Falcon LogScale 1.81.0 Preview (2023-03-14)

VersionTypeRelease DateAvailabilityEnd of SupportSecurity UpdatesUpgrades FromJDK CompatibilityReq. Data MigrationConfig. Changes
1.81.0Preview2023-03-14Cloud, On-Prem2024-04-12No1.44.011NoNo

Bug fixes and updates.


Items that have been removed as of this release.

Automation and Alerts

  • The deprecated REST Alert API has been removed.


  • The deprecated REST Action API endpoint for testing actions has been removed.


Changes that may occur or be required during an upgrade.

  • Other

    • OpenSSL in Docker images has been upgraded to address CVE-2023-0286 issue.

Improvements, new features and functionality

  • Automation and Alerts

    • The throttle field on alerts can now be imported and exported.

  • Configuration

  • Other

    • Event redaction will no longer rewrite minisegments. Instead, the redaction will be delayed until all minisegments that would be affected have been merged.

    • Query Monitor page is now available on the organization level. Users with Monitor queries organization level permission get access to the page where they can see queries running in their organization.

      For more information, see Query Monitor, Organization Query Monitor.

    • New ingest endpoint api/v1/ingest/json for ingesting JSON objects and JSON arrays has been added.

      For more information, see Ingest Raw JSON Data.

Bug Fixes

  • Falcon Data Replicator

    • Fixed a bug where testing new FDR feeds that use S3 Aliasing would fail for valid credentials.

  • Dashboards and Widgets

    • The following items have been fixed:

      • Parameter bindings would not be visible for imported dashboards when configuring interactions.

      • Imported dashboard containing interactions would be perceived as invalid.

      For more information, see Managing Dashboard Interactions.

  • Functions

    • Fixed a bug where the query editor would wrongly claim that predicate functions used as match guards were missing an argument to the field parameter.

  • Other

    • Fixed an issue which could cause minisegments to not all be on the same host for a short time, while those minisegments were being merged. This could cause queries to be unable to query them.

    • Fixed some issues in the event redaction implementation which could cause the redaction to fail in rare cases.

    • A bug has been fixed that caused recent minisegments to be missed in queries if the minisegments were merged during the query.