Falcon LogScale 1.114.0 GA (2023-11-14)
| Version? | Type? | Release Date? | Availability? | End of Support | Security Updates | Upgrades From? | Downgrades To? | Config. Changes? |
|---|---|---|---|---|---|---|---|---|
| 1.114.0 | GA | 2023-11-14 | Cloud | 2025-01-31 | No | 1.70.0 | 1.112.0 | No |
Bug fixes and updates.
Advance Warning
The following items are due to change in a future release.
Installation and Deployment
We intend to drop support for Java 17, making Java 21 the minimum. We plan to make this change in March 2024.
Behavior Changes
Scripts or environment which make use of these tools should be checked and updated for the new configuration:
GraphQL API
The GraphQL mutation
setTargetDiskUsagePercentage()has been removed.
New features and improvements
Automation and Triggers
When Filter Alerts encounter a query warning that could potentially affect the result of the alert, the warning is now saved with the alert, so that it is visible in the alerts overview, same as for Standard Alerts.
GraphQL API
The GraphQL mutation
enableFieldAliasSchemaOnView()has been added; [PREVIEW: This functionality is still under development and can change without warning.] Enables the schema on the given view or repository. Field alias mappings in this schema will be active during search within this view or repository.The GraphQL mutation
enableFieldAliasSchemaOnOrg()has been added; Enables the schema on this organization. Field alias mappings in this schema will be active during search across all views and repositories within this org.The GraphQL mutation
disableFieldAliasSchemaOnView()has been added; Disables the schema on the given view or repository.The GraphQL mutation
disableFieldAliasSchemaOnOrg()has been added; Disables the schema on this organization.
Fixed in this release
Automation and Triggers
If an error occurred where the error message was huge, the error would not be stored on the failing alert or scheduled search. This issue has been fixed.
Storage
A case where we might ignore
LOCAL_STORAGE_PREFILL_PERCENTAGEand prefetch bucketed segments even if above the limit has been fixed.
Ingestion
A gap in the statistics of ingest per day experienced by some organizations on the Usage Page and in humio-usage repository, causing the graph to drop to zero, has now been fixed. As a consequence of this fix, the first measurement performed with version 1.114 will result in the graph showing a peak, since it would include statistics from the period where calculations were skipped.
Recent Package Updates
The following LogScale packages have been updated within the last month.
Package Changes
paloalto/firewall has been updated to v0.2.0.
Updates the parser to normalise event data to common schema. It currently supports messages of Traffic, Threat, HIP Match, GlobalProtect, IP-Tag, User-ID, Decryption, Tunnel Inspection, SCTP, Config, Authentication, System, Correlated Events and GTP types.
Removes old queries and dashboards from the package. To keep those, stay on the old version of the package.
Bumps the minimum supported version of LogScale from 1.20 to 1.82
For more information, see Package paloalto/firewall Release Notes.
fortinet/fortimail has been updated to v0.1.1.
Fixes broken link to documentation
For more information, see Package fortinet/fortimail Release Notes.