameter for the updateDashboardToken GraphQL mutation has been deprecated and will be removed in version 1.273.

GraphQL API1.217.01.272.99
Known Issues

For clusters using secondary storage where the primary storage on some nodes in the cluster may be getting filled (that is, the storage usage on the primary disk is halfway between PRIMARY_STORAGE_PERCENTAGE and PRIMARY_STORAGE_MAX_FILL_PERCENTAGE), those nodes may fail to transfer segments from other nodes. The failure will be indicated by the error java.nio.file.AtomicMoveNotSupportedException with message "Invalid cross-device link".

This does not corrupt data or cause data loss, but will prevent the cluster from being fully healthy, and could also prevent data from reaching adequate replication.

Storage1.200Undetermined