Graylog Changelog

Please note this changelog is for the core Open Graylog application. For the Graylog Enterprise changelog, please see the following article.

Graylog 6.1.4

Released: 2024-12-04

Added

• Unified snapshot configuration, role and cache management in Data Node. This prevents allocating a big search cache when no searchable snapshots have been configured, leading to potential low watermark issues. graylog2-server#21031

Fixed

• Fix error when ticking or unticking show event annotations. graylog2-server#20932 graylog2-server#21028

• Fix disable cross_subdomain_cookie for telemetry (backport). graylog2-server#15675 graylog2-server#17745 graylog2-server#21103

Graylog 6.1.3

Released: 2024-11-21

Added

• Added multi_grok pipeline rule to support processing a string against many grok patterns at once. graylog2-server#15301 graylog2-server#20924

Fixed

• Fix custom highlighting of field values in the message details of the message table widget graylog2-server#18388 graylog2-server#20921

• Fixing text color of bar labels in bar chart, which are displayed outside of a bar. graylog2-server#20789 graylog2-server#20948

• Fix handling of path prefix in useSendTelemetry. graylog2-server#20899 graylog2-server#20951

• Fix failing of executing search on event definition page. graylog2-server#20925 graylog2-server#20953

• Sorting pivot values numerically when field is numeric. graylog-plugin-enterprise#6479 graylog2-server#20918

• Fixes issue where some event types did not display all actions that should have been available. graylog-plugin-enterprise#8638 graylog2-server#20847

• Fixing replay search routes when path prefix is present. graylog2-server#20910

• Fixing route for AWS integration when path prefix is present. graylog2-server#20969

Graylog 6.1.2

Released: 2024-11-06

Added

• Automatically trim newline characters for Fortigate messages received through syslog inputs. graylog2-server#20788

Fixed

• Fix encoding of CName in generated CA certificates. graylog2-server#20738 graylog2-server#20745

• Fixing output class name for prometheus exporter. graylog2-server#20790 graylog2-server#20844

• Fixing up extraction of effective time range for async searches. graylog2-server#20800 graylog2-server#20808

• Fixing unkown format issue in widgets when using gradiant highlighting. graylog2-server#20876 graylog2-server#20882

Graylog 6.1.1

Released: 2024-10-23

No changes in Graylog Open for 6.1.1.

Graylog 6.1.0

Released: 2024-10-21

Added

• Introduce new pipeline functions remove_single_field and remove_multiple_fields to (eventually) replace remove_field. graylog2-server#19098 graylog2-server#19268

• Change placement of message widget export action. graylog2-server#19139 graylog2-server#19140

• Added remediation steps to general events view. graylog2-server#19354 graylog2-server#19853

• Add export feature to events and investigations widget. graylog2-server#19580 graylog2-server#19597

• Datanode migration telemetry. graylog2-server#20086 graylog2-server#20225

• Added new Palo Alto Networks TCP (PAN-OS v11+) input. graylog2-server#20223 graylog2-server#20236

• Add unit formatting functionality for widgets. graylog2-server#20241 graylog2-server#19109

• Added new Beats Kafka input to ingest system logs from Kafka topic using Filebeat. graylog2-server#5254 graylog2-server#20067

• Display progress indicator for search auto refresh controls. graylog2-server#16894

• Adds support for user-configurable index set templates. graylog2-server#18956

• Conversion of MessageList into a tabular representation for exports. Added XLSXWriter. graylog2-server#19162

• Show maximum available time for restarting Graylog during in-place migration. graylog2-server#19270 graylog2-server#19271

• Add possibility to select an index set template when creating an index set. graylog2-server#19075 graylog2-server#19381

• Add option to select all fields for messages export widget. graylog2-server#19463

• Added support for scheduling Event Definitions using cron expressions. graylog2-server#19563

• Add pipeline connections management to stream details page. graylog2-server#19587

• Show tasks progress in Remote Reindex Migration graylog2-server#19657

• Add FilteredMessageOutput and OutputFilter Java interfaces. graylog2-server#19672

• Display datanode version in datanodes overview under System / Data Nodes. graylog2-server#19680 graylog2-server#18783 graylog2-server#19691

• Add filters for filterable stream destinations. graylog2-server#19739

• Add archive, outputs, pipelines, and Data Warehouse column to stream overview. graylog2-server#19763

• Add guard for matching graylog/datanode version in data node migration. graylog2-server#19828

• Adding a Last Updated attribute to views/dashboard that is updated on save and initially initialized from the associated search for existing views. graylog2-server#19830

• Add Stream destination output filters UI. graylog2-server#7427 graylog2-server#19846

• Add optional ignoreExtraFieldNames parameter to csv_to_map pipeline function. graylog2-server#19865

• Indices not managed by Graylog are now marked and not selected by default in data node’s remote reindex migration. graylog2-server#19974 graylog2-server#19976

• Support configuration of output_batch_size by bytes. graylog2-server#19982

• Added Microsoft Teams Notification V2 which is compatible with Microsoft Workflows. graylog2-server#19983

• Add data node information to support bundle. graylog2-server#20090

• Bump OpenSearch (client, server in DataNode) to 2.15. graylog2-server#20097

• Add data node logs and migration logs to support bundle. graylog2-server#20103

• Added categories to Streams to allow Illuminate content to be scoped to multiple products. graylog2-server#20110 graylog2-server#20160 graylog2-server#20199 graylog2-server#20371 graylog2-server#20373 graylog2-server#20380

• Add certificates used by data nodes and Graylog to support bundle. graylog2-server#20120

• Show system notification while remote reindexing during the data node migration. graylog2-server#20123

• Remote Reindex UI improvements. graylog2-server#20237

• Fix error when installing content pack with stream_title parameter. graylog2-server#20244

• Display index overview by tier type. graylog2-server#20352

• Added new Raw HTTP input. Also added support for custom authorization config option for HTTP Gelf and new HTTP Raw inputs. graylog2-server#20370

• Remove Data Node beta banner graylog2-server#20388

Changed

• Lazy configuration processing for datanode, collecting all errors in one go. graylog2-server#19207 graylog2-server#19801

• Changed default setting for Kafka transports to non-legacy mode. graylog2-server#19693

• Always display input for widget title in widget edit mode. graylog2-server#7396 graylog2-server#19737

• Improving API error responses for JSON parsing failures. graylog2-server#19367

• Introduced DatanodeKeystore for unified handling of PKI inside data node. graylog2-server#19536

• Migrate graylog CA to cluster config storage. graylog2-server#19747

• Run remote reindex connection checks from datanodes, aggregate results. graylog2-server#19879

• Implement table rows border color with more contrast. graylog2-server#20001

• Display Warm Tier Search warning as streams with timestamp. graylog2-server#20427

• API endpoint for listing users will not return an error anymore when user is lacking permission, but return current user only instead. graylog2-server#20558

Removed

• Removed deprecated GreyNoise Community Data Adapter. graylog2-server#19914 graylog2-server#19927

• Removed default Content Pack for defunct abuse.ch ransomware tracker. graylog-plugin-integrations#945 graylog2-server#19519

Fixed

• Fix link target for search query error documentation links. graylog2-server#13822 graylog2-server#20563

• Display Data Node Logs graylog2-server#17730 graylog2-server#19352

• Fix zstd library loading issue on noexec-mounted /tmp directories. graylog2-server#17837 graylog2-server#19971

• Display field value suggestions when field name is in the middle of the search query. graylog2-server#18288 graylog2-server#18952

• Clarify rule simulation processing. graylog2-server#18359 graylog2-server#19261

• Avoid double-qualifying navigation links when path prefix is configured. graylog2-server#18463 graylog2-server#19511

• Fixing several smaller bugs with keyword time range tab. graylog2-server#18809 graylog2-server#18879

• Datanode remote reindex migration UI features. graylog2-server#18876 graylog2-server#19100

• Fix Grok field extraction for patterns with converters. graylog2-server#18883 graylog2-server#18898

• Reset events widget pagination when executing search. graylog2-server#18915 graylog2-server#18945

• Fix selecting option in more results select on pipeline simulator page. graylog2-server#18932 graylog2-server#19413

• Fix permissions handling in events widget. graylog2-server#18949 graylog2-server#18953

• Fixing stream filtering in events search type. graylog2-server#18971 graylog2-server#18972

• Fixing text color for unqualified fields in field select. graylog2-server#18975 graylog2-server#18976

• Fix log4j memory appender buffer size configuration. graylog2-server#19003 graylog2-server#19208

• Fixed user permission-based filtering on Event Definitions. graylog2-server#19007 graylog2-server#19262

• Fix Alerts & events search input is removing input values while typing. graylog2-server#19009 graylog2-server#20516

• Fixing ‘unknown format’ error on sidecar overview page. graylog2-server#19012 graylog2-server#19128

• Do not show confirm dialog when saving event notification. graylog2-server#19014 graylog2-server#19073

• Fix display tooltip for help icons in disabled menu items. graylog2-server#19092 graylog2-server#19093

• Fixes handling of error results in the lookup cache. graylog2-server#19159 graylog2-server#19670

• Add sidecar filebeat collector for windows again. graylog2-server#19195 graylog2-server#19325

• Data Node Migration: remove unnecessary steps/big texts/unavailable paths. graylog2-server#19229 graylog2-server#19312

• Removed basic auth for datanode rest api. Only JWT supported now. graylog2-server#19243 graylog2-server#19244

• Datanode: Maximum downtime estimate during migration. graylog2-server#19270 graylog2-server#19293

• Reuse http client for datanode connection checks during preflight configuration. graylog2-server#19272 graylog2-server#19273

• Fixes Recent Activity pagination, so that it does not ignore entries for deleted items. graylog2-server#19313 graylog2-server#19394

• Fix issue with scroll position which could occur in news section on the startpage when scrolling by dragging cards. graylog2-server#19337 graylog2-server#19341

• Make allowlist for datanode remote reindex migration optional, automatically remove protocols. graylog2-server#19402graylog2-server#19682

• Fix issue with widget timerange, query and streams filter for events widget on dashboards. graylog2-server#19486graylog2-server#19537

• fix sidecar failure tracking page error. graylog2-server#19562 graylog2-server#19570

• Fixing copying to clipboard in non-secure contexts. graylog2-server#19643 graylog2-server#19654

• Sorting custom field mappings has been fixed, it does not fail on null values anymore. graylog2-server#19694 graylog2-server#19960

• Disable automatic datanode cert renewal during preflight mode. graylog2-server#19706 graylog2-server#19709

• Add support for unknown certificate authorities during the remote reindex migration to the datanode. graylog2-server#19759 graylog2-server#19775

• Fix CA upload delete icon XMARK not found. graylog2-server#19790 graylog2-server#19791

• Make migration thread count counfigurable. graylog2-server#19792 graylog2-server#19794

• See previous migration steps content by making them expendable but not editable. graylog2-server#19803 graylog2-server#19825

• Fix invalid link for OpenSeach documentation. graylog2-server#19845 graylog2-server#20025

• Disable data node migration wizard on installations using data node. graylog2-server#19871 graylog2-server#20035

• Display timestamp in datanode migration logs. graylog2-server#19977 graylog2-server#19993

• Show previous values in remote reindex migration form. graylog2-server#19997 graylog2-server#20008

• Reopen target index for remote reindex migration if this is closed. graylog2-server#20208 graylog2-server#20220

• Fix search bar query validation error showing double icons. graylog2-server#20409 graylog2-server#20502

• Use name instead of originName in hover labels templates to fix that advanced field types not resolved in label texts for charts with custom units. graylog2-server#20434 graylog2-server#20453

• Use the correct Data Node configuration file server.conf instead of graylog.conf. graylog2-server#20448 graylog2-server#20450

• In cloud env display only node name instead of name with link in message details on the search page. graylog2-server#20464 graylog2-server#20505

• Fix new Datanode EntityDataTable issues. graylog2-server#20481 graylog2-server#20495

• Fix streams page always shows horizontal scroll bar. graylog2-server#20515 graylog2-server#20522

• Fix Datanode Details Page Error. graylog2-server#20604 graylog2-server#20628

• Fix scratchpad copy button. graylog2-server#18788 graylog2-server#18874

• Fix unknown field caused_by in remote reindex migration task class. graylog2-server#18907

• Fix index set deletion issues. graylog2-server#18994graylog2-server#19030

• Add beta info to data node preflight and overview page. graylog2-server#19038graylog2-server#19039

• Actively wait for opensearch process termination in the datanode. graylog2-server#19056

• Fix rules editor showing warning when saving. graylog2-server#19008graylog2-server#19059

• Remove datanode leader flag. graylog2-server#18861 graylog2-server#19170

• Fixing full page refreshes for menu items with href. graylog2-server#19225

• remove preflight resume startup. graylog-plugin-enterprise#7009 graylog2-server#19228

• Fix data stream replicas and creation on single/multi-node data node setups. graylog2-server#18830 graylog2-server#19010 graylog2-server#19241

• Fix manage extractors link for local input. graylog2-server#19111 graylog2-server#19260

• Fixing full page refreshes for buttons with href. graylog2-server#19267

• Removed Delete and Duplicate options for Sigma event definitions. graylog2-server#19404

• Fixed error when the string_array_add function is supplied a null value. graylog-plugin-enterprise#7262 graylog2-server#19439

• Fix upload CA tab not clickable graylog2-server#19485 graylog2-server#19478

• Fix sidecar undefined error. graylog2-server#19487

• Datanode UI fixes. graylog2-server#19467 graylog2-server#19477 graylog2-server#19539

• Propagate search errors in legacy search REST API endpoint. graylog2-server#14646 graylog2-server#19598

• Data Node Migration Linkable Logs View. graylog2-server#19599

• Fix problem with missing field types on message details page. graylog2-server#19600

• Update URLs in DocHelper class to point to go2docs. graylog2-server#19630

• Preflight UI fixes. graylog2-server#19285 graylog2-server#19286 graylog2-server#19667

• Fixed routing of home nav icon to open the active perspective welcome page. graylog2-server#19673

• Fix processing failures due to lookup failures in the IPInfo geolocation database. graylog2-server#19750

• Fix indexer cluster health box on indices page to use correct distribution name. graylog2-server#19805 graylog2-server#19824

• Disabling interactive functionality in widgets when in non-interactive context. graylog2-server#19857

• Dropping legacy dashboards collection in migration. graylog2-server#19912 graylog2-server#19921

• Fix concurrency problem with datanode migration context injection. graylog2-server#19926

• Add /connection-check endpoint to datanode rest api proxy allowlist. graylog2-server#19932

• Fix parsing of opensearch allowlist during remote reindex migration. graylog2-server#19947

• Fixed issue where unescaped quotes in Custom HTTP notification JSON payloads breaks the notifications. graylog2-server#19951 graylog2-server#20318

• Remove last data node from list if no more data nodes are running. graylog2-server#19980 graylog2-server#19981

• Fix duplicated index entries in remote reindex migration. graylog2-server#19990

• Disable world map interactions in non-interactive mode. graylog2-server#20004

• only hide DatanodeMigration if state ‘FINISHED’ and datanode is configured. graylog2-server#19871 graylog2-server#20042

• Stop existing running datanodes during in-place migration. graylog2-server#19833 graylog2-server#20058

• Properly parse trailing padding bytes in IPFIX data sets. graylog-plugin-integrations#395 graylog2-server#20073

• Add support for remote-reindex migration of closed indices. graylog2-server#20068 graylog2-server#20081

• Fix list of dashboards in widget’s ‘copy to dashboard’ dialog to only contain allowed dashboards. graylog2-server#7331 graylog2-server#20089

• fixed check for missing required int in legacy search api. graylog2-server#7395 graylog2-server#20094

• Stop index retention during remote reindex migration. graylog2-server#20121

• Pause index set rotation during remote reindex migration. graylog2-server#20222

• Fixed issue where grok_exists pipeline rule would return true for substrings of pattern names. graylog2-server#20264 graylog2-server#20263

• Fix issue where content pack stream dependencies were not properly resolved for some dashboards. graylog2-server#20265 graylog2-server#20288

• Fix tooltips not being visible in modals. graylog2-server#20272

• Reset is_cancelled flag on job trigger release. graylog2-server#20287

• Automatically remove index write blocks during remote reindex migration. graylog2-server#20313

• Datanode preflight check for node.lock, preventing parallel run of opensearch and datanode. graylog2-server#20366

• Use external URI for base URL of API browser. graylog2-server#20379

• Fixed issue where invalid JSON characters being unescaped broke TeamsNotificationV2 notifications. graylog2-server#20389

• Fixing plot legend for larger label sets. graylog2-server#20426

• Datanode informative certificate details. graylog2-server#20542 graylog2-server#20543 graylog2-server#20546

• Added datanode permissions. graylog2-server#20608

• Hide remote reindex migration behind a feature flag. graylog2-server#20636

• Add missing any/all option to stream rules in routing/intake page. graylog2-server#20678

• Tieing events widget to configured time range. graylog2-server#18914 graylog2-server#18954

Graylog 6.0.9

Released: 2024-12-04

Added

• Added multi_grok pipeline rule to support processing a string against many grok patterns at once. graylog2-server#15301 graylog2-server#20924

Fixed

• Fix custom highlighting of field values in the message details of the message table widget. graylog2-server#18388 graylog2-server#20921

• Sorting pivot values numerically when field is numeric. graylog2-server#20918

• Fixes issue where some event types did not display all actions that should have been available. graylog2-server#20847

• Fixing route for AWS integration when path prefix is present. graylog2-server#20969

Graylog 6.0.8

Released: 2024-11-06

Added

• Automatically trim newline characters for Fortigate messages received through syslog inputs. graylog2-server#20788

Fixed

• Fix encoding of CName in generated CA certificates. graylog2-server#20738 graylog2-server#20745

Graylog 6.0.7

Released: 2024-10-02

Fixed

• In cloud environment display only node name instead of name with link in message details on the search page. graylog2-server#20464 graylog2-server#20505

• Use external URI for base URL of API browser. graylog2-server#20379

• Fixed issue where invalid JSON characters being unescaped broke TeamsNotificationV2 notifications. graylog2-server#20389

Graylog 6.0.6

Released: 2024-09-04

Added

• Added remediation steps to general events view. graylog2-server#19354 graylog2-server#19853

• Added Microsoft Teams Notification V2 which is compatible with Microsoft Workflows. graylog2-server#19983

• Fix error when installing content pack with stream_title parameter. graylog2-server#20244

Fixed

• Fixes handling of error results in the lookup cache. graylog2-server#19159 graylog2-server#20167 graylog2-server#19670

• Fixed issue where grok_exists pipeline rule would return true for substrings of pattern names. graylog2-server#20264 graylog2-server#20263

• Fix issue where content pack stream dependencies were not properly resolved for some dashboards. graylog2-server#20265 graylog2-server#20288

Graylog 6.0.5

Released: 2024-08-07

Added

• Add optional ignoreExtraFieldNames parameter to csv_to_map pipeline function. graylog2-server#19865

Changed

• Implement table border color with more contrast. graylog2-server#20001

Fixed

• Sorting custom field mappings has been fixed, it does not fail on null values anymore. graylog2-server#19694graylog2-server#19960

• Fixing copy button in scratchpad modal. graylog2-server#19822 graylog2-server#19823

• Fixed issue where unescaped quotes in Custom HTTP notification JSON payloads breaks the notifications. graylog2-server#19951

• Properly parse trailing padding bytes in IPFIX data sets. graylog-plugin-integrations#395 graylog2-server#20073

Graylog 6.0.4

Released: 2024-07-03

Fixed

• Fixing copying to clipboard in non-secure contexts. graylog2-server#19643graylog2-server#19654

• Fix sidecar undefined error graylog2-server#19487

• Update “Jackson” to version 2.17.1 to prevent potential memory issues. graylog2-server#19629

• Fix processing failures due to lookup failures in the IPInfo geolocation database. graylog2-server#19750 graylog2-server#19753

Graylog 6.0.3

Released: 2024-06-05

Fixed

• Preventing double prefixing of navigation items when path prefix is present. graylog2-server#18463graylog2-server#19515

• Fix Grok field extraction for patterns with converters. graylog2-server#18883graylog2-server#18898

• Fix selecting option in more results select on pipeline simulator page. graylog2-server#18932graylog2-server#19413

• Fix issue with widget timerange, query, and streams filter for events widget on dashboards. graylog2-server#19486graylog2-server#19537

• Fixed error when the string_array_add function is supplied a null value. graylog2-server#19439

Graylog 6.0.2

Released: 2024-05-22

Fixed

• Clarify rule simulation processing. graylog2-server#18359graylog2-server#19261

• Fixes Recent Activity pagination so that it does not ignore entries for deleted items. graylog2-server#19313graylog2-server#19394

Graylog 6.0.1

Released: 2024-05-13

Added

• Introduce new pipeline functions remove_single_field and remove_multiple_fields to (eventually) replace remove_field. graylog2-server#19098 graylog2-server#19268

Fixed

• Display field value suggestions when field name is in the middle of the search query. graylog2-server#18288graylog2-server#18952

• Fixing several smaller bugs with keyword time range tab. graylog2-server#18809graylog2-server#18879

• Fixed user permission-based filtering on Event Definitions. graylog2-server#19007graylog2-server#19262

• Do not show confirm dialog when saving event notification. graylog2-server#19014graylog2-server#19073

• Fix display tooltip for help icons in disabled menu items. graylog2-server#19092graylog2-server#19093

• Add sidecar filebeat collector for windows again. graylog2-server#19195graylog2-server#19325

• Fix index set deletion issues. graylog2-server#18994graylog2-server#19030

• Fix manage extractors link for local input graylog2-server#19111graylog2-server#19260

• Fixing full page refreshes for menu items with href. graylog2-server#19276

Graylog 6.0.0

Released: 2024-04-17

Added

• Added support for sending HTTP Notification API Key/Secret as a header graylog2-server#14691 graylog2-server#17369

• Store message receive and processing times in ES/OS fields. graylog2-server#16284

• Added the Email Notification ID to the System Notification for Missing Email Recipients. graylog2-server#16988graylog2-server#17061

• Added a keyboard shortcuts page graylog2-server#17082 graylog2-server#17083

• Move existing DataNode config into separate page. graylog2-server#17085 graylog2-server#17104

• Data nodes now publish state machine state. Provides a backend for data node table including state information. graylog2-server#17247graylog2-server#17382

• Add action for field type management page to remove custom field types. graylog2-server#17284 graylog2-server#17281

• Add filtering to index field types page graylog2-server#17285 graylog2-server#17326

• Added remove custom field type bulk action to index set field type page graylog2-server#17286 graylog2-server#17429

• Add option to add custom field type to non existing field. Add option to change field type with option to choose field from the list graylog2-server#17343 graylog2-server#17408

• Datanode preflight check for data directory compatibility graylog2-server#17424 graylog2-server#17487

• Datanode Cluster Management UI graylog2-server#17704 graylog2-server#17881

• Add index set field type profiles overview and edit page graylog2-server#17746 graylog2-server#17775

• Add action to profile creation from selected types graylog2-server#17746 graylog2-server#18027

• Add deleting index set field type profile action graylog2-server#17815graylog2-server#18031

• Add new column ‘Origin’ to index set field type mapping page instead of is custom graylog2-server#17934graylog2-server#17878

• Added ‘field_value_suggestion_mode’ config parameter, that allows to switch field value suggestions off, turn them on and turn them on only for textual fields. graylog2-server#18032graylog2-server#18095

• Added 4 pipeline functions for general use that were previously only available to Illuminate. graylog2-server#6112

• Add search result statistics on the main search screen and execution info popover to each dashboard widget graylog2-server#7386 graylog2-server#16130

• Add Create new dashboard widget action graylog2-server#7629 graylog2-server#17582

• Added customizable HTTP notification that supports multiple methods and content types. graylog2-server#16758

• Implement option for graylog.conf to define shortest possible search auto-refresh interval. graylog2-server#16972graylog2-server#17011 graylog2-server#17029

• Including basic data node usage information in telemetry. graylog2-server#17042

• Add index set field type management page graylog2-server#17160 graylog2-server#17070

• data node cluster name is configurable graylog2-server#17143

• Added support for POST and PUT requests for ‘JSON path value from HTTP API’ Input. graylog2-server#17235

• data node life cycle management: removal of nodes graylog2-server#16820 graylog2-server#17248

• Adding Data Tiering functionality to Graylog Open providing users with a more intuitive and flexible approach to configuring index rotation, retention, and data tiering. graylog2-server#17348

• Add start/stop lifecycle functions to data node. Add validations for triggering data node lifecycle functions. graylog2-server#17383 graylog2-server#17402

• Added support for looking up Email Notification sender, reply to, and recipient emails in lookup tables. graylog2-server#17498

• Fallback guide on how to do manual migration into the DataNode graylog2-server#17707

• Adding a resource to manage the CA to regular Graylog (not only during preflight) graylog2-server#17775

• Add a job_scheduler_concurrency_limits configuration option to limit the parallel execution of job types. graylog2-server#17880

• Add profile selection to index set edit/add form and index set field types page graylog2-server#17751graylog2-server#17750 graylog2-server#17956

• Adding hooks.logout hook which is called when the user logs out graylog2-server#17965

• Added state map and corresponding rest resources for datanode migration wizard graylog2-server#18001

• Extend search query input with option to view search query history. graylog2-server#18067

• add datanode migration ui graylog2-server#18079

• Added link to first start logs to log into preflight UI graylog2-server#18113

• add bulk management capabilities for data nodes graylog2-server#17732 graylog2-server#18121

• Add support for searchable snapshots in data node graylog2-server#18357

• Propagate path.repo configuration in datanode. Needed to support fs snapshot repositories graylog2-server#18369

• Allow adding aggregations to event processor for use with EventModifiers graylog2-server#18372

• bumping OpenSearch inside the DataNode to 2.12.0 graylog2-server#18386

• show Journal Size in In-Place Migration steps graylog2-server#18492

• create client certificates for the DataNode for 3rd party apps graylog2-server#18522

• Add UI for Data Node client certificate creation graylog2-server#16466graylog2-server#18566

• Add Remote reindex connection check, and display indices with errors. graylog2-server#18621

• Add ‘all’ keyword for datanode rest api proxy, aggregating responses from all connected datanodes graylog2-server#18780

Changed

• The default value for the data_dir configuration option has been removed. It needs to be configured explicitly now. graylog2-server#13673 graylog2-server#15902

• Set SameSite attribute in cookies. graylog2-server#16428 graylog2-server#18329

• Changed Content Packs handling to allow import/export of entites that reference Streams by title. graylog2-server#16743

• Enable sidecar default configurations to be updated on existing installs. graylog2-server#17040 graylog2-server#17246

• Add Data Node pre-flight check to validate the vm.max_map_count sysctl value. graylog2-server#17430 graylog2-server#17436

• Automatically choose default number of process-buffer and output-buffer processors based on available CPU cores. graylog2-server#17450 graylog2-server#17737

• Ensure password secret meets the minimum length requirement if using/for the DataNode. graylog2-server#17523 graylog2-server#17719

• Updated the select_jsonpath pipeline function to accept JSON strings as the json parameter in addition to parsed JsonNode objects. graylog2-server#17647 graylog2-server#17683

• Provide more verbose error messages for HTTPJSONPath data adapter. graylog2-server#17649 graylog2-server#17801

• Add ability to specify a TTL for null values in lookup table caches. graylog2-server#16466 graylog2-server#17994

• Suppress index_not_found_exception when there is a race between querying and deleting an index. graylog2-server#18127 graylog2-server#18146

• Shorten time range of show received messages buttons on inputs, forwarder profiles and sidecars. graylog2-server#5620 graylog2-server#5621

• Flag an error in rule source editor when variable name is a reserved word. graylog2-server#7006 graylog2-server#17736

• Update io.prometheous:simpleclient to version 0.16.0. graylog2-server#16743

• Update com.floreysoft:jmte from 5.0.0 to 7.0.2 graylog2-server#16747

• Datanode directries don’t use nodeid subdirs anymore graylog2-server#17255

• Allow trusted header authentication only for initial session creation. graylog2-server#17483

• Changed logging in Message class. When invalid message key is found and ignored, that fact is logged with INFO level. Rate limited log is used in order to not overwhelm logs with this kind of log messages. graylog2-server#17601

• Unify the way numeric fields are displayed in the message table widget, compared with the data table widget. graylog2-server#17693

• Wait for Datanode to become available during graylog server startup graylog2-server#17758

• Transition from javax to jakarta namespace. graylog2-server#17765

• Adds a new optional parameter exclude_empty_arrays for pipeline function select_jsonpath. graylog2-server#17805graylog2-server#18674

• Remove dependency to Mongojack 2 graylog2-server#18016

• Trigger system notification for IO exceptions during HTTP data adapater lookup. graylog2-server#18022

• Require authentication for visiting API browser to limit information exposure. graylog2-server#18328

• Improve keyword validation in time range picker. graylog2-server#18219

• Update Apache Shiro to 2.0.0 graylog2-server#18430

• Consider http_external_uriwhen setting the cookie path. graylog2-server#18472

• Change default second sort order to gl2_second_sort_field. graylog2-server#18348 graylog2-server#18527

• Introduce MessageFactory and ResultMessageFactory Java interfaces and change Message constructors to be package-private. (See upgrading notes for details!) graylog2-server#18535

• Datanode opensearch proxy endpoints support targetting specific nodes graylog2-server#18536

• Compute indices overview statistics using _cluster/stats to reduce the amount of data returned.graylog2-server#18564

• Improve parameter description of pipeline function csv_to_mapgraylog2-server#18589 graylog2-server#18707

• Modified default values for min and max shard size for Time-Size-Optimizing rotation strategy to better match typical node resourcing. graylog2-server#18609

• Rename datanode opensearch proxy paths graylog2-server#18688

• Add support for query params in datanode opensearch and datanode rest API proxies graylog2-server#18749

• When installing a content pack in cloud, ignore any inputs that are not cloud-compatible. graylog2-server#18688

• d failures and fix sort order for search export. graylog2-server#18787

• Remote reindex migration in datanode now uses async opensearch tasks. graylog2-server#18825

Removed

• The close index button has been removed from the index set overview page for a specific index. graylog2-server#17570 graylog2-server#18037

• Remove web interface plugin systemnavigation. graylog2-server#17309

• Removed deprecated methods in org.graylog2.plugin.Message class: addStringFields, addLongFields, addDoubleFields, getValidationErrors. graylog2-server#17585

• Removed unused classes: org.graylog2.plugin.SingletonMessages and org.graylog.plugins.views.search.engine.LuceneQueryParsingException. graylog2-server#17618

Fixed

• Provide more diagnostic information when stream rule fails. graylog2-server#13499 graylog2-server#18539

• Fix problems with unknown-field validation warnings on fields like gl2_source_input. From now on, Query Validation never treats special GL fields as unknown. graylog2-server#13856 graylog2-server#17515

• Fix timezone issue with date picker, which resulted in highlighting the wrong selected day. graylog2-server#16096graylog2-server#16973

• debounce Query Change in Alerts & Events graylog2-server#16388 graylog2-server#17987

• Fix rule builder dropdown UX graylog2-server#16980 graylog2-server#17919

• Fix tooltip colors on Rule Editor. graylog2-server#17204 graylog2-server#17220

• Fixing problem with persisting selected page size for some paginated lists. graylog2-server#17261 graylog2-server#17278

• Fixed event aggregation handling when aggregating on missing fields graylog2-server#17314 graylog2-server#17604

• Improve migration and error handling for event definitions that are missing a field value. graylog2-server#17367

• Fix preflight basic auth prompt when password has not been entered graylog2-server#17385 graylog2-server#17405

• Pipeline rule simulator - JSON inside message graylog2-server#17464 graylog2-server#17817

• Fix filebeat path for sidecar default templates and default configurations. graylog2-server#17526 graylog2-server#17624

• Fix ineffective search query after exporting search to dashboard graylog2-server#17619 graylog2-server#17621

• added actions on datanode datails page graylog2-server#17705 graylog2-server#17840

• Fields gl2_message_id and streams are now reserved and cannot be changed by custom mappings. No reserved field can be changed when you manually change custom mappings in MongoDB - it will be ignored. graylog2-server#17728 graylog2-server#17766

• Allow the index range clean up periodcal to delete index ranges that are no longer managed by an index set graylog2-server#17815 graylog2-server#17841

• Fixed error when attempting to share entities with stream dependencies. graylog2-server#17882 graylog2-server#17891

• Corrected parameter description for handle_dup_keys in the pipline rule key_value function. If not specified, the function defaults to using the first encountered value for duplicate keys. Fixed default values when using the rule builder. graylog2-server#17892 graylog2-server#17969

• Fix issue where enabled event definitions would be incorrectly set to disabled through the REST API. graylog2-server#17958 graylog2-server#17959

• Fixing UI runtime error when request for alerts overview returns an error. graylog2-server#17995 graylog2-server#18000

• Fixes MoreSearch, so that it does not throw errors when affected indices are null or empty. Because of that, MoreSearch is safer to use on fresh installation, with no events and therefore no index ranges for events indices. graylog2-server#18002 graylog2-server#18023

• Reverts fix for #16029 due to regression in GeoIP lookup table access. graylog2-server#18017 graylog2-server#18322

• Fix index set defaults not being reflected in the form without reload. graylog2-server#18049 graylog2-server#18098

• Fixing problem with query input which can make the search bar disappear. graylog2-server#18053 graylog2-server#18470

• Fix CertificatesProvisioning no support for remote reindex migration graylog2-server#18411 graylog2-server#18410

• Fixed automatic pop-up triggering for clearing notifications on the events definition overview page. graylog2-server#18633 graylog2-server#18646

• Fix Pipeline rule editor: Prevent Abandon Page Confirmation. graylog2-server#18718 graylog2-server#18845

• Reset events widget pagination when executing search. graylog2-server#18915 graylog2-server#18945

• Fix permissions handling in events widget. graylog2-server#18949 graylog2-server#18953

• Fixing stream filtering in events search type. graylog2-server#18971 graylog2-server#18972

• Fixing text color for unqualified fields in field select. graylog2-server#18975 graylog2-server#18976

• Fixing "unknown format" error on Sidecar overview page. graylog2-server#19012graylog2-server#19128

• Error page was shown when navigating to search page with permissions to some streams (usually non-mesage streams, like events), but no permission for default stream. It has been fixed.graylog2-server#17548

• DataNode: if no node name was specified, use the hostname as node name default. graylog2-server#17025

• Fixed opensearch configuration sync permissions graylog2-server#17059

• Fix Content pack install modal having two superposed modal element graylog2-server#16834 graylog2-server#15752 graylog2-server#17073

• Exclude non-message streams from aggregation event searches.graylog2-server#17087

• Show ignore_null configuration on lookup cache form. graylog2-server#15200 graylog2-server#17218

• Fix redirect after creating contentpack revision. graylog2-server#17071 graylog2-server#17233

• Fix Sidecar collector configuration form submit button not being clickable. graylog2-server#17185 graylog2-server#17280

• Fix inputs extractors list not updating after deletion graylog2-server#16858 graylog2-server#17289

• Prevent adding same entity data table filter multiple times graylog2-server#17362

• Fix allow displayName in systemConfiguration plugin export. graylog2-server#15939 graylog2-server#17407

• Fix editing of system notification event defitinions. graylog2-server#17435

• Fix archiving when batch size exceeds ES/OS http.max_content_length. graylog2-server#17449

• Show correct throughput metric when messages are routed via pipeline rules. graylog2-server#17456

• Fix excessive logging of warnings for metrics requests after session expiration. graylog2-server#17477

• By default, none and close index retention strategies are disabled for new installations. graylog2-server#17552

• Fix issue preventing the array_contains pipeline function from working with json arrays graylog2-server#17611

• Fix distribution of table column width for print version of data table and message list widget graylog2-server#17642

• Remove entity from bulk select state, when removing single entity in tables with bulk actions. graylog2-server#17656

• Fixing text alignment of highlighted numbers in data tables. graylog2-server#17678

• Fix issue preventing the lookup_all pipeline function from working with json arrays graylog2-server#17820

• Fixed bug causing null response from array_contains pipeline function when passed null array. graylog2-server#17909

• Fix LDAP / AD authentication with legacy TLS. graylog2-server#18028

• Fix Session not timing out on index set details page graylog2-server#18063 graylog2-server#18091

• Fix support for changed IPinfo ASN mmdb files. graylog2-server#18124

• Fix unintended HTML-escaping in system notification messages. graylog2-server#18171

• More restrictive file permissions for support bundle files. graylog2-server#18174

• Add permission check for displaying content pack uninstall details. graylog2-server#18177

• Avoid logging Graylog node ID multiple times during server startup. graylog2-server#18219

• Do not display info for dashboard query filter in aggregation builder, when dashboard query is empty graylog2-server#18241

• OpenSearch renamed cluster.initial_master_nodes to initial_cluster_manager_nodes, which was not reflected yet and is a possible cause of startup bugs. graylog2-server#18342

• Add a sensible default value for OpenSearch inside the DataNode for indices.query.bool.max_clause_count graylog2-server#18354

• bumping the OpenSearch client to 2.12.0 graylog2-server#18386

• fix RemoteReindexRunning step showing wrong actions graylog2-server#18542

• fix duplicate license warning in DataNodesClusterManagementPage graylog2-server#18559

• Fix Search query input in event definition form removing its value while typing. graylog2-server#18700 graylog2-server#18742

• improve Remote Reindex Migration Indices display UX.graylog2-server#18754

• Remove not yet configured datanodes (empty transport address) from indexer discovery graylog2-server#18802

• Fix max. number of indices shown for Index Time Size Optimizing strategy. graylog2-server#14845 graylog2-server#18804

• Fix clone modal immediately closing in Sidecar configuration graylog2-server#18811 graylog2-server#18828

• Fix unknown field caused_by in remote reindex migration task class graylog2-server#18907

• Add beta info to data node preflight and overview page graylog2-server#19038graylog2-server#19039

• Fix rules editor showing warning when saving. graylog2-server#19008graylog2-server#19059

• Tieing events widget to configured time range. graylog2-server#18914graylog2-server#18954

Security

• Always create new sessions for authentication attempts to fix a potential session fixation vulnerability. GHSA-3xf8-g8gr-g7rh

• Restrict classes allowed for cluster config and event types. GHSA-p6gg-5hf4-4rgjgraylog2-server#18165

Graylog 5.2.11

Released: 2024-09-04

Added

• Added Microsoft Teams Notification V2 which is compatible with Microsoft Workflows. graylog2-server#19983

• Fix error when installing content pack with stream_title parameter. graylog2-server#20244

Fixed

• Fixed issue where grok_exists pipeline rule would return true for substrings of pattern names. graylog2-server#20264graylog2-server#20263

• Fix issue where content pack stream dependencies were not properly resolved for some dashboards. graylog2-server#20265graylog2-server#20288

Graylog 5.2.10

Released: 2024-08-07

Changed

• Implement table rows border color with more contrast. graylog2-server#20001

Fixed

• Properly parse trailing padding bytes in IPFIX data sets. graylog-plugin-integrations#395 graylog2-server#20073

Graylog 5.2.9

Released: 2024-07-03

Fixed

• Fix sidecar undefined error graylog2-server#19487

Graylog 5.2.8

Released: 2024-06-05

Added

• Introduce new pipeline functions remove_single_field and remove_multiple_fields to (eventually) replace remove_field. graylog2-server#19098graylog2-server#19300

Fixed

• Fixed error when the string_array_add function is supplied a null value. graylog2-server#19439

Graylog 5.2.7

Released: 2024-04-30

Fixed

• Display field value suggestions when field name is in the middle of the search query. graylog2-server#18288graylog2-server#18952

Graylog 5.2.6

Released: 2024-04-03

Fixed

• Reverts fix for #16029 due to regression in GeoIP lookup table access. graylog2-server#18017 graylog2-server#18322

• Fixed automatic pop-up triggering for clearing notifications on the events definition overview page. graylog2-server#18633 graylog2-server#18646

Graylog 5.2.5

Released: 2024-03-06

Changed

• Suppress index_not_found_exception when there is a race between querying and deleting an index. graylog2-server#18127graylog2-server#18146

Fixed

• Fixed event aggregation handling when aggregating on missing fields. graylog2-server#17314graylog2-server#17604

• Fixing problem with query input which can make the search bar disappear. graylog2-server#18053graylog2-server#18470

• Fix support for changed IPinfo ASN mmdb files. graylog2-server#18124

• Fix potential deadlock in async query string validation. graylog2-server#16883graylog2-server#18461

Graylog 5.2.4

Released: 2024-02-07

Added

• Added field_value_suggestion_mode config parameter that allows to switch field value suggestions off, turn them on, and turn them on only for textual fields. graylog2-server#18032graylog2-server#18095

• Added link to first start logs to log into preflight UI. graylog2-server#18113

Changed

• Ensure password secret meets the minimum length requirement if using/for the Data Node. graylog2-server#17523graylog2-server#17719graylog2-server#18111

• Updated the select_jsonpath pipeline function to accept JSON strings as the json parameter in addition to parsed JsonNode objects. graylog2-server#17647graylog2-server#17683

Fixed

• Improve migration and error handling for event definitions that are missing a field value. graylog2-server#17367graylog2-server#18051

• Fixing UI failour when getting Processing and Indexing Failures stream name for non enterprise version. graylog2-server#17743graylog2-server#18143

• Fixed error when attempting to share entities with stream dependencies. graylog2-server#17882graylog2-server#17891

• Fix issue where enabled event definitions would be incorrectly set to disabled through the REST API. graylog2-server#17958graylog2-server#17959

• Fixing UI runtime error when request for alerts overview returns an error. graylog2-server#17995graylog2-server#18000

• Fix issue preventing the lookup_all pipeline function from working with JSON arrays. graylog2-server#17820

• Fixed bug causing null response from array_contains pipeline function when passed null array. graylog2-server#17909

• Propagate proxied request body to OpenSearch. graylog2-server#17984

• Fix LDAP/AD authentication with legacy TLS. graylog2-server#18028

• Fix Session not timing out on index set details page. graylog2-server#18063graylog2-server#18091

• Add permission check for displaying content pack uninstall details. graylog2-server#18177

Security

• Always create new sessions for authentication attempts to fix a potential session fixation vulnerability. GHSA-3xf8-g8gr-g7rh

• Restrict classes allowed for cluster config and event types. GHSA-p6gg-5hf4-4rgjgraylog2-server#18165

Graylog 5.2.3

Released: 2024-01-03

Changed

• Changed content packs handling to allow import/export of entities that reference streams by title. graylog2-server#16743

Removed

• Removed legacy Sidecar collector migration link in UI. graylog2-server#17602

Fixed

• Fix filebeat path for sidecar default templates and default configurations. graylog2-server#17526graylog2-server#17624

• Fix ineffective search query after exporting search to dashboard. graylog2-server#17619graylog2-server#17621

• Fix content pack install modal having two superposed modal element. graylog2-server#16834graylog2-server#15752graylog2-server#17073

• Fix Sidecar collector configuration form submit button not being clickable. graylog2-server#17185graylog2-server#17280

• Fix issue preventing the array_contains pipeline function from working with JSON arrays. graylog2-server#17611

• Fix distribution of table column width for print version of data table and message list widget. graylog2-server#17642

• Fixing text alignment of highlighted numbers in data tables. graylog2-server#17678

Graylog 5.2.2

Released: 2023-12-06

Added

• Added support for sending HTTP Notification API Key/Secret as a header. graylog2-server#14691graylog2-server#17369

• Added 4 pipeline functions for general use that were previously only available to Illuminate.graylog2-server#6112

Changed

• Add Data Node pre-flight check to validate the vm.max_map_count sysctl value. graylog2-server#17430graylog2-server#17497graylog2-server#17512

Fixed

• Fix preflight basic auth prompt when password has not been entered. graylog2-server#17385graylog2-server#17405

• Prevent adding same entity data table filter multiple times. graylog2-server#17362

• Fix editing of system notification event definitions. graylog2-server#17435

• Fix archiving when batch size exceeds ES/OS http.max_content_length. graylog2-server#17449

• Fix excessive logging of warnings for metrics requests after session expiration. graylog2-server#17477

Graylog 5.2.1

Released: 2023-11-15

Added

• Added the Email Notification ID to the System Notification for Missing Email Recipients. graylog2-server#16988graylog2-server#17061

• Including basic data node usage information in telemetry. graylog2-server#17042

Changed

• Enable sidecar default configurations to be updated on existing installs. graylog2-server#17040graylog2-server#17246graylog2-server#17282

Fixed

• Fix timezone issue with date picker, which resulted in highlighting the wrong selected day. graylog2-server#16096graylog2-server#16973

• Fix tooltip colors on Rule Editor. graylog2-server#17204

• Fixing problem with persisting selected page size for some paginated lists. graylog2-server#17261graylog2-server#17278

• DataNode: if no node name was specified, use the hostname as node name default. graylog2-server#17025

• Fixed opensearch configuration sync permissions, backport of #17059 graylog2-server#17078

Graylog 5.2.0

Released: 2023-11-01

Added

• The max number of indices is now persisted when changing strategies in the index retention strategy configuration graylog2-server#13975graylog2-server#16860

• Add log messages like in the old JEST client to show nodes arriving/dropping from an ES/OS cluster graylog2-server#14383graylog2-server#14898

• Create time range quick access list for multiple time range types graylog2-server#15484

• Add sidecar graylog_host variable, Auditbeat collector for Linux and default configurations. graylog2-server#15570graylog2-server#15571

• Create undo/redo actions in search graylog2-server#15704

• Track when an event definition was last successfully matched. graylog2-server#15751graylog2-server#16071

• Add bulk action for streams overview to start a search with selected streams. graylog2-server#15975graylog2-server#16015

• Secure datanode REST API with the same SSL certificate as the one used for Opensearch HTTP graylog2-server#15990graylog2-server#16058

• Enable basic auth for datanode rest API if security is enabled graylog2-server#16447graylog2-server#16446

• New Content Stream section to welcome page to show Rss feed and Release notice. graylog2-server#15843

• New pipeline rule functions for map manipulation: map_set, map_remove. graylog2-server#6470graylog2-server#16174

• Optional flag to invert condition of remove_field function. graylog2-server#8128graylog2-server#16182

• Added event definition title as a summary to Microsoft Teams notifications. graylog-plugin-integrations#1341graylog-plugin-integrations#1343

• Run matrix tests with a given indexer version. graylog2-server#15088

• Datanode autodiscovery, indexer hosts refactoring, preflight startup logic implemented graylog2-server#15197

• server#15222

• Add Sidecar Reader and Sidecar Manager roles to read and manage sidecars. graylog2-server#12044graylog2-server#15380

• Add system logs to nodes overview page. graylog2-server#15381

• AMQP input improvements: retry connection with configurable interval and encrypt password. graylog2-server#12447graylog2-server#15401

• Adding specific field types for streams, node & input fields. graylog2-server#15409

• Advanced field types for scripting API - support for stream, node and input name resolution graylog2-server#15421

• Resolving input/streams/node ids in aggregation results, showing titles. graylog2-server#15464

• Pipeline Rule Builder UI graylog2-server#15490graylog2-server#15470

• Allow simulation of json messages on the rule creation page graylog2-server#15490graylog2-server#15480

• Add CA configuration to load a given CA during startup for datanode certificate provisioning. graylog2-server#15546

• Restrict time size based rotation strategy duration leeway on cloud graylog-plugin-cloud#1149graylog2-server#15556

• Implementing highlighting for advanced field types (streams, nodes, inputs). graylog2-server#15601

• Include titles of advanced field types in suggestions. graylog2-server#15614

• Updating Sources Dashboard with better widgets to gain insights into log volume distribution. graylog2-server#15677

• Added the string_entropy pipeline function. graylog2-server#15682

• Implementing percentage metric for aggregations. graylog2-server#6763graylog2-server#15738

• Add action to cleanup & rebuild index ranges of all index sets. graylog2-server#11919graylog2-server#15808

• Adding values pivot option to disable empty buckets. graylog2-server#15814

• Enabling percentage/percentile metrics in event definitions. graylog2-server#10082graylog2-server#15863

• Add event limit for filter event definition. graylog-plugin-enterprise-integrations#5382graylog2-server#16035

• Implement option to change order of search highlighting rules. graylog2-server#16095

• Mark users synced from a deactivated authorization backend in user overview list and on user detail page. graylog2-server#13823graylog2-server#16134

• Add pipeline name and stage to log output when an exception occurs during pipeline processing. graylog2-server#8627graylog2-server#16161

• Add API endpoint for event definition duplication. graylog2-server#16251

• Introduce telemetry custom event name graylog2-server#16317

• DataNode: if you use the DataNode, the nodes system clocks have to be synchronized for JWT usage. graylog2-server#16334

• Add change field type action for a field graylog2-server#16469graylog2-server#16344

• Added ability to clean field names for set_field and set_fields pipeline functions graylog2-server#7137graylog2-server#16514

• Enabling pre-flight UI for general availability. graylog2-server#16722

• Enabling field type management for general availability. graylog2-server#16773

• Include link to replay an alert in teams and slack notification template. graylog-server#15678graylog-plugin-integrations#1348

Changed

• Display keyword in time range summary instead of from / to range. Display effective search execution time range in sidebar, which can be helpful for relative and keyword time ranges. graylog2-server#11401graylog2-server#15961

• Memorize state of time range tabs in time range picker while picker is open. graylog2-server#11465graylog2-server#16107

• Implement share button for saved searches overview. graylog2-server#15355graylog2-server#16126

• Read CSP directives from a resource property file. graylog2-server#15370graylog2-server#15439

• On View Event Definition page added Duplicate button and removed Edit button for definitions that are scoped as immutable. graylog2-server#15916graylog2-server#16515

• Unify auto-refresh behavior in case there are form changes. graylog2-server#16893

• Updated AWS Java SDK to the latest version graylog-plugin-enterprise-integrations#971graylog2-server#14712

• Update Content Security Policy on the fly, when an authentication backend is created. graylog2-server#15371graylog2-server#15305

• Moved AWS plugin into server repository. graylog2-server#15318

• ‘Show received messages’ for forwarder inputs now queries for messages using the new gl2_forwarder_input field. graylog2-server#15378

• Update Kafka client library from 2.7.0 to 3.4.0. graylog2-server#15488

• Using composable index templates instead of legacy templates. graylog2-server#15782graylog2-server#15948

• When entity was added to the favorites, it was added to the end of the list. It meant that top of the favorites’ list contained entities that had been added first to the list. It seemed wrong. From now on, the newly added entity will be shown on the top of the favorites’ list. graylog2-server#16050

• Make creation_date optional when creating index sets via api. If none is provided, the current server time will be used. graylog2-server#4709graylog2-server#16166

• Show syntax error in pipeline rule editor when trying to access nested variables using an array literal, e.g. result.["key"]. graylog2-server#16029graylog2-server#16196

• Introduce a cache configuration setting to avoid caching empty values. graylog2-server#13579graylog2-server#15200graylog2-server#16199

• Merging integrations plugin into core repository. graylog2-server#16274

• Publish system events asynchronously to prevent threads getting blocked. graylog2-server#16426

Deprecated

• Adding REST endpoint to create custom field type mappings for index sets. graylog2-server#16241

• GreyNoise Data Adapter functionality has been limited to only use with non-community GreyNoise subscriptions. graylog-plugin-integrations#1340graylog-plugin-enterprise-integrations#1059graylog2-server#15592

Removed

• Remove support for legacy Collector Sidecars. graylog-project-internal#102

• Remove obsolete ElasticsearchConfigMigration and AddRetentionRotationAndDefaultFlagToIndexSetMigration migrations. graylog2-server#16153

• Remove ERROR level logs that happened during user/role creation. graylog2-server#16184

Fixed

• Display indicator when dashboard has unsaved changes. graylog2-server#10682graylog2-server#16122

• Validate in aggregation builder if metric name is unique. graylog2-server#11592graylog2-server#16097

• Fix join() and substring() pipeline function parameter names. graylog2-server#11868

• Do not show query input suggestions when using Add to query field value action. graylog2-server#12165graylog2-server#15885

• We improved the index set overview page performance and added a title-based search feature. graylog2-server#12498graylog2-server#15155

• Fix test lookup not accepting uppercase characters graylog2-server#14373graylog2-server#16909

• Make sure that boolean fields are returned as true|false in aggregations on Opensearch 2.4+. graylog2-server#14661graylog2-server#15809

• Adjust keybindings for query input autocompletion. graylog2-server#14793graylog2-server#16162

• Fix heatmap colorbar font color for dark mode. graylog2-server#15035graylog2-server#16129

• Improve readability of hover legend in aggregations. graylog2-server#15084graylog2-server#15888

• Enable/Disable Event Definition status when clicking on status badge. graylog2-server#15095graylog2-server#16203

• Fix: BulkActions dialog not closing after clicking on Confirm. graylog2-server#15259graylog2-server#15384

• Fix pagination problems on Events page. graylog2-server#15273graylog2-server#15357

• Fix problem with search bar submit button incorrectly indicating changes for keyword time range. graylog2-server#15472graylog2-server#15938

• Apply pivot limits correctly when installing saved searches/dashboard from pre-5.1 content packs. graylog2-server#15509graylog2-server#15523

• Make sure that search is reexecuted when ‘Add to query’/‘Remove from query’ on dashboards. graylog2-server#15519graylog2-server#15593

• Properly prefix frontend paths to prevent error when custom app path suffix is used. graylog2-server#15536graylog2-server#15540

• Use search query from URL params for dashboard page search input. graylog2-server#15536graylog2-server#15540

• When modifying a user’s session timeout, the system will automatically update existing user sessions to ensure application of the new timeout settings. graylog2-server#15609graylog2-server#15657

• Remove LastOpened and Favorite items from internal Entity List graylog2-server#15638graylog2-server#15574graylog2-server#15658

• Save modified search when query is changed through URL parameters. graylog2-server#15642graylog2-server#15653

• Restore mail attribute for AD authentication. graylog2-server#15536

• Include link to replay an alert in alert mail notification template. graylog2-server#15678graylog2-server#15922

• Fixes sorting with variance/stddev/sumofsquare metrics. graylog2-server#15707graylog2-server#15878

• Fixing problem with focus loss in query input autocompletion. graylog2-server#15718graylog2-server#15933

• Render values consistently between normal and full screen mode. graylog2-server#15778graylog2-server#15864

• Fixes problems with editing Search Filters of entities installed via Content Packs. Search Filters of those types of entities are not inlined during Content Pack installation and can be edited. graylog2-server#15841graylog2-server#16085

• Disable offline detection for REST API client. graylog2-server#15913graylog2-server#15914

• Show errors again when loading a saved search or dashboard which exceeds the query limit. graylog2-server#15958graylog2-server#15998graylog2-server#16033

• Fix TLS compatibility with older operating systems (e.g. Win Server 2019). graylog2-server#16076

• Cluster initial manager nodes in datanode configurable. graylog2-server#16143graylog2-server#16146

• Improve logic which controls when we show the query input completions. graylog2-server#16207graylog2-server#16168

• Fixes validation of max index retention lifetime for time-size-optimizing indices. graylog2-server#16392

• Updating title of dashboard is now properly saved. graylog2-server#16440graylog2-server#16441

• Fixing broken streams page if streams without matching_type exist. graylog2-server#16474graylog2-server#16522

• Fixing error which occurred when saving a dashboard after deleting a page in the pages configuration modal. graylog2-server#16634graylog2-server#16674

• Fix Geo-Location Processor Configuration modal being stuck after the updating the config failed. graylog2-server#16828graylog2-server#16926

• Fixed error where only most recent revision of a content pack could be installed. graylog2-server#16913graylog2-server#16943

• Fixes search export, so that it takes search filters into consideration. graylog2-server#5793graylog2-server#16896

• Fix wrong lookup cache metrics after reconfiguration. graylog2-server#8633

• Fix GELF output to not block output processing. graylog2-server#9917graylog2-server#15385

• Show all streams in global decorators configuration, fixing display problem graylog2-server#13465graylog2-server#13467graylog2-server#15280

• Improving decorator config by showing map of all decorators present. graylog2-server#14546graylog2-server#15284

• Make sure that search creation has finished before executing it for new saved searches/dashboards. graylog2-server#15435graylog2-server#15437

• Fixing session expiration on the nodes page. graylog2-server#15465

• Fix archiving failure in case of AWS Opensearch 429 error graylog2-server#15503

• Extend authentication cookie’s max age on every session extension. graylog2-server#15502graylog2-server#15504

• Do not extend session when fetching indexer cluster health. graylog2-server#15505

• Keep query order when exporting saved searches/dashboards to content packs. graylog2-server#15341graylog2-server#15528graylog2-server#15505

• Improve widget placement for specific widget sizes/positions. graylog2-server#15308graylog2-server#15538graylog2-server#15545

• NodeService#allActive returns only nodes of correct type based on current server type graylog2-server#15505

• Avoid redirecting to path with trailing / when delivering static assets. graylog2-server#15613

• Fixing search creation when replaying events/event definitions. graylog2-server#15552graylog2-server#15689graylog2-server#15688

• Fix enabled_index_rotation_strategies configuration to allow setting of TimeBasedSizeOptimizingStrategy graylog2-server#15750

• Sort function names, add rule builder fragments with implicit to_string, fix string parameter handling in fragments. graylog2-server#15785

• Fixed query decoration in aggregation alerts. graylog2-server#15737graylog2-server#15793

• Force user to select an entity for when picking a start page type. graylog2-server#15578graylog2-server#15869

• Fix problem with STOPPED reactor on OutOfMemoryError. This error stops the whole GL instance now, instead of constantly logging errors related to stopped reactor. graylog2-server#15889

• Mark required fields in body of API call PUT roles/{rolename}graylog2-server#16019

• Include parameters when replaying search for dashboard widget. graylog2-server#16051

• Fix event definition enable UI state for Filter & Aggregation. graylog2-server#16070graylog2-server#16072

• Fix internal server error for cluster logger level API requests. graylog2-server#11408graylog2-server#14256graylog2-server#16092

• Fix possible NullPointerExceptions when writing pipeline rules with maps. graylog2-server#14818graylog2-server#16175

• Added a new Event Definition column: Last Matched. graylog2-server#15751graylog2-server#16195

• Fix blocked system events index preventing node registration and leader election. graylog2-server#16407

• DNS Resolver Pool warning log message now accurately reflects configured dns_lookup_adapter_resolver_pool_size value. graylog2-server#16475

• Indexer cluster checker thread start is delayed by 5s to avoid potential deadlock. graylog2-server#16481

• Fixes failure to delete indices with time/size optimizing strategy, when write block is not present. graylog2-server#16503

• Fixing display of session timeout unit on user edit page. graylog2-server#16563

• Fix description for the scenario that one term or value has multiple matching highlighting rules. graylog2-server#16668

• By default, ’none’ retention strategy is now disabled for new installations. graylog2-server#16927

• Allow logging metrics to include DEBUG/TRACE level. graylog2-server#10866graylog2-server#16962

• Aligning order of precedence of auth info in proxied resources with general authentication logic. graylog2-server#16985graylog2-server#16999

• Change loggers in indexer subsystem to output all messages related to indexing/searching. graylog2-server#17011graylog2-server#17012

Security

• Fix partial path traversal vulnerability in Support Bundle feature. GHSA-2q4p-f6gf-mqr5

• Fix stale session cache after logout. GHSA-3fqm-frhg-7c85

• Fix insecure source port usage for DNS Lookup adapter queries. GHSA-g96c-x7rh-99r3

• Update SnakeYAML to version 2.2. (fixes CVE-2022-1471) graylog2-server#16377

• Update Jackson to 2.15.2. (CVE-2022-42003) graylog2-server#16377

• Update Scala to 2.13.12 to include fix of CVE-2022-36944. graylog2-server#16456

• Update various third-party libraries to address vulnerabilites. graylog2-server#16476

• Update Netty to 4.1.100 to fix the HTTP/2 Rapid Reset attack. GHSA-xpw8-rcwv-8f8p The security vulnerability affects all Graylog users that run the Graylog Forwarder input on their servers. graylog2-server#16902

Graylog 5.1.13

Released: 2024-04-03

No changes since 5.1.12.

Graylog 5.1.12

Released: 2024-03-06

Fixed

• Fix potential deadlock in async query string validation. graylog2-server#16883graylog2-server#18467

Graylog 5.1.11

Released: 2024-02-07

Changed

• Updated the select_jsonpath pipeline function to accept JSON strings as the json parameter in addition to parsed JsonNode objects. graylog2-server#17647graylog2-server#17683

Fixed

• Fixing UI runtime error when request for alerts overview returns an error. graylog2-server#17995graylog2-server#18000

• Add permission check for displaying content pack uninstall details. graylog2-server#18177

Security

• Always create new sessions for authentication attempts to fix a potential session fixation vulnerability. GHSA-3xf8-g8gr-g7rh

• Restrict classes allowed for cluster config and event types. GHSA-p6gg-5hf4-4rgjgraylog2-server#18165

Graylog 5.1.10

Released: 2024-01-03

Added

• Added the string_entropy pipeline function. graylog2-server#15682

Fixed

• Fix ineffective search query after exporting search to dashboard. graylog2-server#17619graylog2-server#17621

• Fixing problem with legacy theme mode in local storage, which can occur for read-only users when downgrading Graylog. graylog2-server#17368

• Fix distribution of table column width for print version of data table and message list widget. graylog2-server#17642

Graylog 5.1.9

Released: 2023-12-06

Added

• Added support for sending HTTP Notification API Key/Secret as a header. graylog2-server#14691graylog2-server#17369

• Added the Email Notification ID to the System Notification for Missing Email Recipients. graylog2-server#16988graylog2-server#17061

Fixed

• Fix page size select on Alerts & Events page. graylog2-server#17199graylog2-server#17342

• Fixing problem with persisting selected page size for some paginated lists. graylog2-server#17261graylog2-server#17278

• Change loggers in indexer subsystem to output all messages related to indexing/searching. graylog2-server#17011graylog2-server#17012

• Prevent adding same entity data table filter multiple times. graylog2-server#17362

• Fix editing of system notification event definitions. graylog2-server#17435

• Fix archiving when batch size exceeds ES/OS http.max_content_length. graylog2-server#17449

• Fix excessive logging of warnings for metrics requests after session expiration. graylog2-server#17477

Graylog 5.1.8

Released: 2023-11-01

Fixed

• Fix timezone issue with date picker, which resulted in highlighting the wrong selected day. graylog2-server#16096graylog2-server#16973

• Fixed error where only most recent revision of a content pack could be installed. graylog2-server#16913graylog2-server#16943

• Fixes search export, so that it takes search filters into consideration. graylog2-server#5793graylog2-server#16896

Graylog 5.1.7

Released: 2023-10-12

Security

• Update Netty to 4.1.100 to fix the HTTP/2 Rapid Reset attack (GHSA-xpw8-rcwv-8f8p). The security vulnerability affects all Graylog users that run the Graylog Forwarder input on their servers. graylog2-server#16902

Graylog 5.1.6

Released: 2023-10-04

Added

• Add Sidecar Reader and Sidecar Manager roles to read and manage sidecars. graylog2-server#12044graylog2-server#15380

• Added ability to clean field names for set_field and set_fields pipeline functions. graylog2-server#7137graylog2-server#16514

Fixed

• Fixes validation of max index retention lifetime for time-size-optimizing indices. graylog2-server#16448

• Updating title of dashboard is now properly saved. graylog2-server#16440graylog2-server#16441

• Fixing broken streams page if streams without matching_type exist. graylog2-server#16474graylog2-server#16522

• Fixing error which occurred when saving a dashboard after deleting a page in the pages configuration modal. graylog2-server#16634graylog2-server#16674

• Fix event definition enable UI state for Filter & Aggregation. graylog2-server#16070graylog2-server#16072

• Fix blocked system events index preventing node registration and leader election. graylog2-server#16407

• Indexer cluster checker thread start is delayed by 5s to avoid potential deadlock. graylog2-server#16481

• Fixes failure to delete indices with time/size optimizing strategy, when write block is not present. graylog2-server#16503

• Fix description for the scenario that one term or value has multiple matching highlighting rules. graylog2-server#16668

Graylog 5.1.5

Released: 2023-08-02

Fixed

• Display indicator when dashboard has unsaved changes. graylog2-server#10682graylog2-server#16122

• Adjust keybindings for query input autocompletion. graylog2-server#14793graylog2-server#16162

• Fix heatmap colorbar font color for dark mode. graylog2-server#15035graylog2-server#16129

• Fixes problems with editing Search Filters of entities installed via Content Packs. Search Filters of those types of entities are not inlined during Content Pack installation and can be edited. graylog2-server#15841 graylog2-server#16085

Graylog 5.1.4

Released: 2023-08-02

Added

• Adding values pivot option to disable empty buckets. graylog2-server#15814

Fixed

• Fix join() and substring() pipeline function parameter names. graylog2-server#11868

• Do not show query input suggestions when using Add to query field value action. graylog2-server#12165graylog2-server#15885

• Improve readability of hover legend in aggregations. graylog2-server#15084graylog2-server#15888

• Fix problem with search bar submit button incorrectly indicating changes for keyword time range. graylog2-server#15472graylog2-server#15938

• Fixing problem with focus loss in query input autocompletion. graylog2-server#15718graylog2-server#15933

• Render values consistently between normal and full screen mode. graylog2-server#15778graylog2-server#15864

• Decreasing z-index of login background. graylog2-server#15884graylog2-server#15901

• Disable offline detection for REST API client. graylog2-server#15913graylog2-server#15914

• Fix TLS compatibility with older operating systems. (e.g. Win Server 2019). graylog2-server#16076

• Force user to select an entity for when picking a start page type. graylog2-server#15578graylog2-server#15869

Security

• Changed the minimum allowed Anomaly Detector interval to 10 minutes.

• Fixes race condition in range calculation when restoring small indices.

• Fixed handling of backslashes in Sigma rule queries that caused OpenSearch errors.

• Fix unknown email_attributes error when using AD team sync; honor user-configured LDAP attribute names. graylog2-server#15652

Graylog 5.1.3

Released: 2023-07-05

Added

• Added event definition title as a summary to Microsoft Teams notifications. graylog-plugin-integrations#1341graylog-plugin-integrations#1343

Fixed

• Make sure that boolean fields are returned as true|false in aggregations on OpenSearch 2.4+. graylog2-server#14661graylog2-server#15816

• Save modified search when query is changed through URL parameters. graylog2-server#15642graylog2-server#15654

• Fixing search creation when replaying events/event definitions. graylog2-server#15552graylog2-server#15689graylog2-server#15690

• Fix enabled_index_rotation_strategies configuration to allow setting of TimeBasedSizeOptimizingStrategy. graylog2-server#15750

Security

• Fix partial path traversal vulnerability in Support Bundle feature. GHSA-2q4p-f6gf-mqr5

• Fix stale session cache after logout. GHSA-3fqm-frhg-7c85

• Fix insecure source port usage for DNS Lookup adapter queries. GHSA-g96c-x7rh-99r3

Graylog 5.1.2

Released: 2023-06-07

Fixed

• When modifying a user’s session timeout, the system will automatically update existing user sessions to ensure application of the new timeout settings. graylog2-server#15609graylog2-server#15657

• Remove LastOpened and Favorite items from internal Entity List graylog2-server#15638graylog2-server#15574graylog2-server#15658

• Fix user login with AD authentication by restoring the mail attribute. graylog2-server#15536

• Fix GELF output to not block output processing. graylog2-server#9917graylog2-server#15385

• Extend authentication cookie’s max age on every session extension. graylog2-server#15502graylog2-server#15650

Graylog 5.1.1

Released: 2023-05-25

Added

• Add support for a fixed leeway configuration for the time size based rotation strategy. graylog-plugin-cloud#1149 graylog2-server#15556

Fixed

• Fix: BulkActions dialog not closing after clicking on Confirm. graylog2-server#15259graylog2-server#15384

• Apply pivot limits correctly when installing saved searches/dashboard from pre-5.1 content packs. graylog2-server#15509graylog2-server#15582

• Make sure that search is reexecuted when ‘Add to query’/‘Remove from query’ on dashboards. graylog2-server#15519graylog2-server#15599

• Properly prefix frontend paths to prevent error when custom app path suffix is used. graylog2-server#15536graylog2-server#15577

• Use search query from URL params for dashboard page search input. graylog2-server#15536graylog2-server#15540

• Show all streams in global decorators configuration, fixing display problem. graylog2-server#13465graylog2-server#13467graylog2-server#15280

• Do not extend session when fetching indexer cluster health. graylog2-server#15505

• Fixing session expiration on the nodes page. graylog2-server#15507

• Keep query order when exporting saved searches/dashboards to content packs. graylog2-server#15341graylog2-server#15528graylog2-server#15505

• Improve widget placement for specific widget sizes/positions. graylog2-server#15308graylog2-server#15538graylog2-server#15585

Graylog 5.1.0

Released: 2023-05-11

Added

• Provide ability to configure an email attribute for LDAP. graylog2-server#11131graylog2-server#14041

• Add global session timeout configuration. graylog2-server#11379graylog2-server#14343

• Generate an event in the System Event stream for every system notification graylog2-server#12555graylog2-server#14345graylog2-server#13833

• Add support to skip TLS verification on HTTP event notifications. graylog2-server#12959

• Adds a unique username index to the user collection to prevent creation of duplicate users. Any existing duplicates are resolved by appending the user ID. graylog2-server#12963graylog2-server#14649

• Implement option to filter streams overview based on stream status. graylog2-server#13852graylog2-server#14640graylog2-server#14690

• Standardize sort icons for data table and message list. graylog2-server#13982graylog2-server#13987

• Add support for a reply-to address in email notifications. graylog2-server#14254graylog2-server#14337

• Add support for encrypted storage of secret input configuration parameters. graylog2-server#14433graylog2-server#14459

• Add replay search pages for events, alerts and event definitions graylog2-server#14540graylog2-server#14657

• Add functionality which allows user create event definition from values graylog2-server#14544graylog2-server#15054

• Added an “Undo Reset” button to fields in input configuration forms. graylog2-server#14767graylog2-server#15147

• Store selected filters and search query on streams and dashboards overview as URL query params. graylog2-server#14826graylog2-server#15011

• Implement index set filter for streams overview. graylog2-server#14827graylog2-server#14905

• Implement creation date filter for streams overview. graylog2-server#14828graylog2-server#14966

• Implement bulk start and stop action for streams overview. graylog2-server#14881graylog2-server#14882graylog2-server#14883

• Introduce ability to simulate a single pipeline rule in isolation. graylog2-server#14891graylog2-server#14892

• Add telemetry for generic usage metric collection graylog2-server#14900graylog2-server#14979

• Added configurable default timezone to syslogs inputs and parse tz field from FortiGate msg’s graylog2-server#3853graylog2-server#14737syslog4j-graylog2#41graylog-plugin-integrations#1332

• Allow pipeline function remove_field to take a regex pattern instead of a field name. graylog2-server#5653graylog2-server#15131

• Add normalize_fields pipeline rule function for normalizing message field names. graylog2-server#6527graylog2-server#14636

• Implement option to copy a dashboard page to another dashboard. graylog2-server#8506graylog2-server#14348

• Introduces a new pipeline function lookup_has_value to determine if a given key is present in the lookup table. graylog2-server#9173graylog2-server#15143

• Added ability to replay the search that triggered an Event. graylog2-server#9438graylog2-server#13931

• Added output_batch_size to the values exposed by the system/configuration API call. graylog2-server#9461graylog2-server#14123

• Add support for configuring Index Set Defaults graylog2-server#13018

• Replacing getting started guide with start page which lists recently opened and favorite saved searches and dashboards and recent activity. graylog2-server#13970

• Dynamic Startup Page Backend additions for Recent Activity, Pinned Items, Last Opened graylog2-server#13985

• Add option to sort streams returned by API endpoint to be sorted by index set title. graylog2-server#14085

• Add REST API endpoint for bulk assignment of streams to index sets. graylog2-server#14096

• Providing plugin API to supply custom query input commands. graylog2-server#14239

• Added the option to toggle between a linear and a logarithmic axis for area/bar/line/scatter charts. graylog2-server#14269

• Adding inline widget creation in empty slots on grid. graylog2-server#14331

• Graylog Data Node. Initial version. graylog2-server#14417

• Introduces a new index rotation strategy combining features of size-based and time-based strategies. graylog2-server#14424

• Added a page for tracking failures in Sidecar. collector-sidecar#433graylog2-server#14435

• Expose JVM metrics to prometheus. graylog2-server#14437

• Add OpenTelemetry tracing instrumentation to select code paths. graylog2-server#14550

• Add option to bulk delete dashboards in dashboards overview. graylog2-server#14566

• Add option to bulk delete saved searches in saved searches overview. graylog2-server#14567

• Persist selected sorting, displayed columns and page size in streams overview for each user. graylog2-server#14293graylog2-server#14591

• Persist selected sorting, displayed columns and page size in dashboards overview for each user. graylog2-server#14293graylog2-server#14598

• Persist selected sorting, displayed columns and page size in saved searches overview for each user. graylog2-server#14293graylog2-server#14600

• Report runtime failures for polling Inputs. graylog2-server#14726

• Allow user-configurable auto-refresh settings & default interval. graylog2-server#14742

• Enabling the simple search/scripting API. graylog2-server#14749

• Added flattening functionality to the JSON Path Codec. graylog2-server#14851

• Add dashboards, searches, messages and events to an open investigation. graylog2-server#14897

• Add support bundle export feature. graylog2-server#14938

• Added preflight UI for indexer configuration

• Added badge to navigation bar to show when a new Illuminate bundle is ready to download and install. graylog2-server#15001

• Added support for CIDR lookups in CSV file data adapters graylog2-server#15016

• Adds Add Evidence Modal graylog2-server#15148

• Added autodetection of OpenSearch distribution in data node. graylog2-server#15216

• Updating login background and claim. graylog2-server#15215graylog2-server#15295

• Make messages with identical timestamps sortable by ULID graylog2-server#2741graylog2-server#6711

• Added option to omit title portion of Slack notifications to reduce clutter. graylog-plugin-integrations#1172graylog-plugin-integrations#1320

• Added support for timezones in Slack and Teams notifications. graylog-plugin-integrations#1318graylog-plugin-integrations#1320

• Added option to notify @here in Slack notifications. graylog-plugin-integrations#780graylog-plugin-integrations#1320

Changed

• Improved validation of grok pattern definition. graylog2-server#11342graylog2-server#14853

• Consistent use of message identifiers in strings. Message id visible in message list. graylog2-server#13628graylog2-server#14562

• Display streams overview as a table to improve usability. graylog2-server#13887graylog2-server#13930

• Start JSON path value from HTTP API input on leader node only, if Global option was selected in input configuration. graylog2-server#14074

• Changed bulk indexing retry failure log-level from error to warning. graylog2-server#14086graylog2-server#14088

• Changed event definitions and notifications to new paginated list and entity list ui component. This enables bulk deletion of event definitions and notifications and bulk enabling/disabling event definitions. graylog2-server#14285graylog2-server#14502

• Prevent deletion of event definitions that are still referenced in other definitions. graylog2-server#14302graylog2-server#14792

• Disable two TLS ciphers that are considered weak. graylog2-server#14428graylog2-server#14592

• Instead of showing all configurations on one page it is now seperated into sections with a sidebar navigation. graylog2-server#14735graylog2-server#15025

• Generate a system notification when an aggregation search errors out unexpectedly. graylog2-server#14746graylog2-server#14967

• Include URLs for authentication service(s) in the CSP header connect-src. graylog2-server#15238graylog2-server#15283

• GL will no longer perform a temporary redirect based on the Host header. graylog2-server#15067

• Refreshed and modernized look of login dialog. graylog2-server#13780

• Display dashboards overview as a table to improve usability. graylog2-server#14105

• Reduce the default connection and read timeouts for email sending from 60 seconds to 10 seconds graylog2-server#14199

• Display saved searches overview as a table to improve usability. graylog2-server#14223

• Forwarder inputs can be used for the ‘match input’ stream rule. graylog-plugin-cloud#1066graylog2-server#14240

• Sorting streams case-insensitive in API. graylog2-server#14262

• Unify fields configuration in aggregation builder and messages export modal. graylog2-server#14725

• Merging Threat Intel Plugin into server repository. graylog2-server#14953

• Make sure all bindings which use createIndex are threadsafe and make them singletons. graylog2-server#14965

• Remove stack trace from the generic server error response. graylog2-server#14978

• Add a Content Security Policy header to responses. graylog2-server#14991

• Using database time for node registration and heartbeat

• datanode: add conf option to be able to force single-node type

• Set a specific Content Security Policy header for API-Browser responses. graylog2-server#15184

• Update OpenSearch distributed with Datanode to 2.5.0 graylog2-server#15198

• Consistent use of message identifiers in strings. graylog2-server#13628graylog-plugin-aws#673

• Mark CloudTrail input as incompatible with Forwarder. graylog-plugin-aws#676

• Consistent use of message identifiers in strings. graylog2-server#13628graylog-plugin-integrations#1291

Removed

• Removed garbage collection warnings. graylog2-server#8592graylog2-server#14298

• Remove deprecated inputs “AWS Logs (deprecated)” and “AWS Flow Logs (deprecated)”. graylog-plugin-aws#674

Fixed

• Fix Maxmind database types in cloud environment. graylog2-server#13911

• Properly escape event content for HTML email notifications graylog2-server#11183graylog2-server#14286 (Thanks: zhu!)

• Fix count based index rotation on idle indices. graylog2-server#11689graylog2-server#14512

• Trim whitespace characters on stream names. graylog2-server#14359

• Fixes too_long_http_line_exception/HTTP/1.1 413 FULL head problem when Graylog Event Processor operates on huge number of indices graylog2-server#12996graylog2-server#13675graylog2-server#13790graylog2-server#13718graylog2-server#13722

• Support filter queries when listing authentication backends. We were ignoring them. graylog2-server#13023graylog2-server#14270

• Fixes parsing, so that ES/OS errors without index data are handled properly graylog2-server#13221graylog2-server#14203

• Wrapping latest metric with filter clause for existence of field. graylog2-server#13596graylog2-server#14815

• Allow creating notification in event definition wizard when no notification exists graylog2-server#13825graylog2-server#15286

• Fix time-based rotation check when closed indices are present. graylog2-server#13872graylog2-server#15326

• Fix Clone Action style on Collectors configurations list graylog2-server#13874graylog2-server#13899

• Saved searches can be now sorted by 3 additional fields: owner, description and summary. graylog2-server#14140graylog2-server#14355

• Fix CIDR parsing of IP in query validation graylog2-server#14142graylog2-server#14204

• Improve JVM security provider compatibility by switching to a widely supported cipher transformation graylog2-server#14153graylog2-server#14193

• Avoid GET APIs for cluster/deflector health to avoid overly long requests. graylog2-server#14164graylog2-server#14177

• Provide query suggestions for numerical fields. graylog2-server#14279

• added an info box for auto assigned configs using tags graylog2-server#14229graylog2-server#14565

• LUT - Show no results message on empty search return and fix delete cache functionality graylog2-server#14234graylog2-server#14238

• Fix concatenation of query strings in export. graylog2-server#14268graylog2-server#14284

• Sorting of indices inside an index set is based on their numbers, descending. graylog2-server#14280graylog2-server#14339

• Fix filtering and loader on the Lookup Table pages graylog2-server#14318graylog2-server#14405

• Fix grouping in aggregation builder for fields which only exist in the All Events, All System Events or Processing and Indexing Failures stream. graylog2-server#14387graylog2-server#14404

• Adds a welcome page link in the menu if a user has a start page set. graylog2-server#14668graylog2-server#14736

• Adds the default search page as an option to the start pages in the user’s profile. graylog2-server#14669graylog2-server#14739

• Fix extractors reordering issues graylog2-server#14693graylog2-server#14757

• Fix the way we display long field names in aggregation grouping configuration. graylog2-server#14787graylog2-server#14789

• Combine dashboard and widget query when replaying search for dashboard widget. graylog2-server#14885graylog2-server#15285

• Fix overflow problem with grouping section in aggregation builder. graylog2-server#14907graylog2-server#14934

• Fix sidecar process button position issue on safari graylog2-server#14939graylog2-server#15293

• Fix visibility of events and notification definition pages. graylog2-server#14940graylog2-server#15052

• Fixed bug causing input status data not to be removed when an input was deleted. graylog2-server#14952graylog2-server#14954forwarder#99

• Improve performance by avoiding unnecessary attempts to create index for access tokens. graylog2-server#15012graylog2-server#15097

• Avoid excessive DB requests for maintaining token last access time. graylog2-server#15013

• Adds (now always missing) timezone to the export command, if set in the REST call. graylog2-server#15030graylog2-server#15296

• Fix overlay problem with data table header and dashboard tabs dropdown. graylog2-server#15073graylog2-server#15091

• Fix NodeService#allActive() implementation, returning only nodes of correct type graylog2-server#15129graylog2-server#15139

• Fix Unable to add custom field when creating event definition graylog2-server#15209graylog2-server#15226

• Fix show telemetry settings for local admin. graylog2-server#15244graylog2-server#15247

• Fix ConcurrentModificationException when listing input states. graylog2-server#15277

• Improve position, visibilty and default of the “Grace Period” option when creating an Alert. graylog2-server#3741graylog2-server#3741

• Fix show Index Failure section on System Overview for Cloud. graylog2-server#4774graylog2-server#15398

• Fixes to_date() pipeline conversion function to honor an optional timezone argument. graylog2-server#6486graylog2-server#14252

• Only executed widgets of current page ond dashboards. graylog2-server#6867graylog2-server#14890

• Fix connectivity check when Elasticsearch/OpenSearch is not available. graylog2-server#14063

• Fix potential duplicates in outputs during node restarts. graylog2-server#14067

• Prevent RejectedExecutionException during shutdown with a large number of outputs. graylog2-server#14097

• Removes ability for users to change Event Definition Condition Type if it is not meant to be changeable. graylog2-server#14110

• Fix uncommittedMessages metric for non-empty journal before first commit. graylog2-server#14154

• Triggering field types refetching upon search refresh. graylog2-server#14171

• Fix output shutdown triggering twice when the ouput is globally deleted. graylog2-server#14225

• Avoid vanishing grouping direction when dragged. graylog2-server#14277

• Fix non-stop loading indicator issue in authentication backends graylog2-server#13023graylog2-server#14283

• Remove single-quotes from jvm.memory metric names graylog2-server#14370

• Reduce logging and add metric for “Couldn’t remove default stream” warning. graylog2-server#14409

• Supporting nested and tupled groupings in aggregations. graylog2-server#14446

• Fix possible HTTP API thread pool exhaustion by processing proxied cluster metrics requests asynchronously. graylog2-server#14462

• Fixing missing offset handling in Legacy Searches. graylog2-server#14575

• Handle deprecated short time zone IDs in job scheduler definitions. graylog2-server#14605

• Remove undesired retention strategies in Cloud graylog-plugin-cloud#1081graylog2-server#14616

• Hide sort/pin icons in data table when non-interactive graylog2-server#14654

• Additional preventLoops parameter in clone_message() function to prevent creation of endless loops. graylog2-server#5759graylog2-server#14659

• Improved CSV File Adapter error handling. graylog2-server#14670

• Extend browser support back to Chrome 68. graylog2-server#14677graylog2-server#14688

• Escape $ properly when part of value that is added to query. graylog2-server#14692

• Changing default refresh interval to five seconds. graylog2-server#14720

• Scheduling next search refresh only after current one completed. graylog2-server#14723

• Avoid full-page refresh when showing node details from message details. graylog2-server#14762

• Fix parsing of date math expressions in query validation graylog2-server#14791

• Preventing accidental hiding of columns in reporting widgets. graylog2-server#14805

• Preventing accidental hiding of columns in message list widget for reporting. graylog2-server#14823

• Fix WARNING: sun.reflect.Reflection.getCallerClass is not supported. on server startup. graylog2-server#7223graylog2-server#9802graylog2-server#11634graylog2-server#14884

• Fix pagination of sidecar admin page when collectors are selected. graylog2-server#14924graylog2-server#14925

• Avoid excessive index creation for AccessToken. graylog2-server#14926

• Fix error on missing permission when creating email event notifications. Adds users:list permission to role User Inspector graylog2-server#14974

• Sending new header on server response X-Content-Type-Options:nosniff

• Fixed CSV File adapter to only verify file read access graylog2-server#14998graylog2-server#15058

• Fix isFreshInstallation flag in setups with newly registred datanodes graylog2-server#15141

• Fixed calculation and expression of CPU load in OshiProbe. graylog2-server#15195graylog2-server#15183 (Thanks: panxt)

• Fix OSHI system stats on docker cgroupv2. graylog2-server#15242

• Fix query parser’s tokenizer state after regex has ended. graylog2-server#15306

• Let cookie auth take precedence over basic auth. graylog2-server#6831graylog2-server#15329

• Fixed possible unwanted concurrency in SystemJobManager graylog2-server#15400

• Make sure that search creation has finished before executing it for new saved searches/dashboards. graylog2-server#15435graylog2-server#15444

• Fix JSON deserialization errors in AWS CloudTrail input. graylog-plugin-aws#667graylog-plugin-aws#677

• Fixed issue with Palo Alto Global Protect logs parsing last 5 fields incorrectly. graylog-plugin-integrations#1327graylog2-server#14363graylog-plugin-integrations#1328 (Thanks: @giveen)

Security

• Update to freemarker 2.3.31 and use a more secure default configuration. graylog2-server#14354

• Update Netty from 4.1.84 to 4.1.91 graylog2-server#15186

• Update to Apache Shiro dependency to version 1.11.0. (the fixed CVEs don’t affect Graylog) graylog2-server#15187

• Update json-path to 2.8.0 to fix a security issue in json-smart. graylog2-server#15190

Graylog 5.0.13

Released: 2023-10-12

Security

• Update Netty to 4.1.100 to fix the HTTP/2 Rapid Reset attack (GHSA-xpw8-rcwv-8f8p). The security vulnerability affects all Graylog users that run the Graylog Forwarder input on their servers. graylog2-server#16902

Graylog 5.0.12

Released: 2023-10-04

Added

• Add Sidecar Reader and Sidecar Manager roles to read and manage sidecars. graylog2-server#12044graylog2-server#15380

Fixed

• Indexer cluster checker thread start is delayed by 5s to avoid potential deadlock. graylog2-server#16481

• Fix description for the scenario that one term or value has multiple matching highlighting rules. graylog2-server#16668

Graylog 5.0.11

Released: 2023-09-06

Fixed

• Adjust keybindings for query input autocompletion. graylog2-server#14793graylog2-server#16162

• Fix heatmap colorbar font color for dark mode. graylog2-server#15035graylog2-server#16129

• Fixes problems with editing Search Filters of entities installed via Content Packs. Search Filters of those types of entities are not inlined during Content Pack installation and can be edited. graylog2-server#15841 graylog2-server#16085

Graylog 5.0.10

Released: 2023-08-02

Fixed

• Do not show query input suggestions when using Add to query field value action. graylog2-server#12165graylog2-server#15885

• Improve readability of hover legend in aggregations. graylog2-server#15084graylog2-server#15888

• Fix problem with search bar submit button incorrectly indicating changes for keyword time range. graylog2-server#15472graylog2-server#15938

• Fixing problem with focus loss in query input autocompletion. graylog2-server#15718graylog2-server#15933

• Disable offline detection for REST API client. graylog2-server#15913graylog2-server#15914

Security

• Changed the minimum allowed Anomaly Detector interval to 10 minutes.

• Fixed handling of backslashes in Sigma rule queries that caused OpenSearch errors.

Graylog 5.0.9

Released: 2023-07-05

Added

• Added event definition title as a summary to Microsoft Teams notifications. graylog-plugin-integrations#1341graylog-plugin-integrations#1343

Fixed

• Make sure that boolean fields are returned as true|false in aggregations on OpenSearch 2.4+. graylog2-server#14661graylog2-server#15817

Security

• Fix stale session cache after logout. GHSA-3fqm-frhg-7c85

• Fix insecure source port usage for DNS Lookup adapter queries. GHSA-g96c-x7rh-99r3

Graylog 5.0.8

Released: 2023-06-07

Fixed

• Fix time-based rotation check when closed indices are present. graylog2-server#13872graylog2-server#15335

• Fix extractors reordering issues graylog2-server#14693graylog2-server#14757

• When modifying a user’s session timeout, the system will automatically update existing user sessions to ensure application of the new timeout settings. graylog2-server#15609graylog2-server#15657

• Fix GELF output to not block output processing. graylog2-server#9917graylog2-server#15385

• Only display delete icon for saved searches when user has required permissions. graylog2-server#15190

• Fixed possible unwanted concurrency in SystemJobManager graylog2-server#15400

• Do not extend session when fetching indexer cluster health. graylog2-server#15505

• Fixing session expiration on the nodes page. graylog2-server#15508

• Keep query order when exporting saved searches/dashboards to content packs. graylog2-server#15341graylog2-server#15528graylog2-server#15584

• Extend authentication cookie’s max age on every session extension. graylog2-server#15502graylog2-server#15651

Graylog 5.0.7

Released: 2023-05-03

Fixed

• Fix Maxmind database types in cloud environment. graylog2-server#13911

• Fix overlay problem with data table header and dashboard tabs dropdown. graylog2-server#15073graylog2-server#15091

• Fix error on missing permission when creating email event notifications. Adds users:list permission to role User Inspector. graylog2-server#14974

Security

• Update Netty from 4.1.84 to 4.1.91. graylog2-server#15186

• Update json-path to 2.8.0 to fix a security issue in json-smart. graylog2-server#15190

Graylog 5.0.6

Released: 2023-04-05

Added

• Added option to omit title portion of Slack notifications to reduce clutter. graylog-plugin-integrations#1172graylog-plugin-integrations#1320

• Added support for timezones in Slack and Teams notifications. graylog-plugin-integrations#1318graylog-plugin-integrations#1320

• Added option to notify @here in Slack notifications. graylog-plugin-integrations#780graylog-plugin-integrations#1320

Changed

• Remove stack trace from the generic server error response. graylog2-server#14978

Fixed

• Fix overflow problem with grouping section in aggregation builder. graylog2-server#14907graylog2-server#14934

• Fix visibility of events and notification definition pages. graylog2-server#14940graylog2-server#15055

• Fixed bug causing input status data not to be removed when an input was deleted. graylog2-server#14952graylog2-server#14954forwarder#99

• Fix WARNING: sun.reflect.Reflection.getCallerClass is not supported. on server startup. graylog2-server#7223graylog2-server#9802graylog2-server#11634graylog2-server#14884

• Fix pagination of sidecar admin page when collectors are selected. graylog2-server#14924graylog2-server#14925

• Avoid excessive index creation for AccessToken. graylog2-server#14926

• Avoid full-page refresh when showing node details from message details. graylog2-server#14992

• Sending new header on server response X-Content-Type-Options:nosniff.

• Fixes an off-by-one error that could result in an aggregation search failing silently. graylog2-server#15008

• Fixed CSV File adapter to only verify file read access. graylog2-server#14998graylog2-server#15058

• Fixed issue with Palo Alto Global Protect logs parsing last 5 fields incorrectly. graylog-plugin-integrations#1327graylog2-server#14363graylog-plugin-integrations#1328 (Thanks: @giveen)

Graylog 5.0.5

Released: 2023-03-06

Fixed

• Preventing accidental hiding of columns in message list widget for reporting. graylog2-server#14823

Graylog 5.0.4

Released: 2023-03-01

Fixed

• Avoid GET APIs for cluster/deflector health to avoid overly long requests. graylog2-server#14164graylog2-server#14177

• Fix the way we display long field names in aggregation grouping configuration. graylog2-server#14787graylog2-server#14802

• Handle deprecated short time zone IDs in job scheduler definitions. graylog2-server#14631

• Hide sort/pin icons in data table when non-interactive. graylog2-server#14654

• Improved CSV File Adapter error handling. graylog2-server#14670

• Escape $ properly when part of value that is added to query. graylog2-server#14692

• Changing default refresh interval to five seconds. graylog2-server#14720

• Scheduling next search refresh only after current one completed. graylog2-server#14723

• Extend browser support back to Chrome 68. graylog2-server#14677graylog2-server#14745

• Preventing accidental hiding of columns in reporting widgets. graylog2-server#14822

Security

• Bump version of json-path to 2.7.0 to address CVE-2021-27568. graylog2-server#14768

Graylog 5.0.3

Released: 2023-02-01

Fixed

• Fix grouping in aggregation builder for fields which only exist in the All Events, All System Events, or Processing and Indexing Failures stream. graylog2-server#14387graylog2-server#14404

• Removes ability for users to change Event Definition Condition Type if it is not meant to be changeable. graylog2-server#14110

• Reduce logging and add metric for "Couldn't remove default stream" warning. graylog2-server#14409

• Supporting nested and tupled groupings in aggregations. graylog2-server#14446

• Fixing missing offset handling in Legacy Searches. graylog2-server#14575

Graylog 5.0.2

Released: 2023-01-04

Changed

• Start JSON path value from HTTP API input on leader node only if Global option was selected in input configuration. graylog2-server#14074

Fixed

• Fixed properly escape event content for HTML email notifications. graylog2-server#11183graylog2-server#14286 (Thanks: zhu!)

• Fixed parsing so that ES/OS errors without index data are handled properly. graylog2-server#13221graylog2-server#14203

• Fixed CIDR parsing of IP in query validation. graylog2-server#14142graylog2-server#14204

• Fixed concatenation of query strings in export. graylog2-server#14268graylog2-server#14349

• Avoid vanishing grouping direction when dragged. graylog2-server#14277

Security

• Update to FreeMarker 2.3.31 and use a more secure default configuration. graylog2-server#14354

Graylog 5.0.1

Released: 2022-12-14

Fixed

• Fix Clone Action style on Collectors configurations list. graylog2-server#13874graylog2-server#13899

• Improve JVM security provider compatibility by switching to a widely supported cipher transformation. graylog2-server#14153graylog2-server#14193

• Triggering field types refetching upon search refresh. graylog2-server#14171

Graylog 5.0.0

Released: 2022-12-07

Added

• Added validation for field value types. It will detect the correct type of the field and warn if user enters a value of different data type. graylog2-server#11973 graylog2-server#12088

• Add ability for inputs to specify encoding graylog2-server#12337 graylog2-server#12654

• The list of fields can now show only the fields that are present in selected streams, if stream_aware_field_types config property is set to true. graylog2-server#12572 graylog2-server#9397 graylog2-server#13363

• Event definition page now includes a button to edit it directly graylog2-server#12910 graylog2-server#13248

• Show Elasticsearch/OpenSearch cluster health on index sets overview page. graylog2-server#13017 graylog2-server#13024 (Thanks: @supahgreg)

• New configuration flag ignore_migration_failures to skip migrations which are blocked graylog2-server#13053 graylog2-server#13137

• Show title of dashboards and saved searches on page. graylog2-server#13116 graylog2-server#13491

• Add a new built-in "Pipelines Manager" role. graylog2-server#13251 graylog2-server#13866

• Feature preview of Scripting API. graylog2-server#3807 graylog2-server#13809

• Reimplement ability to reorder dashboard pages. graylog2-server#13744 graylog2-server#7470

• Allow sorting columns in data table widget. graylog2-server#13432 graylog2-server#9998

• Add config option to set upper limit for index retention period. graylog2-server#12299

• Support configuration of sidecars on Darwin and FreeBSD. collector-sidecar#377 graylog2-server#12387

• Adding simple actions to copy field name/value/message fields to clipboard. graylog2-server#12877

• Add ability to pull Geo Location Processor database files from an S3 bucket. graylog2-server#13204

• Enabling search filter feature (Enterprise). graylog2-server#13640

• Allow pinning row pivot columns in data table widget. graylog2-server#13510

• Show in field select if fields are qualified for metric function. graylog2-server#13643

• Allow setting TCP-keepalive for all sockets used in HTTP notifications. graylog2-server#13736

• Update bin/graylogctl to support a bundled JVM. graylog2-server#13980

Changed

• Set elasticsearch_index_optimization_jobs default to 10 graylog2-server#12025 graylog2-server#13521

• Index detail shard numbers (segments, open search contexts, and deleted messages) are now formatted. graylog2-server#13021 (Thanks: @supahgreg)

• Switch from 'openjdk' to 'eclipse-temurin' for Graylog Server test image. graylog2-server#13114 graylog2-server#13002 (Thanks: @supahgreg)

• Changed items displayed in the System dropdown menu to match the permissions for the page that they link to. graylog2-server#13157 graylog2-server#13188

• Pre-flight check requires at least MongoDB 5.0 graylog2-server#13660 graylog2-server#13778

• Fresh Graylog Installations will have a new default message processor order graylog2-server#5040 graylog2-server#13081

• Auto focus first suggestion in search query input autocompletion. graylog2-server#6909 graylog2-server#12991

• 'Outdated version' notifications now include links to the changelog pages. graylog2-server#7593 graylog2-server#7689 graylog2-server#12648 (Thanks: @supahgreg)

• Replacing nested with linear bucketing in aggregations. graylog2-server#8111 graylog2-server#13805 graylog2-server#13806 graylog2-server#13855

• When selecting roles from the dropdown they are now automatically assigned to the team/user graylog2-server#9933 graylog2-server#13277

• Retry on Elasticsearch Request entity too large errors graylog2-server#13113 graylog2-server#7071

• Rename 'All Messages' stream to 'Default Stream' graylog2-server#13258

• Java 17 graylog2-server#13276 graylog-plugin-enterprise-integrations#869 graylog-plugin-collector#205 graylog-plugin-aws#663 graylog-plugin-integrations#1153 graylog2-server#13330 graylog2-server#12644

• OpenSearch 2 Support graylog2-server#13340

• Disable rollup columns by default for new aggregations. graylog2-server#11516 graylog2-server#13410 graylog2-server#13690

• Unify position of 'create new entity' buttons in page header. graylog2-server#13577

• Move submit button in widget edit mode next to configuration form. graylog2-server#13581

• Improve the way we display the navigation for subareas of a page. graylog2-server#13677

• Unify position of documentation links in page headers. graylog2-server#13691

• Update jersey from 2.32 to 2.37 graylog2-server#13710

• Mask custom properties for Kafka inputs on the inputs page to hide sensitive information. graylog2-server#13383 graylog2-server#13873

• Change default of search window and execution frequency for new event configurations from 1 to 5 minutes. graylog2-server#13943

• Change default value for http_thread_pool_size and proxied_requests_thread_pool_size to 64. graylog2-server#13960

• Sorting options in aggregations have been limited for deterministic results. graylog2-server#13957graylog2-server#14017

• Modified how Microsoft Teams notification templates are processed. graylog-plugin-integrations#1096 graylog-plugin-integrations#1200 graylog-plugin-integrations#1202

Removed

• Removed support for Elasticsearch 6 graylog2-server#13317 graylog2-server#13321 graylog-project-internal#77

• Removing legacy alerting management pages. graylog2-server#12987

• Remove unused and dysfunctional MetricsHistoryResource. graylog2-server#2443 graylog2-server#13553

• Remove ineffective settings for output buffer processor thread pool. graylog2-server#13971

Fixed

• Hide edit button for permissions config if the user doesn't have edit permissions. graylog2-server#12090 graylog2-server#13939

• Fix incorrect prometheus mapping for input metrics. graylog2-server#12421 graylog2-server#12560

• Fix bug when installing Sidecar collector configuration in Content Pack. graylog2-server#12778 graylog2-server#13632

• Uses whitespace analyzer for query parsing and validation. This is needed to prevent unexpected field value parsing. graylog2-server#12888 graylog2-server#12918

• Fixes sorting exception on aggregations by removing 'latest' metrics from the list of possible sorts. graylog2-server#12908 graylog2-server#14027

• Fix breaking change in Geo-Location Processor fields. graylog2-server#12909 graylog2-server#13202 graylog2-server#13203 graylog2-server#13094

• When using the index time rotation strategy, rotating of empty index sets is skipped. graylog2-server#13028 graylog2-server#13735

• Fixing autocompletion for inputs with quoting/containing slashes. graylog2-server#13082 graylog2-server#13087 graylog2-server#13092

• Fix source field extraction for Beats version 8 and later. graylog2-server#13254 graylog2-server#13895

• Do not toggle message details in message table widget, when selecting text. graylog2-server#13259 graylog2-server#13263

• Fix performance regression on UDP inputs with newer Java versions graylog2-server#13306 graylog2-server#14005 (Thanks: @giangi)

• Fix journal directory preflight size check graylog2-server#13454 graylog2-server#13470

• Queries that have the form of _exists_:field_name are now validated without any wrong warning messages. graylog2-server#13455 graylog2-server#13489

• Fixing latest aggregation if field is not present in time range. graylog2-server#13593 graylog2-server#13640

• Fix "Unauthorized" messages in server log when "Trusted Header Authentication" is enabled and a user session expires. graylog2-server#13721 graylog2-server#13735

• Take into account if "Always match" rule is inverted. Previously it was ignored for this rule type. graylog2-server#13819 graylog2-server#13847

• The pipeline function flatten_json now respects the original JSON types. An optional parameter is provided for backwards compatibility. graylog2-server#13888 graylog2-server#13947

• Remove not needed rel='noreferer' from documentation links graylog2-server#13934 graylog2-server#13941

• Allow non-word-characters in lookup tables key field graylog2-server#13973 graylog2-server#14029

• Fix appearing toast errors when creating HTTP JSONPath data adapter and start editing the title. graylog2-server#14004

• Fix alert system on low message input graylog2-server#6770 graylog2-server#13556

• Fixed bug preventing installation of Content Packs that reference System Streams. graylog2-server#7212 graylog2-server#13398

• Fixed bug preventing processing of CEF message fields with large integer values. graylog2-server#7371 graylog2-server#13812

• Fix content pack imports error for event notifications. graylog2-server#7801 graylog2-server#13171 graylog-plugin-enterprise-integrations#859 graylog-plugin-integrations#1129

• Reset time-based rotation strategy after leader change. graylog2-server#12370

• Fix parsing of invalid search operators in query validation. graylog2-server#12420

• Improve server startup to log all errors to the log file instead of writing some of them to STDERR. graylog2-server#13088

• Display current page as active in navigation. graylog2-server#13498

• Fix server --dump-default-config command graylog2-server#13507

• Allow "Show Top Values" action for enumerable compound fields. graylog2-server#13782

• Filter autocompletion suggestions to currently selected streams. graylog2-server#13553

• Isolate errors in result extraction to search type(s) causing it graylog2-server#13955

• Fixed bug where old PagerDuty notifications would fail to load. graylog-plugin-integrations#1054 graylog-plugin-integrations#1077

• Ensure Guice binder creation for the JobResourceHandler interface. graylog2-server#14054

Security Fixes

• Update Jackson to latest stable version 2.13.4 graylog2-server#13541

• Update Netty from 4.1.60 to 4.1.84 graylog2-server#13879