Humio Server 1.11.0 GA (2020-05-19)
Version? | Type? | Release Date? | Availability? | End of Support | Security Updates | Upgrades From? | Config. Changes? |
---|---|---|---|---|---|---|---|
1.11.0 | GA | 2020-05-19 | Cloud | 2021-06-30 | No | 1.10.0 | Yes |
JAR Checksum | Value |
---|---|
MD5 | 70406b0710c9c999ec5293357e03b05a |
SHA1 | f50294f5d0267d582d7207f7df33e16eee2744af |
SHA256 | c1a79a8f1ca41e14158992ba5dfff0a05ce39292b5ed5bfa8d5507973d054fdb |
SHA512 | f0f210d24aac849457839588202d662294911bf095e0f5a791093c61c435969b300f0a303d457a0e8cdbb13d742a81b3d09c6e11fad28f927ee9782153d05fc8 |
Export to Bucket, findTimestamp()
,
selfJoin()
, Emergency User Sub-System
The selfJoin()
query function allows
selecting log lines that share an identifier; for which there
exists (separate) log lines that match a certain filtering
criteria; such as "all log lines with a given userid for which
there exists a successful and an unsuccessful login".
The findTimestamp()
query function will try
to find and parse timestamps in incoming data. The function
should be used in parsers and support automatic detection of
timestamps. It can be used instead of making regular expressions
specifying where to find the timestamp and parsing it with
parseTimestamp()
. See the
findTimestamp()
reference page for details.
As an alternative to downloading streaming queries directly, Humio can now upload them to an S3 or GCS bucket from which the user can download the data. See Bucket Storage.
If there are issues with the identity provider that Humio is configured to use, it might not be possible to log in to Humio. To mitigate this, Humio now provides emergency users that can be created locally within the Humio cluster. See Enabling Emergency Access.
Behavior Changes
Scripts or environment which make use of these tools should be checked and updated for the new configuration:
Other
Allow for emergency logins if the primary login provider is having problems. See Enabling Emergency Access.
Fixed in this release
Configuration
New configuration
MAX_CHARS_TO_FIND_TIMESTAMP
. Default value should work for most deployments. See Configuration Settings.
Dashboards and Widgets
Guage
widget now works for arbitrary numbers not only for aggregated numbers.
Functions
Query function
unit:convert()
Query function
findTimestamp()
Query function
selfJoin()
Query function
formatDuration()
Query function
selfJoinFilter()
Other
New built-in parser zeek-json.