Falcon LogScale 1.81.0 Preview (2023-03-14)
|End of Support
|Req. Data Migration
Bug fixes and updates.
Changes that may occur or be required during an upgrade.
OpenSSL in Docker images has been upgraded to address CVE-2023-0286 issue.
Improvements, new features and functionality
Automation and Alerts
The throttle field on alerts can now be imported and exported.
The default value for
AUTOSHARDING_TRIGGER_DELAY_MShas been raised from 20,000 to 3,600,000.
Event redaction will no longer rewrite minisegments. Instead, the redaction will be delayed until all minisegments that would be affected have been merged.
Query Monitorpage is now available on the organization level. Users with
Monitor queries organizationlevel permission get access to the page where they can see queries running in their organization.
New ingest endpoint
api/v1/ingest/jsonfor ingesting JSON objects and JSON arrays has been added.
For more information, see Ingest Raw JSON Data.
Falcon Data Replicator
Fixed a bug where testing new FDR feeds that use S3 Aliasing would fail for valid credentials.
Dashboards and Widgets
The following items have been fixed:
Parameter bindings would not be visible for imported dashboards when configuring interactions.
Imported dashboard containing interactions would be perceived as invalid.
For more information, see Managing Dashboard Interactions.
Fixed a bug where the query editor would wrongly claim that predicate functions used as match guards were missing an argument to the
Fixed an issue which could cause minisegments to not all be on the same host for a short time, while those minisegments were being merged. This could cause queries to be unable to query them.
Fixed some issues in the event redaction implementation which could cause the redaction to fail in rare cases.
A bug has been fixed that caused recent minisegments to be missed in queries if the minisegments were merged during the query.