Humio Server 1.5.18 Archive (2019-06-26)
|End of Support
|Req. Data Migration
parseXml() and support
ephemeral drives for caching.
MAX_EVENT_FIELD_COUNT(default .0) controls the enforced maximum number of fields in an even in the ingest phase.
Parameter input fields for query based parameters initially always showed
*even when a default value was set. It now correctly shows the default value for the parameter.
Reduce size of global snapshots file.
New built in parser
corelight-esto parse Corelight data send using the Elastic protocol.
Certain regular expressions involving
$could fail to match.
Remove configuration flags:
Humio can now keep a cache of the latest files on when told the path of a cache-dir using
CACHE_STORAGE_DIRECTORY. Humio will then write copies of some of the files from primary and secondary storage here, assuming it is faster to read from the cache. The cache does not need to remain after a restart of Humio.
CACHE_STORAGE_PERCENTAGE(Default 90) controls how much of the available space on the drive Humio will try to use. This is useful on system such as AWS where the primary data storage is durable but slow due to being across a network (e.g. EBS) while the server also has fast NVME-drives that are ephemeral to the instance.
parseXml()for use in parsers