Humio Server 1.0.39 Archive (2018-01-04)

Version?Type?Release Date?Availability?End of Support

Security

Updates

Upgrades

From?

Config.

Changes?
1.0.39Archive2018-01-04

Cloud

2020-11-30No1.1.0No

Available for download two days after release.

Regular update release.

Fixed in this release

  • Summary

    • Filebeat now utilises tags in parsers. The Filebeat configuration is still backward compatible.

    • Netflow support for on premises customers. It is now possible to send Netflow data directly to Humio. It is configured using Ingest listeners.

    • Tags can be defined in parsers (see Event Tags).

    • Tag sharding. A tag with many different values would result in a lot of small datasources which will hurt performance. A Tag will be sharded if it has many different values. For example, having a field user as tag and having .0.0 Different users could result in .0.0 datasources. Instead the tag will be sharded and allowed to have 16 different values (by default). In general do not use a field with high cardinality as a tag in Humio.

    • Root user management in the UI. A gear icon has been added next to the "Add Dataspace" button, if you are logged in as a root user. Press it and it is possible to manage users.

    • Better Zeek (Bro) Network Security Monitor integration.

    • Datasources are autosharded into multiple datasources if they have huge ingest loads. This is mostly an implementation detail.

  • Functions