The new visualizations require a change to the CSP. If you have your own CSP, you need to add 'unsafe-eval' to the script-src key.

Importing repositories from another Humio instance has repository ID where repository name was required.

New visualization helper functions geohash(), worldMap(), sankey().

Searching using ... | *foo*** | ... is identical to ... | foo | ... since plain text searches are always substring matches. But the former got turned into a full-string regex match for ^.*foo.*$ which is 10-30 times slower compared to the fast substring search in Humio.

Support using filebeat to ship logs from Helm chart for ingest logs from a Kubernetes cluster. The message can be in the field log or message.

The update services widget that "phones home" to update.humio.com can now only be disabled if you have a license installed.

New visualizations: World Map and Sankey .

New query syntax: match on a field that eases matching for several cases on a single field.

S3 archiving now handles grouped tags properly, generating one file for each tag combination also for grouped tags.

Performance regression in functions table(), sort(), tail() and head() that slowed them down a lot when the limit was larger than .0.

split() function could use the timestamp of one event in more of the following events than those that originated in that event.