Graylog Changelog
Please note this changelog is for the core Open Graylog application. For the Graylog Enterprise changelog, please see the following article.
Graylog 6.1.4
Released: 2024-12-04
Added
-
Unified snapshot configuration, role and cache management in Data Node. This prevents allocating a big search cache when no searchable snapshots have been configured, leading to potential low watermark issues. graylog2-server#21031
Fixed
-
Fix error when ticking or unticking show event annotations. graylog2-server#20932 graylog2-server#21028
-
Fix disable
cross_subdomain_cookie
for telemetry (backport). graylog2-server#15675 graylog2-server#17745 graylog2-server#21103
Graylog 6.1.3
Released: 2024-11-21
Added
-
Added
multi_grok
pipeline rule to support processing a string against many grok patterns at once. graylog2-server#15301 graylog2-server#20924
Fixed
-
Fix custom highlighting of field values in the message details of the message table widget graylog2-server#18388 graylog2-server#20921
-
Fixing text color of bar labels in bar chart, which are displayed outside of a bar. graylog2-server#20789 graylog2-server#20948
-
Fix handling of path prefix in
useSendTelemetry
. graylog2-server#20899 graylog2-server#20951 -
Fix failing of executing search on event definition page. graylog2-server#20925 graylog2-server#20953
-
Sorting pivot values numerically when field is numeric. graylog-plugin-enterprise#6479 graylog2-server#20918
-
Fixes issue where some event types did not display all actions that should have been available. graylog-plugin-enterprise#8638 graylog2-server#20847
-
Fixing replay search routes when path prefix is present. graylog2-server#20910
-
Fixing route for AWS integration when path prefix is present. graylog2-server#20969
Graylog 6.1.2
Released: 2024-11-06
Added
-
Automatically trim newline characters for Fortigate messages received through syslog inputs. graylog2-server#20788
Fixed
-
Fix encoding of CName in generated CA certificates. graylog2-server#20738 graylog2-server#20745
-
Fixing output class name for prometheus exporter. graylog2-server#20790 graylog2-server#20844
-
Fixing up extraction of effective time range for async searches. graylog2-server#20800 graylog2-server#20808
-
Fixing
unkown format
issue in widgets when using gradiant highlighting. graylog2-server#20876 graylog2-server#20882
Graylog 6.1.1
Released: 2024-10-23
No changes in Graylog Open for 6.1.1.
Graylog 6.1.0
Released: 2024-10-21
Added
-
Introduce new pipeline functions
remove_single_field
andremove_multiple_fields
to (eventually) replaceremove_field
. graylog2-server#19098 graylog2-server#19268 -
Change placement of message widget export action. graylog2-server#19139 graylog2-server#19140
-
Added remediation steps to general events view. graylog2-server#19354 graylog2-server#19853
-
Add export feature to events and investigations widget. graylog2-server#19580 graylog2-server#19597
-
Datanode migration telemetry. graylog2-server#20086 graylog2-server#20225
-
Added new Palo Alto Networks TCP (PAN-OS v11+) input. graylog2-server#20223 graylog2-server#20236
-
Add unit formatting functionality for widgets. graylog2-server#20241 graylog2-server#19109
-
Added new Beats Kafka input to ingest system logs from Kafka topic using Filebeat. graylog2-server#5254 graylog2-server#20067
-
Display progress indicator for search auto refresh controls. graylog2-server#16894
-
Adds support for user-configurable index set templates. graylog2-server#18956
-
Conversion of
MessageList
into a tabular representation for exports. Added XLSXWriter. graylog2-server#19162 -
Show maximum available time for restarting Graylog during in-place migration. graylog2-server#19270 graylog2-server#19271
-
Add possibility to select an index set template when creating an index set. graylog2-server#19075 graylog2-server#19381
-
Add option to select all fields for messages export widget. graylog2-server#19463
-
Added support for scheduling Event Definitions using cron expressions. graylog2-server#19563
-
Add pipeline connections management to stream details page. graylog2-server#19587
-
Show tasks progress in Remote Reindex Migration graylog2-server#19657
-
Add
FilteredMessageOutput
andOutputFilter
Java interfaces. graylog2-server#19672 -
Display datanode version in datanodes overview under System / Data Nodes. graylog2-server#19680 graylog2-server#18783 graylog2-server#19691
-
Add filters for filterable stream destinations. graylog2-server#19739
-
Add archive, outputs, pipelines, and Data Warehouse column to stream overview. graylog2-server#19763
-
Add guard for matching graylog/datanode version in data node migration. graylog2-server#19828
-
Adding a Last Updated attribute to views/dashboard that is updated on save and initially initialized from the associated search for existing views. graylog2-server#19830
-
Add Stream destination output filters UI. graylog2-server#7427 graylog2-server#19846
-
Add optional
ignoreExtraFieldNames
parameter tocsv_to_map
pipeline function. graylog2-server#19865 -
Indices not managed by Graylog are now marked and not selected by default in data node’s remote reindex migration. graylog2-server#19974 graylog2-server#19976
-
Support configuration of
output_batch_size
by bytes. graylog2-server#19982 -
Added Microsoft Teams Notification V2 which is compatible with Microsoft Workflows. graylog2-server#19983
-
Add data node information to support bundle. graylog2-server#20090
-
Bump OpenSearch (client, server in DataNode) to 2.15. graylog2-server#20097
-
Add data node logs and migration logs to support bundle. graylog2-server#20103
-
Added categories to Streams to allow Illuminate content to be scoped to multiple products. graylog2-server#20110 graylog2-server#20160 graylog2-server#20199 graylog2-server#20371 graylog2-server#20373 graylog2-server#20380
-
Add certificates used by data nodes and Graylog to support bundle. graylog2-server#20120
-
Show system notification while remote reindexing during the data node migration. graylog2-server#20123
-
Remote Reindex UI improvements. graylog2-server#20237
-
Fix error when installing content pack with
stream_title
parameter. graylog2-server#20244 -
Display index overview by tier type. graylog2-server#20352
-
Added new Raw HTTP input. Also added support for custom authorization config option for HTTP Gelf and new HTTP Raw inputs. graylog2-server#20370
-
Remove Data Node beta banner graylog2-server#20388
Changed
-
Lazy configuration processing for datanode, collecting all errors in one go. graylog2-server#19207 graylog2-server#19801
-
Changed default setting for Kafka transports to non-legacy mode. graylog2-server#19693
-
Always display input for widget title in widget edit mode. graylog2-server#7396 graylog2-server#19737
-
Improving API error responses for JSON parsing failures. graylog2-server#19367
-
Introduced DatanodeKeystore for unified handling of PKI inside data node. graylog2-server#19536
-
Migrate graylog CA to cluster config storage. graylog2-server#19747
-
Run remote reindex connection checks from datanodes, aggregate results. graylog2-server#19879
-
Implement table rows border color with more contrast. graylog2-server#20001
-
Display Warm Tier Search warning as streams with timestamp. graylog2-server#20427
-
API endpoint for listing users will not return an error anymore when user is lacking permission, but return current user only instead. graylog2-server#20558
Removed
-
Removed deprecated GreyNoise Community Data Adapter. graylog2-server#19914 graylog2-server#19927
-
Removed default Content Pack for defunct abuse.ch ransomware tracker. graylog-plugin-integrations#945 graylog2-server#19519
Fixed
-
Fix link target for search query error documentation links. graylog2-server#13822 graylog2-server#20563
-
Display Data Node Logs graylog2-server#17730 graylog2-server#19352
-
Fix zstd library loading issue on noexec-mounted /tmp directories. graylog2-server#17837 graylog2-server#19971
-
Display field value suggestions when field name is in the middle of the search query. graylog2-server#18288 graylog2-server#18952
-
Clarify rule simulation processing. graylog2-server#18359 graylog2-server#19261
-
Avoid double-qualifying navigation links when path prefix is configured. graylog2-server#18463 graylog2-server#19511
-
Fixing several smaller bugs with keyword time range tab. graylog2-server#18809 graylog2-server#18879
-
Datanode remote reindex migration UI features. graylog2-server#18876 graylog2-server#19100
-
Fix Grok field extraction for patterns with converters. graylog2-server#18883 graylog2-server#18898
-
Reset events widget pagination when executing search. graylog2-server#18915 graylog2-server#18945
-
Fix selecting option in more results select on pipeline simulator page. graylog2-server#18932 graylog2-server#19413
-
Fix permissions handling in events widget. graylog2-server#18949 graylog2-server#18953
-
Fixing stream filtering in events search type. graylog2-server#18971 graylog2-server#18972
-
Fixing text color for unqualified fields in field select. graylog2-server#18975 graylog2-server#18976
-
Fix log4j memory appender buffer size configuration. graylog2-server#19003 graylog2-server#19208
-
Fixed user permission-based filtering on Event Definitions. graylog2-server#19007 graylog2-server#19262
-
Fix Alerts & events search input is removing input values while typing. graylog2-server#19009 graylog2-server#20516
-
Fixing ‘unknown format’ error on sidecar overview page. graylog2-server#19012 graylog2-server#19128
-
Do not show confirm dialog when saving event notification. graylog2-server#19014 graylog2-server#19073
-
Fix display tooltip for help icons in disabled menu items. graylog2-server#19092 graylog2-server#19093
-
Fixes handling of error results in the lookup cache. graylog2-server#19159 graylog2-server#19670
-
Add sidecar filebeat collector for windows again. graylog2-server#19195 graylog2-server#19325
-
Data Node Migration: remove unnecessary steps/big texts/unavailable paths. graylog2-server#19229 graylog2-server#19312
-
Removed basic auth for datanode rest api. Only JWT supported now. graylog2-server#19243 graylog2-server#19244
-
Datanode: Maximum downtime estimate during migration. graylog2-server#19270 graylog2-server#19293
-
Reuse http client for datanode connection checks during preflight configuration. graylog2-server#19272 graylog2-server#19273
-
Fixes Recent Activity pagination, so that it does not ignore entries for deleted items. graylog2-server#19313 graylog2-server#19394
-
Fix issue with scroll position which could occur in news section on the startpage when scrolling by dragging cards. graylog2-server#19337 graylog2-server#19341
-
Make allowlist for datanode remote reindex migration optional, automatically remove protocols. graylog2-server#19402graylog2-server#19682
-
Fix issue with widget timerange, query and streams filter for events widget on dashboards. graylog2-server#19486graylog2-server#19537
-
fix sidecar failure tracking page error. graylog2-server#19562 graylog2-server#19570
-
Fixing copying to clipboard in non-secure contexts. graylog2-server#19643 graylog2-server#19654
-
Sorting custom field mappings has been fixed, it does not fail on null values anymore. graylog2-server#19694 graylog2-server#19960
-
Disable automatic datanode cert renewal during preflight mode. graylog2-server#19706 graylog2-server#19709
-
Add support for unknown certificate authorities during the remote reindex migration to the datanode. graylog2-server#19759 graylog2-server#19775
-
Fix CA upload delete icon XMARK not found. graylog2-server#19790 graylog2-server#19791
-
Make migration thread count counfigurable. graylog2-server#19792 graylog2-server#19794
-
See previous migration steps content by making them expendable but not editable. graylog2-server#19803 graylog2-server#19825
-
Fix invalid link for OpenSeach documentation. graylog2-server#19845 graylog2-server#20025
-
Disable data node migration wizard on installations using data node. graylog2-server#19871 graylog2-server#20035
-
Display timestamp in datanode migration logs. graylog2-server#19977 graylog2-server#19993
-
Show previous values in remote reindex migration form. graylog2-server#19997 graylog2-server#20008
-
Reopen target index for remote reindex migration if this is closed. graylog2-server#20208 graylog2-server#20220
-
Fix search bar query validation error showing double icons. graylog2-server#20409 graylog2-server#20502
-
Use name instead of originName in hover labels templates to fix that advanced field types not resolved in label texts for charts with custom units. graylog2-server#20434 graylog2-server#20453
-
Use the correct Data Node configuration file server.conf instead of graylog.conf. graylog2-server#20448 graylog2-server#20450
-
In cloud env display only node name instead of name with link in message details on the search page. graylog2-server#20464 graylog2-server#20505
-
Fix new Datanode EntityDataTable issues. graylog2-server#20481 graylog2-server#20495
-
Fix streams page always shows horizontal scroll bar. graylog2-server#20515 graylog2-server#20522
-
Fix Datanode Details Page Error. graylog2-server#20604 graylog2-server#20628
-
Fix scratchpad copy button. graylog2-server#18788 graylog2-server#18874
-
Fix unknown field
caused_by
in remote reindex migration task class. graylog2-server#18907 -
Fix index set deletion issues. graylog2-server#18994graylog2-server#19030
-
Add beta info to data node preflight and overview page. graylog2-server#19038graylog2-server#19039
-
Actively wait for opensearch process termination in the datanode. graylog2-server#19056
-
Fix rules editor showing warning when saving. graylog2-server#19008graylog2-server#19059
-
Remove datanode leader flag. graylog2-server#18861 graylog2-server#19170
-
Fixing full page refreshes for menu items with href. graylog2-server#19225
-
remove preflight resume startup. graylog-plugin-enterprise#7009 graylog2-server#19228
-
Fix data stream replicas and creation on single/multi-node data node setups. graylog2-server#18830 graylog2-server#19010 graylog2-server#19241
-
Fix manage extractors link for local input. graylog2-server#19111 graylog2-server#19260
-
Fixing full page refreshes for buttons with href. graylog2-server#19267
-
Removed Delete and Duplicate options for Sigma event definitions. graylog2-server#19404
-
Fixed error when the
string_array_add
function is supplied a null value. graylog-plugin-enterprise#7262 graylog2-server#19439 -
Fix upload CA tab not clickable graylog2-server#19485 graylog2-server#19478
-
Fix sidecar undefined error. graylog2-server#19487
-
Datanode UI fixes. graylog2-server#19467 graylog2-server#19477 graylog2-server#19539
-
Propagate search errors in legacy search REST API endpoint. graylog2-server#14646 graylog2-server#19598
-
Data Node Migration Linkable Logs View. graylog2-server#19599
-
Fix problem with missing field types on message details page. graylog2-server#19600
-
Update URLs in DocHelper class to point to go2docs. graylog2-server#19630
-
Preflight UI fixes. graylog2-server#19285 graylog2-server#19286 graylog2-server#19667
-
Fixed routing of home nav icon to open the active perspective welcome page. graylog2-server#19673
-
Fix processing failures due to lookup failures in the IPInfo geolocation database. graylog2-server#19750
-
Fix indexer cluster health box on indices page to use correct distribution name. graylog2-server#19805 graylog2-server#19824
-
Disabling interactive functionality in widgets when in non-interactive context. graylog2-server#19857
-
Dropping legacy dashboards collection in migration. graylog2-server#19912 graylog2-server#19921
-
Fix concurrency problem with datanode migration context injection. graylog2-server#19926
-
Add /connection-check endpoint to datanode rest api proxy allowlist. graylog2-server#19932
-
Fix parsing of opensearch allowlist during remote reindex migration. graylog2-server#19947
-
Fixed issue where unescaped quotes in Custom HTTP notification JSON payloads breaks the notifications. graylog2-server#19951 graylog2-server#20318
-
Remove last data node from list if no more data nodes are running. graylog2-server#19980 graylog2-server#19981
-
Fix duplicated index entries in remote reindex migration. graylog2-server#19990
-
Disable world map interactions in non-interactive mode. graylog2-server#20004
-
only hide DatanodeMigration if state ‘FINISHED’ and datanode is configured. graylog2-server#19871 graylog2-server#20042
-
Stop existing running datanodes during in-place migration. graylog2-server#19833 graylog2-server#20058
-
Properly parse trailing padding bytes in IPFIX data sets. graylog-plugin-integrations#395 graylog2-server#20073
-
Add support for remote-reindex migration of closed indices. graylog2-server#20068 graylog2-server#20081
-
Fix list of dashboards in widget’s ‘copy to dashboard’ dialog to only contain allowed dashboards. graylog2-server#7331 graylog2-server#20089
-
fixed check for missing required int in legacy search api. graylog2-server#7395 graylog2-server#20094
-
Stop index retention during remote reindex migration. graylog2-server#20121
-
Pause index set rotation during remote reindex migration. graylog2-server#20222
-
Fixed issue where
grok_exists
pipeline rule would return true for substrings of pattern names. graylog2-server#20264 graylog2-server#20263 -
Fix issue where content pack stream dependencies were not properly resolved for some dashboards. graylog2-server#20265 graylog2-server#20288
-
Fix tooltips not being visible in modals. graylog2-server#20272
-
Reset is_cancelled flag on job trigger release. graylog2-server#20287
-
Automatically remove index write blocks during remote reindex migration. graylog2-server#20313
-
Datanode preflight check for node.lock, preventing parallel run of opensearch and datanode. graylog2-server#20366
-
Use external URI for base URL of API browser. graylog2-server#20379
-
Fixed issue where invalid JSON characters being unescaped broke TeamsNotificationV2 notifications. graylog2-server#20389
-
Fixing plot legend for larger label sets. graylog2-server#20426
-
Datanode informative certificate details. graylog2-server#20542 graylog2-server#20543 graylog2-server#20546
-
Added datanode permissions. graylog2-server#20608
-
Hide remote reindex migration behind a feature flag. graylog2-server#20636
-
Add missing any/all option to stream rules in routing/intake page. graylog2-server#20678
-
Tieing events widget to configured time range. graylog2-server#18914 graylog2-server#18954
Graylog 6.0.9
Released: 2024-12-04
Added
-
Added
multi_grok
pipeline rule to support processing a string against many grok patterns at once. graylog2-server#15301 graylog2-server#20924
Fixed
-
Fix custom highlighting of field values in the message details of the message table widget. graylog2-server#18388 graylog2-server#20921
-
Sorting pivot values numerically when field is numeric. graylog2-server#20918
-
Fixes issue where some event types did not display all actions that should have been available. graylog2-server#20847
-
Fixing route for AWS integration when path prefix is present. graylog2-server#20969
Graylog 6.0.8
Released: 2024-11-06
Added
-
Automatically trim newline characters for Fortigate messages received through syslog inputs. graylog2-server#20788
Fixed
-
Fix encoding of CName in generated CA certificates. graylog2-server#20738 graylog2-server#20745
Graylog 6.0.7
Released: 2024-10-02
Fixed
-
In cloud environment display only node name instead of name with link in message details on the search page. graylog2-server#20464 graylog2-server#20505
-
Use external URI for base URL of API browser. graylog2-server#20379
-
Fixed issue where invalid JSON characters being unescaped broke TeamsNotificationV2 notifications. graylog2-server#20389
Graylog 6.0.6
Released: 2024-09-04
Added
-
Added remediation steps to general events view. graylog2-server#19354 graylog2-server#19853
-
Added Microsoft Teams Notification V2 which is compatible with Microsoft Workflows. graylog2-server#19983
-
Fix error when installing content pack with
stream_title
parameter. graylog2-server#20244
Fixed
-
Fixes handling of error results in the lookup cache. graylog2-server#19159 graylog2-server#20167 graylog2-server#19670
-
Fixed issue where grok_exists pipeline rule would return true for substrings of pattern names. graylog2-server#20264 graylog2-server#20263
-
Fix issue where content pack stream dependencies were not properly resolved for some dashboards. graylog2-server#20265 graylog2-server#20288
Graylog 6.0.5
Released: 2024-08-07
Added
-
Add optional
ignoreExtraFieldNames
parameter tocsv_to_map
pipeline function. graylog2-server#19865
Changed
-
Implement table border color with more contrast. graylog2-server#20001
Fixed
-
Sorting custom field mappings has been fixed, it does not fail on null values anymore. graylog2-server#19694graylog2-server#19960
-
Fixing copy button in scratchpad modal. graylog2-server#19822 graylog2-server#19823
-
Fixed issue where unescaped quotes in Custom HTTP notification JSON payloads breaks the notifications. graylog2-server#19951
-
Properly parse trailing padding bytes in IPFIX data sets. graylog-plugin-integrations#395 graylog2-server#20073
Graylog 6.0.4
Released: 2024-07-03
Fixed
-
Fixing copying to clipboard in non-secure contexts. graylog2-server#19643graylog2-server#19654
-
Fix sidecar undefined error graylog2-server#19487
-
Update “Jackson” to version 2.17.1 to prevent potential memory issues. graylog2-server#19629
-
Fix processing failures due to lookup failures in the IPInfo geolocation database. graylog2-server#19750 graylog2-server#19753
Graylog 6.0.3
Released: 2024-06-05
Fixed
-
Preventing double prefixing of navigation items when path prefix is present. graylog2-server#18463graylog2-server#19515
-
Fix Grok field extraction for patterns with converters. graylog2-server#18883graylog2-server#18898
-
Fix selecting option in more results select on pipeline simulator page. graylog2-server#18932graylog2-server#19413
-
Fix issue with widget timerange, query, and streams filter for events widget on dashboards. graylog2-server#19486graylog2-server#19537
-
Fixed error when the
string_array_add
function is supplied a null value. graylog2-server#19439
Graylog 6.0.2
Released: 2024-05-22
Fixed
-
Clarify rule simulation processing. graylog2-server#18359graylog2-server#19261
-
Fixes Recent Activity pagination so that it does not ignore entries for deleted items. graylog2-server#19313graylog2-server#19394
Graylog 6.0.1
Released: 2024-05-13
Added
-
Introduce new pipeline functions
remove_single_field
andremove_multiple_fields
to (eventually) replaceremove_field
. graylog2-server#19098 graylog2-server#19268
Fixed
-
Display field value suggestions when field name is in the middle of the search query. graylog2-server#18288graylog2-server#18952
-
Fixing several smaller bugs with keyword time range tab. graylog2-server#18809graylog2-server#18879
-
Fixed user permission-based filtering on Event Definitions. graylog2-server#19007graylog2-server#19262
-
Do not show confirm dialog when saving event notification. graylog2-server#19014graylog2-server#19073
-
Fix display tooltip for help icons in disabled menu items. graylog2-server#19092graylog2-server#19093
-
Add sidecar filebeat collector for windows again. graylog2-server#19195graylog2-server#19325
-
Fix index set deletion issues. graylog2-server#18994graylog2-server#19030
-
Fix manage extractors link for local input graylog2-server#19111graylog2-server#19260
-
Fixing full page refreshes for menu items with href. graylog2-server#19276
Graylog 6.0.0
Released: 2024-04-17
Added
-
Added support for sending HTTP Notification API Key/Secret as a header graylog2-server#14691 graylog2-server#17369
-
Store message receive and processing times in ES/OS fields. graylog2-server#16284
-
Added the Email Notification ID to the System Notification for Missing Email Recipients. graylog2-server#16988graylog2-server#17061
-
Added a keyboard shortcuts page graylog2-server#17082 graylog2-server#17083
-
Move existing DataNode config into separate page. graylog2-server#17085 graylog2-server#17104
-
Data nodes now publish state machine state. Provides a backend for data node table including state information. graylog2-server#17247graylog2-server#17382
-
Add action for field type management page to remove custom field types. graylog2-server#17284 graylog2-server#17281
-
Add filtering to index field types page graylog2-server#17285 graylog2-server#17326
-
Added remove custom field type bulk action to index set field type page graylog2-server#17286 graylog2-server#17429
-
Add option to add custom field type to non existing field. Add option to change field type with option to choose field from the list graylog2-server#17343 graylog2-server#17408
-
Datanode preflight check for data directory compatibility graylog2-server#17424 graylog2-server#17487
-
Datanode Cluster Management UI graylog2-server#17704 graylog2-server#17881
-
Add index set field type profiles overview and edit page graylog2-server#17746 graylog2-server#17775
-
Add action to profile creation from selected types graylog2-server#17746 graylog2-server#18027
-
Add deleting index set field type profile action graylog2-server#17815graylog2-server#18031
-
Add new column ‘Origin’ to index set field type mapping page instead of is custom graylog2-server#17934graylog2-server#17878
-
Added ‘field_value_suggestion_mode’ config parameter, that allows to switch field value suggestions off, turn them on and turn them on only for textual fields. graylog2-server#18032graylog2-server#18095
-
Added 4 pipeline functions for general use that were previously only available to Illuminate. graylog2-server#6112
-
Add search result statistics on the main search screen and execution info popover to each dashboard widget graylog2-server#7386 graylog2-server#16130
-
Add Create new dashboard widget action graylog2-server#7629 graylog2-server#17582
-
Added customizable HTTP notification that supports multiple methods and content types. graylog2-server#16758
-
Implement option for graylog.conf to define shortest possible search auto-refresh interval. graylog2-server#16972graylog2-server#17011 graylog2-server#17029
-
Including basic data node usage information in telemetry. graylog2-server#17042
-
Add index set field type management page graylog2-server#17160 graylog2-server#17070
-
data node cluster name is configurable graylog2-server#17143
-
Added support for POST and PUT requests for ‘JSON path value from HTTP API’ Input. graylog2-server#17235
-
data node life cycle management: removal of nodes graylog2-server#16820 graylog2-server#17248
-
Adding Data Tiering functionality to Graylog Open providing users with a more intuitive and flexible approach to configuring index rotation, retention, and data tiering. graylog2-server#17348
-
Add start/stop lifecycle functions to data node. Add validations for triggering data node lifecycle functions. graylog2-server#17383 graylog2-server#17402
-
Added support for looking up Email Notification sender, reply to, and recipient emails in lookup tables. graylog2-server#17498
-
Fallback guide on how to do manual migration into the DataNode graylog2-server#17707
-
Adding a resource to manage the CA to regular Graylog (not only during preflight) graylog2-server#17775
-
Add a job_scheduler_concurrency_limits configuration option to limit the parallel execution of job types. graylog2-server#17880
-
Add profile selection to index set edit/add form and index set field types page graylog2-server#17751graylog2-server#17750 graylog2-server#17956
-
Adding hooks.logout hook which is called when the user logs out graylog2-server#17965
-
Added state map and corresponding rest resources for datanode migration wizard graylog2-server#18001
-
Extend search query input with option to view search query history. graylog2-server#18067
-
add datanode migration ui graylog2-server#18079
-
Added link to first start logs to log into preflight UI graylog2-server#18113
-
add bulk management capabilities for data nodes graylog2-server#17732 graylog2-server#18121
-
Add support for searchable snapshots in data node graylog2-server#18357
-
Propagate path.repo configuration in datanode. Needed to support fs snapshot repositories graylog2-server#18369
-
Allow adding aggregations to event processor for use with EventModifiers graylog2-server#18372
-
bumping OpenSearch inside the DataNode to 2.12.0 graylog2-server#18386
-
show Journal Size in In-Place Migration steps graylog2-server#18492
-
create client certificates for the DataNode for 3rd party apps graylog2-server#18522
-
Add UI for Data Node client certificate creation graylog2-server#16466graylog2-server#18566
-
Add Remote reindex connection check, and display indices with errors. graylog2-server#18621
-
Add ‘all’ keyword for datanode rest api proxy, aggregating responses from all connected datanodes graylog2-server#18780
Changed
-
The default value for the data_dir configuration option has been removed. It needs to be configured explicitly now. graylog2-server#13673 graylog2-server#15902
-
Set SameSite attribute in cookies. graylog2-server#16428 graylog2-server#18329
-
Changed Content Packs handling to allow import/export of entites that reference Streams by title. graylog2-server#16743
-
Enable sidecar default configurations to be updated on existing installs. graylog2-server#17040 graylog2-server#17246
-
Add Data Node pre-flight check to validate the vm.max_map_count sysctl value. graylog2-server#17430 graylog2-server#17436
-
Automatically choose default number of process-buffer and output-buffer processors based on available CPU cores. graylog2-server#17450 graylog2-server#17737
-
Ensure password secret meets the minimum length requirement if using/for the DataNode. graylog2-server#17523 graylog2-server#17719
-
Updated the select_jsonpath pipeline function to accept JSON strings as the json parameter in addition to parsed JsonNode objects. graylog2-server#17647 graylog2-server#17683
-
Provide more verbose error messages for HTTPJSONPath data adapter. graylog2-server#17649 graylog2-server#17801
-
Add ability to specify a TTL for null values in lookup table caches. graylog2-server#16466 graylog2-server#17994
-
Suppress index_not_found_exception when there is a race between querying and deleting an index. graylog2-server#18127 graylog2-server#18146
-
Shorten time range of show received messages buttons on inputs, forwarder profiles and sidecars. graylog2-server#5620 graylog2-server#5621
-
Flag an error in rule source editor when variable name is a reserved word. graylog2-server#7006 graylog2-server#17736
-
Update io.prometheous:simpleclient to version 0.16.0. graylog2-server#16743
-
Update com.floreysoft:jmte from 5.0.0 to 7.0.2 graylog2-server#16747
-
Datanode directries don’t use nodeid subdirs anymore graylog2-server#17255
-
Allow trusted header authentication only for initial session creation. graylog2-server#17483
-
Changed logging in Message class. When invalid message key is found and ignored, that fact is logged with INFO level. Rate limited log is used in order to not overwhelm logs with this kind of log messages. graylog2-server#17601
-
Unify the way numeric fields are displayed in the message table widget, compared with the data table widget. graylog2-server#17693
-
Wait for Datanode to become available during graylog server startup graylog2-server#17758
-
Transition from javax to jakarta namespace. graylog2-server#17765
-
Adds a new optional parameter exclude_empty_arrays for pipeline function select_jsonpath. graylog2-server#17805graylog2-server#18674
-
Remove dependency to Mongojack 2 graylog2-server#18016
-
Trigger system notification for IO exceptions during HTTP data adapater lookup. graylog2-server#18022
-
Require authentication for visiting API browser to limit information exposure. graylog2-server#18328
-
Improve keyword validation in time range picker. graylog2-server#18219
-
Update Apache Shiro to 2.0.0 graylog2-server#18430
-
Consider http_external_uriwhen setting the cookie path. graylog2-server#18472
-
Change default second sort order to gl2_second_sort_field. graylog2-server#18348 graylog2-server#18527
-
Introduce MessageFactory and ResultMessageFactory Java interfaces and change Message constructors to be package-private. (See upgrading notes for details!) graylog2-server#18535
-
Datanode opensearch proxy endpoints support targetting specific nodes graylog2-server#18536
-
Compute indices overview statistics using _cluster/stats to reduce the amount of data returned.graylog2-server#18564
-
Improve parameter description of pipeline function csv_to_mapgraylog2-server#18589 graylog2-server#18707
-
Modified default values for min and max shard size for Time-Size-Optimizing rotation strategy to better match typical node resourcing. graylog2-server#18609
-
Rename datanode opensearch proxy paths graylog2-server#18688
-
Add support for query params in datanode opensearch and datanode rest API proxies graylog2-server#18749
-
When installing a content pack in cloud, ignore any inputs that are not cloud-compatible. graylog2-server#18688
-
d failures and fix sort order for search export. graylog2-server#18787
-
Remote reindex migration in datanode now uses async opensearch tasks. graylog2-server#18825
Removed
-
The close index button has been removed from the index set overview page for a specific index. graylog2-server#17570 graylog2-server#18037
-
Remove web interface plugin systemnavigation. graylog2-server#17309
-
Removed deprecated methods in org.graylog2.plugin.Message class: addStringFields, addLongFields, addDoubleFields, getValidationErrors. graylog2-server#17585
-
Removed unused classes: org.graylog2.plugin.SingletonMessages and org.graylog.plugins.views.search.engine.LuceneQueryParsingException. graylog2-server#17618
Fixed
-
Provide more diagnostic information when stream rule fails. graylog2-server#13499 graylog2-server#18539
-
Fix problems with unknown-field validation warnings on fields like gl2_source_input. From now on, Query Validation never treats special GL fields as unknown. graylog2-server#13856 graylog2-server#17515
-
Fix timezone issue with date picker, which resulted in highlighting the wrong selected day. graylog2-server#16096graylog2-server#16973
-
debounce Query Change in Alerts & Events graylog2-server#16388 graylog2-server#17987
-
Fix rule builder dropdown UX graylog2-server#16980 graylog2-server#17919
-
Fix tooltip colors on Rule Editor. graylog2-server#17204 graylog2-server#17220
-
Fixing problem with persisting selected page size for some paginated lists. graylog2-server#17261 graylog2-server#17278
-
Fixed event aggregation handling when aggregating on missing fields graylog2-server#17314 graylog2-server#17604
-
Improve migration and error handling for event definitions that are missing a field value. graylog2-server#17367
-
Fix preflight basic auth prompt when password has not been entered graylog2-server#17385 graylog2-server#17405
-
Pipeline rule simulator - JSON inside message graylog2-server#17464 graylog2-server#17817
-
Fix filebeat path for sidecar default templates and default configurations. graylog2-server#17526 graylog2-server#17624
-
Fix ineffective search query after exporting search to dashboard graylog2-server#17619 graylog2-server#17621
-
added actions on datanode datails page graylog2-server#17705 graylog2-server#17840
-
Fields
gl2_message_id
and streams are now reserved and cannot be changed by custom mappings. No reserved field can be changed when you manually change custom mappings in MongoDB - it will be ignored. graylog2-server#17728 graylog2-server#17766 -
Allow the index range clean up periodcal to delete index ranges that are no longer managed by an index set graylog2-server#17815 graylog2-server#17841
-
Fixed error when attempting to share entities with stream dependencies. graylog2-server#17882 graylog2-server#17891
-
Corrected parameter description for
handle_dup_keys
in the pipline rulekey_value
function. If not specified, the function defaults to using the first encountered value for duplicate keys. Fixed default values when using the rule builder. graylog2-server#17892 graylog2-server#17969 -
Fix issue where enabled event definitions would be incorrectly set to disabled through the REST API. graylog2-server#17958 graylog2-server#17959
-
Fixing UI runtime error when request for alerts overview returns an error. graylog2-server#17995 graylog2-server#18000
-
Fixes MoreSearch, so that it does not throw errors when affected indices are null or empty. Because of that, MoreSearch is safer to use on fresh installation, with no events and therefore no index ranges for events indices. graylog2-server#18002 graylog2-server#18023
-
Reverts fix for #16029 due to regression in GeoIP lookup table access. graylog2-server#18017 graylog2-server#18322
-
Fix index set defaults not being reflected in the form without reload. graylog2-server#18049 graylog2-server#18098
-
Fixing problem with query input which can make the search bar disappear. graylog2-server#18053 graylog2-server#18470
-
Fix CertificatesProvisioning no support for remote reindex migration graylog2-server#18411 graylog2-server#18410
-
Fixed automatic pop-up triggering for clearing notifications on the events definition overview page. graylog2-server#18633 graylog2-server#18646
-
Fix Pipeline rule editor: Prevent Abandon Page Confirmation. graylog2-server#18718 graylog2-server#18845
-
Reset events widget pagination when executing search. graylog2-server#18915 graylog2-server#18945
-
Fix permissions handling in events widget. graylog2-server#18949 graylog2-server#18953
-
Fixing stream filtering in events search type. graylog2-server#18971 graylog2-server#18972
-
Fixing text color for unqualified fields in field select. graylog2-server#18975 graylog2-server#18976
-
Fixing "unknown format" error on Sidecar overview page. graylog2-server#19012graylog2-server#19128
-
Error page was shown when navigating to search page with permissions to some streams (usually non-mesage streams, like events), but no permission for default stream. It has been fixed.graylog2-server#17548
-
DataNode: if no node name was specified, use the hostname as node name default. graylog2-server#17025
-
Fixed opensearch configuration sync permissions graylog2-server#17059
-
Fix Content pack install modal having two superposed modal element graylog2-server#16834 graylog2-server#15752 graylog2-server#17073
-
Exclude non-message streams from aggregation event searches.graylog2-server#17087
-
Show
ignore_null
configuration on lookup cache form. graylog2-server#15200 graylog2-server#17218 -
Fix redirect after creating contentpack revision. graylog2-server#17071 graylog2-server#17233
-
Fix Sidecar collector configuration form submit button not being clickable. graylog2-server#17185 graylog2-server#17280
-
Fix inputs extractors list not updating after deletion graylog2-server#16858 graylog2-server#17289
-
Prevent adding same entity data table filter multiple times graylog2-server#17362
-
Fix allow displayName in systemConfiguration plugin export. graylog2-server#15939 graylog2-server#17407
-
Fix editing of system notification event defitinions. graylog2-server#17435
-
Fix archiving when batch size exceeds ES/OS http.max_content_length. graylog2-server#17449
-
Show correct throughput metric when messages are routed via pipeline rules. graylog2-server#17456
-
Fix excessive logging of warnings for metrics requests after session expiration. graylog2-server#17477
-
By default, none and close index retention strategies are disabled for new installations. graylog2-server#17552
-
Fix issue preventing the
array_contains
pipeline function from working with json arrays graylog2-server#17611 -
Fix distribution of table column width for print version of data table and message list widget graylog2-server#17642
-
Remove entity from bulk select state, when removing single entity in tables with bulk actions. graylog2-server#17656
-
Fixing text alignment of highlighted numbers in data tables. graylog2-server#17678
-
Fix issue preventing the
lookup_all
pipeline function from working with json arrays graylog2-server#17820 -
Fixed bug causing null response from
array_contains
pipeline function when passed null array. graylog2-server#17909 -
Fix LDAP / AD authentication with legacy TLS. graylog2-server#18028
-
Fix Session not timing out on index set details page graylog2-server#18063 graylog2-server#18091
-
Fix support for changed IPinfo ASN mmdb files. graylog2-server#18124
-
Fix unintended HTML-escaping in system notification messages. graylog2-server#18171
-
More restrictive file permissions for support bundle files. graylog2-server#18174
-
Add permission check for displaying content pack uninstall details. graylog2-server#18177
-
Avoid logging Graylog node ID multiple times during server startup. graylog2-server#18219
-
Do not display info for dashboard query filter in aggregation builder, when dashboard query is empty graylog2-server#18241
-
OpenSearch renamed
cluster.initial_master_nodes
toinitial_cluster_manager_nodes
, which was not reflected yet and is a possible cause of startup bugs. graylog2-server#18342 -
Add a sensible default value for OpenSearch inside the DataNode for indices.query.bool.max_clause_count graylog2-server#18354
-
bumping the OpenSearch client to 2.12.0 graylog2-server#18386
-
fix RemoteReindexRunning step showing wrong actions graylog2-server#18542
-
fix duplicate license warning in DataNodesClusterManagementPage graylog2-server#18559
-
Fix Search query input in event definition form removing its value while typing. graylog2-server#18700 graylog2-server#18742
-
improve Remote Reindex Migration Indices display UX.graylog2-server#18754
-
Remove not yet configured datanodes (empty transport address) from indexer discovery graylog2-server#18802
-
Fix max. number of indices shown for Index Time Size Optimizing strategy. graylog2-server#14845 graylog2-server#18804
-
Fix clone modal immediately closing in Sidecar configuration graylog2-server#18811 graylog2-server#18828
-
Fix unknown field
caused_by
in remote reindex migration task class graylog2-server#18907 -
Add beta info to data node preflight and overview page graylog2-server#19038graylog2-server#19039
-
Fix rules editor showing warning when saving. graylog2-server#19008graylog2-server#19059
-
Tieing events widget to configured time range. graylog2-server#18914graylog2-server#18954
Security
-
Always create new sessions for authentication attempts to fix a potential session fixation vulnerability. GHSA-3xf8-g8gr-g7rh
-
Restrict classes allowed for cluster config and event types. GHSA-p6gg-5hf4-4rgjgraylog2-server#18165
Graylog 5.2.11
Released: 2024-09-04
Added
-
Added Microsoft Teams Notification V2 which is compatible with Microsoft Workflows. graylog2-server#19983
-
Fix error when installing content pack with
stream_title
parameter. graylog2-server#20244
Fixed
-
Fixed issue where
grok_exists
pipeline rule would return true for substrings of pattern names. graylog2-server#20264graylog2-server#20263 -
Fix issue where content pack stream dependencies were not properly resolved for some dashboards. graylog2-server#20265graylog2-server#20288
Graylog 5.2.10
Released: 2024-08-07
Changed
-
Implement table rows border color with more contrast. graylog2-server#20001
Fixed
-
Properly parse trailing padding bytes in IPFIX data sets. graylog-plugin-integrations#395 graylog2-server#20073
Graylog 5.2.9
Released: 2024-07-03
Fixed
-
Fix sidecar undefined error graylog2-server#19487
Graylog 5.2.8
Released: 2024-06-05
Added
-
Introduce new pipeline functions
remove_single_field
andremove_multiple_fields
to (eventually) replaceremove_field
. graylog2-server#19098graylog2-server#19300
Fixed
-
Fixed error when the
string_array_add
function is supplied a null value. graylog2-server#19439
Graylog 5.2.7
Released: 2024-04-30
Fixed
-
Display field value suggestions when field name is in the middle of the search query. graylog2-server#18288graylog2-server#18952
Graylog 5.2.6
Released: 2024-04-03
Fixed
-
Reverts fix for #16029 due to regression in GeoIP lookup table access. graylog2-server#18017 graylog2-server#18322
-
Fixed automatic pop-up triggering for clearing notifications on the events definition overview page. graylog2-server#18633 graylog2-server#18646
Graylog 5.2.5
Released: 2024-03-06
Changed
-
Suppress
index_not_found_exception
when there is a race between querying and deleting an index. graylog2-server#18127graylog2-server#18146
Fixed
-
Fixed event aggregation handling when aggregating on missing fields. graylog2-server#17314graylog2-server#17604
-
Fixing problem with query input which can make the search bar disappear. graylog2-server#18053graylog2-server#18470
-
Fix support for changed IPinfo ASN mmdb files. graylog2-server#18124
-
Fix potential deadlock in async query string validation. graylog2-server#16883graylog2-server#18461
Graylog 5.2.4
Released: 2024-02-07
Added
-
Added
field_value_suggestion_mode
config parameter that allows to switch field value suggestions off, turn them on, and turn them on only for textual fields. graylog2-server#18032graylog2-server#18095 -
Added link to first start logs to log into preflight UI. graylog2-server#18113
Changed
-
Ensure password secret meets the minimum length requirement if using/for the Data Node. graylog2-server#17523graylog2-server#17719graylog2-server#18111
-
Updated the
select_jsonpath
pipeline function to accept JSON strings as the json parameter in addition to parsed JsonNode objects. graylog2-server#17647graylog2-server#17683
Fixed
-
Improve migration and error handling for event definitions that are missing a field value. graylog2-server#17367graylog2-server#18051
-
Fixing UI failour when getting Processing and Indexing Failures stream name for non enterprise version. graylog2-server#17743graylog2-server#18143
-
Fixed error when attempting to share entities with stream dependencies. graylog2-server#17882graylog2-server#17891
-
Fix issue where enabled event definitions would be incorrectly set to disabled through the REST API. graylog2-server#17958graylog2-server#17959
-
Fixing UI runtime error when request for alerts overview returns an error. graylog2-server#17995graylog2-server#18000
-
Fix issue preventing the
lookup_all
pipeline function from working with JSON arrays. graylog2-server#17820 -
Fixed bug causing null response from
array_contains
pipeline function when passed null array. graylog2-server#17909 -
Propagate proxied request body to OpenSearch. graylog2-server#17984
-
Fix LDAP/AD authentication with legacy TLS. graylog2-server#18028
-
Fix Session not timing out on index set details page. graylog2-server#18063graylog2-server#18091
-
Add permission check for displaying content pack uninstall details. graylog2-server#18177
Security
-
Always create new sessions for authentication attempts to fix a potential session fixation vulnerability. GHSA-3xf8-g8gr-g7rh
-
Restrict classes allowed for cluster config and event types. GHSA-p6gg-5hf4-4rgjgraylog2-server#18165
Graylog 5.2.3
Released: 2024-01-03
Changed
-
Changed content packs handling to allow import/export of entities that reference streams by title. graylog2-server#16743
Removed
-
Removed legacy Sidecar collector migration link in UI. graylog2-server#17602
Fixed
-
Fix filebeat path for sidecar default templates and default configurations. graylog2-server#17526graylog2-server#17624
-
Fix ineffective search query after exporting search to dashboard. graylog2-server#17619graylog2-server#17621
-
Fix content pack install modal having two superposed modal element. graylog2-server#16834graylog2-server#15752graylog2-server#17073
-
Fix Sidecar collector configuration form submit button not being clickable. graylog2-server#17185graylog2-server#17280
-
Fix issue preventing the
array_contains
pipeline function from working with JSON arrays. graylog2-server#17611 -
Fix distribution of table column width for print version of data table and message list widget. graylog2-server#17642
-
Fixing text alignment of highlighted numbers in data tables. graylog2-server#17678
Graylog 5.2.2
Released: 2023-12-06
Added
-
Added support for sending HTTP Notification API Key/Secret as a header. graylog2-server#14691graylog2-server#17369
-
Added 4 pipeline functions for general use that were previously only available to Illuminate.graylog2-server#6112
Changed
-
Add Data Node pre-flight check to validate the
vm.max_map_count
sysctl value. graylog2-server#17430graylog2-server#17497graylog2-server#17512
Fixed
-
Fix preflight basic auth prompt when password has not been entered. graylog2-server#17385graylog2-server#17405
-
Prevent adding same entity data table filter multiple times. graylog2-server#17362
-
Fix editing of system notification event definitions. graylog2-server#17435
-
Fix archiving when batch size exceeds ES/OS
http.max_content_length
. graylog2-server#17449 -
Fix excessive logging of warnings for metrics requests after session expiration. graylog2-server#17477
Graylog 5.2.1
Released: 2023-11-15
Added
-
Added the Email Notification ID to the System Notification for Missing Email Recipients. graylog2-server#16988graylog2-server#17061
-
Including basic data node usage information in telemetry. graylog2-server#17042
Changed
-
Enable sidecar default configurations to be updated on existing installs. graylog2-server#17040graylog2-server#17246graylog2-server#17282
Fixed
-
Fix timezone issue with date picker, which resulted in highlighting the wrong selected day. graylog2-server#16096graylog2-server#16973
-
Fix tooltip colors on Rule Editor. graylog2-server#17204
-
Fixing problem with persisting selected page size for some paginated lists. graylog2-server#17261graylog2-server#17278
-
DataNode: if no node name was specified, use the hostname as node name default. graylog2-server#17025
-
Fixed opensearch configuration sync permissions, backport of #17059 graylog2-server#17078
Graylog 5.2.0
Released: 2023-11-01
Added
-
The max number of indices is now persisted when changing strategies in the index retention strategy configuration graylog2-server#13975graylog2-server#16860
-
Add log messages like in the old JEST client to show nodes arriving/dropping from an ES/OS cluster graylog2-server#14383graylog2-server#14898
-
Create time range quick access list for multiple time range types graylog2-server#15484
-
Add sidecar
graylog_host
variable, Auditbeat collector for Linux and default configurations. graylog2-server#15570graylog2-server#15571 -
Create undo/redo actions in search graylog2-server#15704
-
Track when an event definition was last successfully matched. graylog2-server#15751graylog2-server#16071
-
Add bulk action for streams overview to start a search with selected streams. graylog2-server#15975graylog2-server#16015
-
Secure datanode REST API with the same SSL certificate as the one used for Opensearch HTTP graylog2-server#15990graylog2-server#16058
-
Enable basic auth for datanode rest API if security is enabled graylog2-server#16447graylog2-server#16446
-
New Content Stream section to welcome page to show Rss feed and Release notice. graylog2-server#15843
-
New pipeline rule functions for map manipulation:
map_set
,map_remove
. graylog2-server#6470graylog2-server#16174 -
Optional flag to invert condition of
remove_field
function. graylog2-server#8128graylog2-server#16182 -
Added event definition title as a summary to Microsoft Teams notifications. graylog-plugin-integrations#1341graylog-plugin-integrations#1343
-
Run matrix tests with a given indexer version. graylog2-server#15088
-
Datanode autodiscovery, indexer hosts refactoring, preflight startup logic implemented graylog2-server#15197
-
Add Sidecar Reader and Sidecar Manager roles to read and manage sidecars. graylog2-server#12044graylog2-server#15380
-
Add system logs to nodes overview page. graylog2-server#15381
-
AMQP input improvements: retry connection with configurable interval and encrypt password. graylog2-server#12447graylog2-server#15401
-
Adding specific field types for streams, node & input fields. graylog2-server#15409
-
Advanced field types for scripting API - support for stream, node and input name resolution graylog2-server#15421
-
Resolving input/streams/node ids in aggregation results, showing titles. graylog2-server#15464
-
Pipeline Rule Builder UI graylog2-server#15490graylog2-server#15470
-
Allow simulation of json messages on the rule creation page graylog2-server#15490graylog2-server#15480
-
Add CA configuration to load a given CA during startup for datanode certificate provisioning. graylog2-server#15546
-
Restrict time size based rotation strategy duration leeway on cloud graylog-plugin-cloud#1149graylog2-server#15556
-
Implementing highlighting for advanced field types (streams, nodes, inputs). graylog2-server#15601
-
Include titles of advanced field types in suggestions. graylog2-server#15614
-
Updating Sources Dashboard with better widgets to gain insights into log volume distribution. graylog2-server#15677
-
Added the
string_entropy
pipeline function. graylog2-server#15682 -
Implementing percentage metric for aggregations. graylog2-server#6763graylog2-server#15738
-
Add action to cleanup & rebuild index ranges of all index sets. graylog2-server#11919graylog2-server#15808
-
Adding values pivot option to disable empty buckets. graylog2-server#15814
-
Enabling percentage/percentile metrics in event definitions. graylog2-server#10082graylog2-server#15863
-
Add event limit for filter event definition. graylog-plugin-enterprise-integrations#5382graylog2-server#16035
-
Implement option to change order of search highlighting rules. graylog2-server#16095
-
Mark users synced from a deactivated authorization backend in user overview list and on user detail page. graylog2-server#13823graylog2-server#16134
-
Add pipeline name and stage to log output when an exception occurs during pipeline processing. graylog2-server#8627graylog2-server#16161
-
Add API endpoint for event definition duplication. graylog2-server#16251
-
Introduce telemetry custom event name graylog2-server#16317
-
DataNode: if you use the DataNode, the nodes system clocks have to be synchronized for JWT usage. graylog2-server#16334
-
Add change field type action for a field graylog2-server#16469graylog2-server#16344
-
Added ability to clean field names for
set_field
andset_fields
pipeline functions graylog2-server#7137graylog2-server#16514 -
Enabling pre-flight UI for general availability. graylog2-server#16722
-
Enabling field type management for general availability. graylog2-server#16773
-
Include link to replay an alert in teams and slack notification template. graylog-server#15678graylog-plugin-integrations#1348
Changed
-
Display keyword in time range summary instead of from / to range. Display effective search execution time range in sidebar, which can be helpful for relative and keyword time ranges. graylog2-server#11401graylog2-server#15961
-
Memorize state of time range tabs in time range picker while picker is open. graylog2-server#11465graylog2-server#16107
-
Implement share button for saved searches overview. graylog2-server#15355graylog2-server#16126
-
Read CSP directives from a resource property file. graylog2-server#15370graylog2-server#15439
-
On View Event Definition page added Duplicate button and removed Edit button for definitions that are scoped as immutable. graylog2-server#15916graylog2-server#16515
-
Unify auto-refresh behavior in case there are form changes. graylog2-server#16893
-
Updated AWS Java SDK to the latest version graylog-plugin-enterprise-integrations#971graylog2-server#14712
-
Update Content Security Policy on the fly, when an authentication backend is created. graylog2-server#15371graylog2-server#15305
-
Moved AWS plugin into server repository. graylog2-server#15318
-
‘Show received messages’ for forwarder inputs now queries for messages using the new
gl2_forwarder_input
field. graylog2-server#15378 -
Update Kafka client library from 2.7.0 to 3.4.0. graylog2-server#15488
-
Using composable index templates instead of legacy templates. graylog2-server#15782graylog2-server#15948
-
When entity was added to the favorites, it was added to the end of the list. It meant that top of the favorites’ list contained entities that had been added first to the list. It seemed wrong. From now on, the newly added entity will be shown on the top of the favorites’ list. graylog2-server#16050
-
Make
creation_date
optional when creating index sets via api. If none is provided, the current server time will be used. graylog2-server#4709graylog2-server#16166 -
Show syntax error in pipeline rule editor when trying to access nested variables using an array literal, e.g.
result.["key"]
. graylog2-server#16029graylog2-server#16196 -
Introduce a cache configuration setting to avoid caching empty values. graylog2-server#13579graylog2-server#15200graylog2-server#16199
-
Merging integrations plugin into core repository. graylog2-server#16274
-
Publish system events asynchronously to prevent threads getting blocked. graylog2-server#16426
Deprecated
-
Adding REST endpoint to create custom field type mappings for index sets. graylog2-server#16241
-
GreyNoise Data Adapter functionality has been limited to only use with non-community GreyNoise subscriptions. graylog-plugin-integrations#1340graylog-plugin-enterprise-integrations#1059graylog2-server#15592
Removed
-
Remove support for legacy Collector Sidecars. graylog-project-internal#102
-
Remove obsolete ElasticsearchConfigMigration and AddRetentionRotationAndDefaultFlagToIndexSetMigration migrations. graylog2-server#16153
-
Remove ERROR level logs that happened during user/role creation. graylog2-server#16184
Fixed
-
Display indicator when dashboard has unsaved changes. graylog2-server#10682graylog2-server#16122
-
Validate in aggregation builder if metric name is unique. graylog2-server#11592graylog2-server#16097
-
Fix
join()
andsubstring()
pipeline function parameter names. graylog2-server#11868 -
Do not show query input suggestions when using Add to query field value action. graylog2-server#12165graylog2-server#15885
-
We improved the index set overview page performance and added a title-based search feature. graylog2-server#12498graylog2-server#15155
-
Fix test lookup not accepting uppercase characters graylog2-server#14373graylog2-server#16909
-
Make sure that boolean fields are returned as
true|false
in aggregations on Opensearch 2.4+. graylog2-server#14661graylog2-server#15809 -
Adjust keybindings for query input autocompletion. graylog2-server#14793graylog2-server#16162
-
Fix heatmap colorbar font color for dark mode. graylog2-server#15035graylog2-server#16129
-
Improve readability of hover legend in aggregations. graylog2-server#15084graylog2-server#15888
-
Enable/Disable Event Definition status when clicking on status badge. graylog2-server#15095graylog2-server#16203
-
Fix: BulkActions dialog not closing after clicking on Confirm. graylog2-server#15259graylog2-server#15384
-
Fix pagination problems on Events page. graylog2-server#15273graylog2-server#15357
-
Fix problem with search bar submit button incorrectly indicating changes for keyword time range. graylog2-server#15472graylog2-server#15938
-
Apply pivot limits correctly when installing saved searches/dashboard from pre-5.1 content packs. graylog2-server#15509graylog2-server#15523
-
Make sure that search is reexecuted when ‘Add to query’/‘Remove from query’ on dashboards. graylog2-server#15519graylog2-server#15593
-
Properly prefix frontend paths to prevent error when custom app path suffix is used. graylog2-server#15536graylog2-server#15540
-
Use search query from URL params for dashboard page search input. graylog2-server#15536graylog2-server#15540
-
When modifying a user’s session timeout, the system will automatically update existing user sessions to ensure application of the new timeout settings. graylog2-server#15609graylog2-server#15657
-
Remove LastOpened and Favorite items from internal Entity List graylog2-server#15638graylog2-server#15574graylog2-server#15658
-
Save modified search when query is changed through URL parameters. graylog2-server#15642graylog2-server#15653
-
Restore mail attribute for AD authentication. graylog2-server#15536
-
Include link to replay an alert in alert mail notification template. graylog2-server#15678graylog2-server#15922
-
Fixes sorting with variance/stddev/sumofsquare metrics. graylog2-server#15707graylog2-server#15878
-
Fixing problem with focus loss in query input autocompletion. graylog2-server#15718graylog2-server#15933
-
Render values consistently between normal and full screen mode. graylog2-server#15778graylog2-server#15864
-
Fixes problems with editing Search Filters of entities installed via Content Packs. Search Filters of those types of entities are not inlined during Content Pack installation and can be edited. graylog2-server#15841graylog2-server#16085
-
Disable offline detection for REST API client. graylog2-server#15913graylog2-server#15914
-
Show errors again when loading a saved search or dashboard which exceeds the query limit. graylog2-server#15958graylog2-server#15998graylog2-server#16033
-
Fix TLS compatibility with older operating systems (e.g. Win Server 2019). graylog2-server#16076
-
Cluster initial manager nodes in datanode configurable. graylog2-server#16143graylog2-server#16146
-
Improve logic which controls when we show the query input completions. graylog2-server#16207graylog2-server#16168
-
Fixes validation of max index retention lifetime for time-size-optimizing indices. graylog2-server#16392
-
Updating title of dashboard is now properly saved. graylog2-server#16440graylog2-server#16441
-
Fixing broken streams page if streams without
matching_type
exist. graylog2-server#16474graylog2-server#16522 -
Fixing error which occurred when saving a dashboard after deleting a page in the pages configuration modal. graylog2-server#16634graylog2-server#16674
-
Fix Geo-Location Processor Configuration modal being stuck after the updating the config failed. graylog2-server#16828graylog2-server#16926
-
Fixed error where only most recent revision of a content pack could be installed. graylog2-server#16913graylog2-server#16943
-
Fixes search export, so that it takes search filters into consideration. graylog2-server#5793graylog2-server#16896
-
Fix wrong lookup cache metrics after reconfiguration. graylog2-server#8633
-
Fix GELF output to not block output processing. graylog2-server#9917graylog2-server#15385
-
Show all streams in global decorators configuration, fixing display problem graylog2-server#13465graylog2-server#13467graylog2-server#15280
-
Improving decorator config by showing map of all decorators present. graylog2-server#14546graylog2-server#15284
-
Make sure that search creation has finished before executing it for new saved searches/dashboards. graylog2-server#15435graylog2-server#15437
-
Fixing session expiration on the nodes page. graylog2-server#15465
-
Fix archiving failure in case of AWS Opensearch 429 error graylog2-server#15503
-
Extend authentication cookie’s max age on every session extension. graylog2-server#15502graylog2-server#15504
-
Do not extend session when fetching indexer cluster health. graylog2-server#15505
-
Keep query order when exporting saved searches/dashboards to content packs. graylog2-server#15341graylog2-server#15528graylog2-server#15505
-
Improve widget placement for specific widget sizes/positions. graylog2-server#15308graylog2-server#15538graylog2-server#15545
-
NodeService#allActive returns only nodes of correct type based on current server type graylog2-server#15505
-
Avoid redirecting to path with trailing / when delivering static assets. graylog2-server#15613
-
Fixing search creation when replaying events/event definitions. graylog2-server#15552graylog2-server#15689graylog2-server#15688
-
Fix enabled_index_rotation_strategies configuration to allow setting of TimeBasedSizeOptimizingStrategy graylog2-server#15750
-
Sort function names, add rule builder fragments with implicit to_string, fix string parameter handling in fragments. graylog2-server#15785
-
Fixed query decoration in aggregation alerts. graylog2-server#15737graylog2-server#15793
-
Force user to select an entity for when picking a start page type. graylog2-server#15578graylog2-server#15869
-
Fix problem with STOPPED reactor on OutOfMemoryError. This error stops the whole GL instance now, instead of constantly logging errors related to stopped reactor. graylog2-server#15889
-
Mark required fields in body of API call PUT roles/{rolename}graylog2-server#16019
-
Include parameters when replaying search for dashboard widget. graylog2-server#16051
-
Fix event definition enable UI state for Filter & Aggregation. graylog2-server#16070graylog2-server#16072
-
Fix internal server error for cluster logger level API requests. graylog2-server#11408graylog2-server#14256graylog2-server#16092
-
Fix possible NullPointerExceptions when writing pipeline rules with maps. graylog2-server#14818graylog2-server#16175
-
Added a new Event Definition column: Last Matched. graylog2-server#15751graylog2-server#16195
-
Fix blocked system events index preventing node registration and leader election. graylog2-server#16407
-
DNS Resolver Pool warning log message now accurately reflects configured
dns_lookup_adapter_resolver_pool_size
value. graylog2-server#16475 -
Indexer cluster checker thread start is delayed by 5s to avoid potential deadlock. graylog2-server#16481
-
Fixes failure to delete indices with time/size optimizing strategy, when write block is not present. graylog2-server#16503
-
Fixing display of session timeout unit on user edit page. graylog2-server#16563
-
Fix description for the scenario that one term or value has multiple matching highlighting rules. graylog2-server#16668
-
By default, ’none’ retention strategy is now disabled for new installations. graylog2-server#16927
-
Allow logging metrics to include DEBUG/TRACE level. graylog2-server#10866graylog2-server#16962
-
Aligning order of precedence of auth info in proxied resources with general authentication logic. graylog2-server#16985graylog2-server#16999
-
Change loggers in indexer subsystem to output all messages related to indexing/searching. graylog2-server#17011graylog2-server#17012
Security
-
Fix partial path traversal vulnerability in Support Bundle feature. GHSA-2q4p-f6gf-mqr5
-
Fix stale session cache after logout. GHSA-3fqm-frhg-7c85
-
Fix insecure source port usage for DNS Lookup adapter queries. GHSA-g96c-x7rh-99r3
-
Update SnakeYAML to version 2.2. (fixes CVE-2022-1471) graylog2-server#16377
-
Update Jackson to 2.15.2. (CVE-2022-42003) graylog2-server#16377
-
Update Scala to 2.13.12 to include fix of CVE-2022-36944. graylog2-server#16456
-
Update various third-party libraries to address vulnerabilites. graylog2-server#16476
-
Update Netty to 4.1.100 to fix the HTTP/2 Rapid Reset attack. GHSA-xpw8-rcwv-8f8p The security vulnerability affects all Graylog users that run the Graylog Forwarder input on their servers. graylog2-server#16902
Graylog 5.1.13
Released: 2024-04-03
No changes since 5.1.12.
Graylog 5.1.12
Released: 2024-03-06
Fixed
-
Fix potential deadlock in async query string validation. graylog2-server#16883graylog2-server#18467
Graylog 5.1.11
Released: 2024-02-07
Changed
-
Updated the
select_jsonpath
pipeline function to accept JSON strings as the json parameter in addition to parsed JsonNode objects. graylog2-server#17647graylog2-server#17683
Fixed
-
Fixing UI runtime error when request for alerts overview returns an error. graylog2-server#17995graylog2-server#18000
-
Add permission check for displaying content pack uninstall details. graylog2-server#18177
Security
-
Always create new sessions for authentication attempts to fix a potential session fixation vulnerability. GHSA-3xf8-g8gr-g7rh
-
Restrict classes allowed for cluster config and event types. GHSA-p6gg-5hf4-4rgjgraylog2-server#18165
Graylog 5.1.10
Released: 2024-01-03
Added
-
Added the
string_entropy
pipeline function. graylog2-server#15682
Fixed
-
Fix ineffective search query after exporting search to dashboard. graylog2-server#17619graylog2-server#17621
-
Fixing problem with legacy theme mode in local storage, which can occur for read-only users when downgrading Graylog. graylog2-server#17368
-
Fix distribution of table column width for print version of data table and message list widget. graylog2-server#17642
Graylog 5.1.9
Released: 2023-12-06
Added
-
Added support for sending HTTP Notification API Key/Secret as a header. graylog2-server#14691graylog2-server#17369
-
Added the Email Notification ID to the System Notification for Missing Email Recipients. graylog2-server#16988graylog2-server#17061
Fixed
-
Fix page size select on Alerts & Events page. graylog2-server#17199graylog2-server#17342
-
Fixing problem with persisting selected page size for some paginated lists. graylog2-server#17261graylog2-server#17278
-
Change loggers in indexer subsystem to output all messages related to indexing/searching. graylog2-server#17011graylog2-server#17012
-
Prevent adding same entity data table filter multiple times. graylog2-server#17362
-
Fix editing of system notification event definitions. graylog2-server#17435
-
Fix archiving when batch size exceeds ES/OS
http.max_content_length
. graylog2-server#17449 -
Fix excessive logging of warnings for metrics requests after session expiration. graylog2-server#17477
Graylog 5.1.8
Released: 2023-11-01
Fixed
-
Fix timezone issue with date picker, which resulted in highlighting the wrong selected day. graylog2-server#16096graylog2-server#16973
-
Fixed error where only most recent revision of a content pack could be installed. graylog2-server#16913graylog2-server#16943
-
Fixes search export, so that it takes search filters into consideration. graylog2-server#5793graylog2-server#16896
Graylog 5.1.7
Released: 2023-10-12
Security
-
Update Netty to 4.1.100 to fix the HTTP/2 Rapid Reset attack (GHSA-xpw8-rcwv-8f8p). The security vulnerability affects all Graylog users that run the Graylog Forwarder input on their servers. graylog2-server#16902
Graylog 5.1.6
Released: 2023-10-04
Added
-
Add Sidecar Reader and Sidecar Manager roles to read and manage sidecars. graylog2-server#12044graylog2-server#15380
-
Added ability to clean field names for
set_field
andset_fields
pipeline functions. graylog2-server#7137graylog2-server#16514
Fixed
-
Fixes validation of max index retention lifetime for time-size-optimizing indices. graylog2-server#16448
-
Updating title of dashboard is now properly saved. graylog2-server#16440graylog2-server#16441
-
Fixing broken streams page if streams without
matching_type
exist. graylog2-server#16474graylog2-server#16522 -
Fixing error which occurred when saving a dashboard after deleting a page in the pages configuration modal. graylog2-server#16634graylog2-server#16674
-
Fix event definition enable UI state for Filter & Aggregation. graylog2-server#16070graylog2-server#16072
-
Fix blocked system events index preventing node registration and leader election. graylog2-server#16407
-
Indexer cluster checker thread start is delayed by 5s to avoid potential deadlock. graylog2-server#16481
-
Fixes failure to delete indices with time/size optimizing strategy, when write block is not present. graylog2-server#16503
-
Fix description for the scenario that one term or value has multiple matching highlighting rules. graylog2-server#16668
Graylog 5.1.5
Released: 2023-08-02
Fixed
-
Display indicator when dashboard has unsaved changes. graylog2-server#10682graylog2-server#16122
-
Adjust keybindings for query input autocompletion. graylog2-server#14793graylog2-server#16162
-
Fix heatmap colorbar font color for dark mode. graylog2-server#15035graylog2-server#16129
-
Fixes problems with editing Search Filters of entities installed via Content Packs. Search Filters of those types of entities are not inlined during Content Pack installation and can be edited. graylog2-server#15841 graylog2-server#16085
Graylog 5.1.4
Released: 2023-08-02
Added
-
Adding values pivot option to disable empty buckets. graylog2-server#15814
Fixed
-
Fix
join()
andsubstring()
pipeline function parameter names. graylog2-server#11868 -
Do not show query input suggestions when using
Add to query
field value action. graylog2-server#12165graylog2-server#15885 -
Improve readability of hover legend in aggregations. graylog2-server#15084graylog2-server#15888
-
Fix problem with search bar submit button incorrectly indicating changes for keyword time range. graylog2-server#15472graylog2-server#15938
-
Fixing problem with focus loss in query input autocompletion. graylog2-server#15718graylog2-server#15933
-
Render values consistently between normal and full screen mode. graylog2-server#15778graylog2-server#15864
-
Decreasing z-index of login background. graylog2-server#15884graylog2-server#15901
-
Disable offline detection for REST API client. graylog2-server#15913graylog2-server#15914
-
Fix TLS compatibility with older operating systems. (e.g. Win Server 2019). graylog2-server#16076
-
Force user to select an entity for when picking a start page type. graylog2-server#15578graylog2-server#15869
Security
-
Changed the minimum allowed Anomaly Detector interval to 10 minutes.
-
Fixes race condition in range calculation when restoring small indices.
-
Fixed handling of backslashes in Sigma rule queries that caused OpenSearch errors.
-
Fix unknown email_attributes error when using AD team sync; honor user-configured LDAP attribute names. graylog2-server#15652
Graylog 5.1.3
Released: 2023-07-05
Added
-
Added event definition title as a summary to Microsoft Teams notifications. graylog-plugin-integrations#1341graylog-plugin-integrations#1343
Fixed
-
Make sure that boolean fields are returned as
true|false
in aggregations on OpenSearch 2.4+. graylog2-server#14661graylog2-server#15816 -
Save modified search when query is changed through URL parameters. graylog2-server#15642graylog2-server#15654
-
Fixing search creation when replaying events/event definitions. graylog2-server#15552graylog2-server#15689graylog2-server#15690
-
Fix
enabled_index_rotation_strategies
configuration to allow setting ofTimeBasedSizeOptimizingStrategy
. graylog2-server#15750
Security
-
Fix partial path traversal vulnerability in Support Bundle feature. GHSA-2q4p-f6gf-mqr5
-
Fix stale session cache after logout. GHSA-3fqm-frhg-7c85
-
Fix insecure source port usage for DNS Lookup adapter queries. GHSA-g96c-x7rh-99r3
Graylog 5.1.2
Released: 2023-06-07
Fixed
-
When modifying a user’s session timeout, the system will automatically update existing user sessions to ensure application of the new timeout settings. graylog2-server#15609graylog2-server#15657
-
Remove LastOpened and Favorite items from internal Entity List graylog2-server#15638graylog2-server#15574graylog2-server#15658
-
Fix user login with AD authentication by restoring the mail attribute. graylog2-server#15536
-
Fix GELF output to not block output processing. graylog2-server#9917graylog2-server#15385
-
Extend authentication cookie’s max age on every session extension. graylog2-server#15502graylog2-server#15650
Graylog 5.1.1
Released: 2023-05-25
Added
-
Add support for a fixed leeway configuration for the time size based rotation strategy. graylog-plugin-cloud#1149 graylog2-server#15556
Fixed
-
Fix: BulkActions dialog not closing after clicking on Confirm. graylog2-server#15259graylog2-server#15384
-
Apply pivot limits correctly when installing saved searches/dashboard from pre-5.1 content packs. graylog2-server#15509graylog2-server#15582
-
Make sure that search is reexecuted when ‘Add to query’/‘Remove from query’ on dashboards. graylog2-server#15519graylog2-server#15599
-
Properly prefix frontend paths to prevent error when custom app path suffix is used. graylog2-server#15536graylog2-server#15577
-
Use search query from URL params for dashboard page search input. graylog2-server#15536graylog2-server#15540
-
Show all streams in global decorators configuration, fixing display problem. graylog2-server#13465graylog2-server#13467graylog2-server#15280
-
Do not extend session when fetching indexer cluster health. graylog2-server#15505
-
Fixing session expiration on the nodes page. graylog2-server#15507
-
Keep query order when exporting saved searches/dashboards to content packs. graylog2-server#15341graylog2-server#15528graylog2-server#15505
-
Improve widget placement for specific widget sizes/positions. graylog2-server#15308graylog2-server#15538graylog2-server#15585
Graylog 5.1.0
Released: 2023-05-11
Added
-
Provide ability to configure an email attribute for LDAP. graylog2-server#11131graylog2-server#14041
-
Add global session timeout configuration. graylog2-server#11379graylog2-server#14343
-
Generate an event in the
System Event
stream for every system notification graylog2-server#12555graylog2-server#14345graylog2-server#13833 -
Add support to skip TLS verification on HTTP event notifications. graylog2-server#12959
-
Adds a unique
username
index to theuser
collection to prevent creation of duplicate users. Any existing duplicates are resolved by appending the user ID. graylog2-server#12963graylog2-server#14649 -
Implement option to filter streams overview based on stream status. graylog2-server#13852graylog2-server#14640graylog2-server#14690
-
Standardize sort icons for data table and message list. graylog2-server#13982graylog2-server#13987
-
Add support for a reply-to address in email notifications. graylog2-server#14254graylog2-server#14337
-
Add support for encrypted storage of secret input configuration parameters. graylog2-server#14433graylog2-server#14459
-
Add replay search pages for events, alerts and event definitions graylog2-server#14540graylog2-server#14657
-
Add functionality which allows user create event definition from values graylog2-server#14544graylog2-server#15054
-
Added an “Undo Reset” button to fields in input configuration forms. graylog2-server#14767graylog2-server#15147
-
Store selected filters and search query on streams and dashboards overview as URL query params. graylog2-server#14826graylog2-server#15011
-
Implement index set filter for streams overview. graylog2-server#14827graylog2-server#14905
-
Implement creation date filter for streams overview. graylog2-server#14828graylog2-server#14966
-
Implement bulk start and stop action for streams overview. graylog2-server#14881graylog2-server#14882graylog2-server#14883
-
Introduce ability to simulate a single pipeline rule in isolation. graylog2-server#14891graylog2-server#14892
-
Add telemetry for generic usage metric collection graylog2-server#14900graylog2-server#14979
-
Added configurable default timezone to syslogs inputs and parse tz field from FortiGate msg’s graylog2-server#3853graylog2-server#14737syslog4j-graylog2#41graylog-plugin-integrations#1332
-
Allow pipeline function
remove_field
to take a regex pattern instead of a field name. graylog2-server#5653graylog2-server#15131 -
Add
normalize_fields
pipeline rule function for normalizing message field names. graylog2-server#6527graylog2-server#14636 -
Implement option to copy a dashboard page to another dashboard. graylog2-server#8506graylog2-server#14348
-
Introduces a new pipeline function
lookup_has_value
to determine if a given key is present in the lookup table. graylog2-server#9173graylog2-server#15143 -
Added ability to replay the search that triggered an Event. graylog2-server#9438graylog2-server#13931
-
Added
output_batch_size
to the values exposed by the system/configuration API call. graylog2-server#9461graylog2-server#14123 -
Add support for configuring Index Set Defaults graylog2-server#13018
-
Replacing getting started guide with start page which lists recently opened and favorite saved searches and dashboards and recent activity. graylog2-server#13970
-
Dynamic Startup Page Backend additions for Recent Activity, Pinned Items, Last Opened graylog2-server#13985
-
Add option to sort streams returned by API endpoint to be sorted by index set title. graylog2-server#14085
-
Add REST API endpoint for bulk assignment of streams to index sets. graylog2-server#14096
-
Providing plugin API to supply custom query input commands. graylog2-server#14239
-
Added the option to toggle between a linear and a logarithmic axis for area/bar/line/scatter charts. graylog2-server#14269
-
Adding inline widget creation in empty slots on grid. graylog2-server#14331
-
Graylog Data Node. Initial version. graylog2-server#14417
-
Introduces a new index rotation strategy combining features of size-based and time-based strategies. graylog2-server#14424
-
Added a page for tracking failures in Sidecar. collector-sidecar#433graylog2-server#14435
-
Expose JVM metrics to prometheus. graylog2-server#14437
-
Add OpenTelemetry tracing instrumentation to select code paths. graylog2-server#14550
-
Add option to bulk delete dashboards in dashboards overview. graylog2-server#14566
-
Add option to bulk delete saved searches in saved searches overview. graylog2-server#14567
-
Persist selected sorting, displayed columns and page size in streams overview for each user. graylog2-server#14293graylog2-server#14591
-
Persist selected sorting, displayed columns and page size in dashboards overview for each user. graylog2-server#14293graylog2-server#14598
-
Persist selected sorting, displayed columns and page size in saved searches overview for each user. graylog2-server#14293graylog2-server#14600
-
Report runtime failures for polling Inputs. graylog2-server#14726
-
Allow user-configurable auto-refresh settings & default interval. graylog2-server#14742
-
Enabling the simple search/scripting API. graylog2-server#14749
-
Added flattening functionality to the JSON Path Codec. graylog2-server#14851
-
Add dashboards, searches, messages and events to an open investigation. graylog2-server#14897
-
Add support bundle export feature. graylog2-server#14938
-
Added preflight UI for indexer configuration
-
Added badge to navigation bar to show when a new Illuminate bundle is ready to download and install. graylog2-server#15001
-
Added support for CIDR lookups in CSV file data adapters graylog2-server#15016
-
Adds Add Evidence Modal graylog2-server#15148
-
Added autodetection of OpenSearch distribution in data node. graylog2-server#15216
-
Updating login background and claim. graylog2-server#15215graylog2-server#15295
-
Make messages with identical timestamps sortable by ULID graylog2-server#2741graylog2-server#6711
-
Added option to omit title portion of Slack notifications to reduce clutter. graylog-plugin-integrations#1172graylog-plugin-integrations#1320
-
Added support for timezones in Slack and Teams notifications. graylog-plugin-integrations#1318graylog-plugin-integrations#1320
-
Added option to notify
@here
in Slack notifications. graylog-plugin-integrations#780graylog-plugin-integrations#1320
Changed
-
Improved validation of grok pattern definition. graylog2-server#11342graylog2-server#14853
-
Consistent use of message identifiers in strings. Message id visible in message list. graylog2-server#13628graylog2-server#14562
-
Display streams overview as a table to improve usability. graylog2-server#13887graylog2-server#13930
-
Start
JSON path value from HTTP API
input on leader node only, ifGlobal
option was selected in input configuration. graylog2-server#14074 -
Changed bulk indexing retry failure log-level from error to warning. graylog2-server#14086graylog2-server#14088
-
Changed event definitions and notifications to new paginated list and entity list ui component. This enables bulk deletion of event definitions and notifications and bulk enabling/disabling event definitions. graylog2-server#14285graylog2-server#14502
-
Prevent deletion of event definitions that are still referenced in other definitions. graylog2-server#14302graylog2-server#14792
-
Disable two TLS ciphers that are considered weak. graylog2-server#14428graylog2-server#14592
-
Instead of showing all configurations on one page it is now seperated into sections with a sidebar navigation. graylog2-server#14735graylog2-server#15025
-
Generate a system notification when an aggregation search errors out unexpectedly. graylog2-server#14746graylog2-server#14967
-
Include URLs for authentication service(s) in the CSP header connect-src. graylog2-server#15238graylog2-server#15283
-
GL will no longer perform a temporary redirect based on the Host header. graylog2-server#15067
-
Refreshed and modernized look of login dialog. graylog2-server#13780
-
Display dashboards overview as a table to improve usability. graylog2-server#14105
-
Reduce the default connection and read timeouts for email sending from 60 seconds to 10 seconds graylog2-server#14199
-
Display saved searches overview as a table to improve usability. graylog2-server#14223
-
Forwarder inputs can be used for the ‘match input’ stream rule. graylog-plugin-cloud#1066graylog2-server#14240
-
Sorting streams case-insensitive in API. graylog2-server#14262
-
Unify fields configuration in aggregation builder and messages export modal. graylog2-server#14725
-
Merging Threat Intel Plugin into server repository. graylog2-server#14953
-
Make sure all bindings which use createIndex are threadsafe and make them singletons. graylog2-server#14965
-
Remove stack trace from the generic server error response. graylog2-server#14978
-
Add a Content Security Policy header to responses. graylog2-server#14991
-
Using database time for node registration and heartbeat
-
datanode: add conf option to be able to force single-node type
-
Set a specific Content Security Policy header for API-Browser responses. graylog2-server#15184
-
Update OpenSearch distributed with Datanode to 2.5.0 graylog2-server#15198
-
Consistent use of message identifiers in strings. graylog2-server#13628graylog-plugin-aws#673
-
Mark CloudTrail input as incompatible with Forwarder. graylog-plugin-aws#676
-
Consistent use of message identifiers in strings. graylog2-server#13628graylog-plugin-integrations#1291
Removed
-
Removed garbage collection warnings. graylog2-server#8592graylog2-server#14298
-
Remove deprecated inputs “AWS Logs (deprecated)” and “AWS Flow Logs (deprecated)”. graylog-plugin-aws#674
Fixed
-
Fix Maxmind database types in cloud environment. graylog2-server#13911
-
Properly escape event content for HTML email notifications graylog2-server#11183graylog2-server#14286 (Thanks: zhu!)
-
Fix count based index rotation on idle indices. graylog2-server#11689graylog2-server#14512
-
Trim whitespace characters on stream names. graylog2-server#14359
-
Fixes
too_long_http_line_exception/
problem when Graylog Event Processor operates on huge number of indices graylog2-server#12996graylog2-server#13675graylog2-server#13790graylog2-server#13718graylog2-server#13722HTTP/1.1 413 FULL
head -
Support filter queries when listing authentication backends. We were ignoring them. graylog2-server#13023graylog2-server#14270
-
Fixes parsing, so that ES/OS errors without index data are handled properly graylog2-server#13221graylog2-server#14203
-
Wrapping
latest
metric with filter clause for existence of field. graylog2-server#13596graylog2-server#14815 -
Allow creating notification in event definition wizard when no notification exists graylog2-server#13825graylog2-server#15286
-
Fix time-based rotation check when closed indices are present. graylog2-server#13872graylog2-server#15326
-
Fix Clone Action style on Collectors configurations list graylog2-server#13874graylog2-server#13899
-
Saved searches can be now sorted by 3 additional fields: owner, description and summary. graylog2-server#14140graylog2-server#14355
-
Fix CIDR parsing of IP in query validation graylog2-server#14142graylog2-server#14204
-
Improve JVM security provider compatibility by switching to a widely supported cipher transformation graylog2-server#14153graylog2-server#14193
-
Avoid
GET
APIs for cluster/deflector health to avoid overly long requests. graylog2-server#14164graylog2-server#14177 -
Provide query suggestions for numerical fields. graylog2-server#14279
-
added an info box for auto assigned configs using tags graylog2-server#14229graylog2-server#14565
-
LUT - Show no results message on empty search return and fix delete cache functionality graylog2-server#14234graylog2-server#14238
-
Fix concatenation of query strings in export. graylog2-server#14268graylog2-server#14284
-
Sorting of indices inside an index set is based on their numbers, descending. graylog2-server#14280graylog2-server#14339
-
Fix filtering and loader on the Lookup Table pages graylog2-server#14318graylog2-server#14405
-
Fix grouping in aggregation builder for fields which only exist in the All Events, All System Events or Processing and Indexing Failures stream. graylog2-server#14387graylog2-server#14404
-
Adds a welcome page link in the menu if a user has a start page set. graylog2-server#14668graylog2-server#14736
-
Adds the default search page as an option to the start pages in the user’s profile. graylog2-server#14669graylog2-server#14739
-
Fix extractors reordering issues graylog2-server#14693graylog2-server#14757
-
Fix the way we display long field names in aggregation grouping configuration. graylog2-server#14787graylog2-server#14789
-
Combine dashboard and widget query when replaying search for dashboard widget. graylog2-server#14885graylog2-server#15285
-
Fix overflow problem with grouping section in aggregation builder. graylog2-server#14907graylog2-server#14934
-
Fix sidecar process button position issue on safari graylog2-server#14939graylog2-server#15293
-
Fix visibility of events and notification definition pages. graylog2-server#14940graylog2-server#15052
-
Fixed bug causing input status data not to be removed when an input was deleted. graylog2-server#14952graylog2-server#14954forwarder#99
-
Improve performance by avoiding unnecessary attempts to create index for access tokens. graylog2-server#15012graylog2-server#15097
-
Avoid excessive DB requests for maintaining token last access time. graylog2-server#15013
-
Adds (now always missing) timezone to the export command, if set in the REST call. graylog2-server#15030graylog2-server#15296
-
Fix overlay problem with data table header and dashboard tabs dropdown. graylog2-server#15073graylog2-server#15091
-
Fix NodeService#allActive() implementation, returning only nodes of correct type graylog2-server#15129graylog2-server#15139
-
Fix Unable to add custom field when creating event definition graylog2-server#15209graylog2-server#15226
-
Fix show telemetry settings for local admin. graylog2-server#15244graylog2-server#15247
-
Fix ConcurrentModificationException when listing input states. graylog2-server#15277
-
Improve position, visibilty and default of the “Grace Period” option when creating an Alert. graylog2-server#3741graylog2-server#3741
-
Fix show Index Failure section on System Overview for Cloud. graylog2-server#4774graylog2-server#15398
-
Fixes to_date() pipeline conversion function to honor an optional timezone argument. graylog2-server#6486graylog2-server#14252
-
Only executed widgets of current page ond dashboards. graylog2-server#6867graylog2-server#14890
-
Fix connectivity check when Elasticsearch/OpenSearch is not available. graylog2-server#14063
-
Fix potential duplicates in outputs during node restarts. graylog2-server#14067
-
Prevent RejectedExecutionException during shutdown with a large number of outputs. graylog2-server#14097
-
Removes ability for users to change Event Definition Condition Type if it is not meant to be changeable. graylog2-server#14110
-
Fix uncommittedMessages metric for non-empty journal before first commit. graylog2-server#14154
-
Triggering field types refetching upon search refresh. graylog2-server#14171
-
Fix output shutdown triggering twice when the ouput is globally deleted. graylog2-server#14225
-
Avoid vanishing grouping direction when dragged. graylog2-server#14277
-
Fix non-stop loading indicator issue in authentication backends graylog2-server#13023graylog2-server#14283
-
Remove single-quotes from jvm.memory metric names graylog2-server#14370
-
Reduce logging and add metric for “Couldn’t remove default stream” warning. graylog2-server#14409
-
Supporting nested and tupled groupings in aggregations. graylog2-server#14446
-
Fix possible HTTP API thread pool exhaustion by processing proxied cluster metrics requests asynchronously. graylog2-server#14462
-
Fixing missing offset handling in Legacy Searches. graylog2-server#14575
-
Handle deprecated short time zone IDs in job scheduler definitions. graylog2-server#14605
-
Remove undesired retention strategies in Cloud graylog-plugin-cloud#1081graylog2-server#14616
-
Hide sort/pin icons in data table when non-interactive graylog2-server#14654
-
Additional
preventLoops
parameter inclone_message()
function to prevent creation of endless loops. graylog2-server#5759graylog2-server#14659 -
Improved CSV File Adapter error handling. graylog2-server#14670
-
Extend browser support back to Chrome 68. graylog2-server#14677graylog2-server#14688
-
Escape
$
properly when part of value that is added to query. graylog2-server#14692 -
Changing default refresh interval to five seconds. graylog2-server#14720
-
Scheduling next search refresh only after current one completed. graylog2-server#14723
-
Avoid full-page refresh when showing node details from message details. graylog2-server#14762
-
Fix parsing of date math expressions in query validation graylog2-server#14791
-
Preventing accidental hiding of columns in reporting widgets. graylog2-server#14805
-
Preventing accidental hiding of columns in message list widget for reporting. graylog2-server#14823
-
Fix
WARNING: sun.reflect.Reflection.getCallerClass is not supported.
on server startup. graylog2-server#7223graylog2-server#9802graylog2-server#11634graylog2-server#14884 -
Fix pagination of sidecar admin page when collectors are selected. graylog2-server#14924graylog2-server#14925
-
Avoid excessive index creation for AccessToken. graylog2-server#14926
-
Fix error on missing permission when creating email event notifications. Adds
users:list
permission to role User Inspector graylog2-server#14974 -
Sending new header on server response X-Content-Type-Options:nosniff
-
Fixed CSV File adapter to only verify file read access graylog2-server#14998graylog2-server#15058
-
Fix isFreshInstallation flag in setups with newly registred datanodes graylog2-server#15141
-
Fixed calculation and expression of CPU load in OshiProbe. graylog2-server#15195graylog2-server#15183 (Thanks: panxt)
-
Fix OSHI system stats on docker cgroupv2. graylog2-server#15242
-
Fix query parser’s tokenizer state after regex has ended. graylog2-server#15306
-
Let cookie auth take precedence over basic auth. graylog2-server#6831graylog2-server#15329
-
Fixed possible unwanted concurrency in SystemJobManager graylog2-server#15400
-
Make sure that search creation has finished before executing it for new saved searches/dashboards. graylog2-server#15435graylog2-server#15444
-
Fix JSON deserialization errors in AWS CloudTrail input. graylog-plugin-aws#667graylog-plugin-aws#677
-
Fixed issue with Palo Alto Global Protect logs parsing last 5 fields incorrectly. graylog-plugin-integrations#1327graylog2-server#14363graylog-plugin-integrations#1328 (Thanks: @giveen)
Security
-
Update to freemarker 2.3.31 and use a more secure default configuration. graylog2-server#14354
-
Update Netty from 4.1.84 to 4.1.91 graylog2-server#15186
-
Update to Apache Shiro dependency to version 1.11.0. (the fixed CVEs don’t affect Graylog) graylog2-server#15187
-
Update json-path to 2.8.0 to fix a security issue in json-smart. graylog2-server#15190
Graylog 5.0.13
Released: 2023-10-12
Security
-
Update Netty to 4.1.100 to fix the HTTP/2 Rapid Reset attack (GHSA-xpw8-rcwv-8f8p). The security vulnerability affects all Graylog users that run the Graylog Forwarder input on their servers. graylog2-server#16902
Graylog 5.0.12
Released: 2023-10-04
Added
-
Add Sidecar Reader and Sidecar Manager roles to read and manage sidecars. graylog2-server#12044graylog2-server#15380
Fixed
-
Indexer cluster checker thread start is delayed by 5s to avoid potential deadlock. graylog2-server#16481
-
Fix description for the scenario that one term or value has multiple matching highlighting rules. graylog2-server#16668
Graylog 5.0.11
Released: 2023-09-06
Fixed
-
Adjust keybindings for query input autocompletion. graylog2-server#14793graylog2-server#16162
-
Fix heatmap colorbar font color for dark mode. graylog2-server#15035graylog2-server#16129
-
Fixes problems with editing Search Filters of entities installed via Content Packs. Search Filters of those types of entities are not inlined during Content Pack installation and can be edited. graylog2-server#15841 graylog2-server#16085
Graylog 5.0.10
Released: 2023-08-02
Fixed
-
Do not show query input suggestions when using
Add to query
field value action. graylog2-server#12165graylog2-server#15885 -
Improve readability of hover legend in aggregations. graylog2-server#15084graylog2-server#15888
-
Fix problem with search bar submit button incorrectly indicating changes for keyword time range. graylog2-server#15472graylog2-server#15938
-
Fixing problem with focus loss in query input autocompletion. graylog2-server#15718graylog2-server#15933
-
Disable offline detection for REST API client. graylog2-server#15913graylog2-server#15914
Security
-
Changed the minimum allowed Anomaly Detector interval to 10 minutes.
-
Fixed handling of backslashes in Sigma rule queries that caused OpenSearch errors.
Graylog 5.0.9
Released: 2023-07-05
Added
-
Added event definition title as a summary to Microsoft Teams notifications. graylog-plugin-integrations#1341graylog-plugin-integrations#1343
Fixed
-
Make sure that boolean fields are returned as
true|false
in aggregations on OpenSearch 2.4+. graylog2-server#14661graylog2-server#15817
Security
-
Fix stale session cache after logout. GHSA-3fqm-frhg-7c85
-
Fix insecure source port usage for DNS Lookup adapter queries. GHSA-g96c-x7rh-99r3
Graylog 5.0.8
Released: 2023-06-07
Fixed
-
Fix time-based rotation check when closed indices are present. graylog2-server#13872graylog2-server#15335
-
Fix extractors reordering issues graylog2-server#14693graylog2-server#14757
-
When modifying a user’s session timeout, the system will automatically update existing user sessions to ensure application of the new timeout settings. graylog2-server#15609graylog2-server#15657
-
Fix GELF output to not block output processing. graylog2-server#9917graylog2-server#15385
-
Only display delete icon for saved searches when user has required permissions. graylog2-server#15190
-
Fixed possible unwanted concurrency in SystemJobManager graylog2-server#15400
-
Do not extend session when fetching indexer cluster health. graylog2-server#15505
-
Fixing session expiration on the nodes page. graylog2-server#15508
-
Keep query order when exporting saved searches/dashboards to content packs. graylog2-server#15341graylog2-server#15528graylog2-server#15584
-
Extend authentication cookie’s max age on every session extension. graylog2-server#15502graylog2-server#15651
Graylog 5.0.7
Released: 2023-05-03
Fixed
-
Fix Maxmind database types in cloud environment. graylog2-server#13911
-
Fix overlay problem with data table header and dashboard tabs dropdown. graylog2-server#15073graylog2-server#15091
-
Fix error on missing permission when creating email event notifications. Adds
users:list
permission to role User Inspector. graylog2-server#14974
Security
-
Update Netty from 4.1.84 to 4.1.91. graylog2-server#15186
-
Update json-path to 2.8.0 to fix a security issue in json-smart. graylog2-server#15190
Graylog 5.0.6
Released: 2023-04-05
Added
-
Added option to omit title portion of Slack notifications to reduce clutter. graylog-plugin-integrations#1172graylog-plugin-integrations#1320
-
Added support for timezones in Slack and Teams notifications. graylog-plugin-integrations#1318graylog-plugin-integrations#1320
-
Added option to notify @here in Slack notifications. graylog-plugin-integrations#780graylog-plugin-integrations#1320
Changed
-
Remove stack trace from the generic server error response. graylog2-server#14978
Fixed
-
Fix overflow problem with grouping section in aggregation builder. graylog2-server#14907graylog2-server#14934
-
Fix visibility of events and notification definition pages. graylog2-server#14940graylog2-server#15055
-
Fixed bug causing input status data not to be removed when an input was deleted. graylog2-server#14952graylog2-server#14954forwarder#99
-
Fix
WARNING: sun.reflect.Reflection.getCallerClass is not supported.
on server startup. graylog2-server#7223graylog2-server#9802graylog2-server#11634graylog2-server#14884 -
Fix pagination of sidecar admin page when collectors are selected. graylog2-server#14924graylog2-server#14925
-
Avoid excessive index creation for AccessToken. graylog2-server#14926
-
Avoid full-page refresh when showing node details from message details. graylog2-server#14992
-
Sending new header on server response
X-Content-Type-Options:nosniff
. -
Fixes an off-by-one error that could result in an aggregation search failing silently. graylog2-server#15008
-
Fixed CSV File adapter to only verify file read access. graylog2-server#14998graylog2-server#15058
-
Fixed issue with Palo Alto Global Protect logs parsing last 5 fields incorrectly. graylog-plugin-integrations#1327graylog2-server#14363graylog-plugin-integrations#1328 (Thanks: @giveen)
Graylog 5.0.5
Released: 2023-03-06
Fixed
-
Preventing accidental hiding of columns in message list widget for reporting. graylog2-server#14823
Graylog 5.0.4
Released: 2023-03-01
Fixed
-
Avoid
GET
APIs for cluster/deflector health to avoid overly long requests. graylog2-server#14164graylog2-server#14177 -
Fix the way we display long field names in aggregation grouping configuration. graylog2-server#14787graylog2-server#14802
-
Handle deprecated short time zone IDs in job scheduler definitions. graylog2-server#14631
-
Hide sort/pin icons in data table when non-interactive. graylog2-server#14654
-
Improved CSV File Adapter error handling. graylog2-server#14670
-
Escape
$
properly when part of value that is added to query. graylog2-server#14692 -
Changing default refresh interval to five seconds. graylog2-server#14720
-
Scheduling next search refresh only after current one completed. graylog2-server#14723
-
Extend browser support back to Chrome 68. graylog2-server#14677graylog2-server#14745
-
Preventing accidental hiding of columns in reporting widgets. graylog2-server#14822
Security
-
Bump version of json-path to 2.7.0 to address CVE-2021-27568. graylog2-server#14768
Graylog 5.0.3
Released: 2023-02-01
Fixed
-
Fix grouping in aggregation builder for fields which only exist in the All Events, All System Events, or Processing and Indexing Failures stream. graylog2-server#14387graylog2-server#14404
-
Removes ability for users to change Event Definition Condition Type if it is not meant to be changeable. graylog2-server#14110
-
Reduce logging and add metric for "Couldn't remove default stream" warning. graylog2-server#14409
-
Supporting nested and tupled groupings in aggregations. graylog2-server#14446
-
Fixing missing offset handling in Legacy Searches. graylog2-server#14575
Graylog 5.0.2
Released: 2023-01-04
Changed
-
Start JSON path value from HTTP API input on leader node only if
Global
option was selected in input configuration. graylog2-server#14074
Fixed
-
Fixed properly escape event content for HTML email notifications. graylog2-server#11183graylog2-server#14286 (Thanks: zhu!)
-
Fixed parsing so that ES/OS errors without index data are handled properly. graylog2-server#13221graylog2-server#14203
-
Fixed CIDR parsing of IP in query validation. graylog2-server#14142graylog2-server#14204
-
Fixed concatenation of query strings in export. graylog2-server#14268graylog2-server#14349
-
Avoid vanishing grouping direction when dragged. graylog2-server#14277
Security
-
Update to FreeMarker 2.3.31 and use a more secure default configuration. graylog2-server#14354
Graylog 5.0.1
Released: 2022-12-14
Fixed
-
Fix Clone Action style on Collectors configurations list. graylog2-server#13874graylog2-server#13899
-
Improve JVM security provider compatibility by switching to a widely supported cipher transformation. graylog2-server#14153graylog2-server#14193
-
Triggering field types refetching upon search refresh. graylog2-server#14171
Graylog 5.0.0
Released: 2022-12-07
Added
-
Added validation for field value types. It will detect the correct type of the field and warn if user enters a value of different data type. graylog2-server#11973 graylog2-server#12088
-
Add ability for inputs to specify encoding graylog2-server#12337 graylog2-server#12654
-
The list of fields can now show only the fields that are present in selected streams, if
stream_aware_field_types
config property is set to true. graylog2-server#12572 graylog2-server#9397 graylog2-server#13363 -
Event definition page now includes a button to edit it directly graylog2-server#12910 graylog2-server#13248
-
Show Elasticsearch/OpenSearch cluster health on index sets overview page. graylog2-server#13017 graylog2-server#13024 (Thanks: @supahgreg)
-
New configuration flag ignore_migration_failures to skip migrations which are blocked graylog2-server#13053 graylog2-server#13137
-
Show title of dashboards and saved searches on page. graylog2-server#13116 graylog2-server#13491
-
Add a new built-in "Pipelines Manager" role. graylog2-server#13251 graylog2-server#13866
-
Feature preview of Scripting API. graylog2-server#3807 graylog2-server#13809
-
Reimplement ability to reorder dashboard pages. graylog2-server#13744 graylog2-server#7470
-
Allow sorting columns in data table widget. graylog2-server#13432 graylog2-server#9998
-
Add config option to set upper limit for index retention period. graylog2-server#12299
-
Support configuration of sidecars on Darwin and FreeBSD. collector-sidecar#377 graylog2-server#12387
-
Adding simple actions to copy field name/value/message fields to clipboard. graylog2-server#12877
-
Add ability to pull Geo Location Processor database files from an S3 bucket. graylog2-server#13204
-
Enabling search filter feature (Enterprise). graylog2-server#13640
-
Allow pinning row pivot columns in data table widget. graylog2-server#13510
-
Show in field select if fields are qualified for metric function. graylog2-server#13643
-
Allow setting TCP-keepalive for all sockets used in HTTP notifications. graylog2-server#13736
-
Update
bin/graylogctl
to support a bundled JVM. graylog2-server#13980
Changed
-
Set elasticsearch_index_optimization_jobs default to 10 graylog2-server#12025 graylog2-server#13521
-
Index detail shard numbers (segments, open search contexts, and deleted messages) are now formatted. graylog2-server#13021 (Thanks: @supahgreg)
-
Switch from 'openjdk' to 'eclipse-temurin' for Graylog Server test image. graylog2-server#13114 graylog2-server#13002 (Thanks: @supahgreg)
-
Changed items displayed in the System dropdown menu to match the permissions for the page that they link to. graylog2-server#13157 graylog2-server#13188
-
Pre-flight check requires at least MongoDB 5.0 graylog2-server#13660 graylog2-server#13778
-
Fresh Graylog Installations will have a new default message processor order graylog2-server#5040 graylog2-server#13081
-
Auto focus first suggestion in search query input autocompletion. graylog2-server#6909 graylog2-server#12991
-
'Outdated version' notifications now include links to the changelog pages. graylog2-server#7593 graylog2-server#7689 graylog2-server#12648 (Thanks: @supahgreg)
-
Replacing nested with linear bucketing in aggregations. graylog2-server#8111 graylog2-server#13805 graylog2-server#13806 graylog2-server#13855
-
When selecting roles from the dropdown they are now automatically assigned to the team/user graylog2-server#9933 graylog2-server#13277
-
Retry on Elasticsearch Request entity too large errors graylog2-server#13113 graylog2-server#7071
-
Rename 'All Messages' stream to 'Default Stream' graylog2-server#13258
-
Java 17 graylog2-server#13276 graylog-plugin-enterprise-integrations#869 graylog-plugin-collector#205 graylog-plugin-aws#663 graylog-plugin-integrations#1153 graylog2-server#13330 graylog2-server#12644
-
OpenSearch 2 Support graylog2-server#13340
-
Disable rollup columns by default for new aggregations. graylog2-server#11516 graylog2-server#13410 graylog2-server#13690
-
Unify position of 'create new entity' buttons in page header. graylog2-server#13577
-
Move submit button in widget edit mode next to configuration form. graylog2-server#13581
-
Improve the way we display the navigation for subareas of a page. graylog2-server#13677
-
Unify position of documentation links in page headers. graylog2-server#13691
-
Update jersey from 2.32 to 2.37 graylog2-server#13710
-
Mask custom properties for Kafka inputs on the inputs page to hide sensitive information. graylog2-server#13383 graylog2-server#13873
-
Change default of search window and execution frequency for new event configurations from 1 to 5 minutes. graylog2-server#13943
-
Change default value for
http_thread_pool_size
andproxied_requests_thread_pool_size
to 64. graylog2-server#13960 -
Sorting options in aggregations have been limited for deterministic results. graylog2-server#13957graylog2-server#14017
-
Modified how Microsoft Teams notification templates are processed. graylog-plugin-integrations#1096 graylog-plugin-integrations#1200 graylog-plugin-integrations#1202
Removed
-
Removed support for Elasticsearch 6 graylog2-server#13317 graylog2-server#13321 graylog-project-internal#77
-
Removing legacy alerting management pages. graylog2-server#12987
-
Remove unused and dysfunctional
MetricsHistoryResource
. graylog2-server#2443 graylog2-server#13553 -
Remove ineffective settings for output buffer processor thread pool. graylog2-server#13971
Fixed
-
Hide edit button for permissions config if the user doesn't have edit permissions. graylog2-server#12090 graylog2-server#13939
-
Fix incorrect prometheus mapping for input metrics. graylog2-server#12421 graylog2-server#12560
-
Fix bug when installing Sidecar collector configuration in Content Pack. graylog2-server#12778 graylog2-server#13632
-
Uses whitespace analyzer for query parsing and validation. This is needed to prevent unexpected field value parsing. graylog2-server#12888 graylog2-server#12918
-
Fixes sorting exception on aggregations by removing 'latest' metrics from the list of possible sorts. graylog2-server#12908 graylog2-server#14027
-
Fix breaking change in Geo-Location Processor fields. graylog2-server#12909 graylog2-server#13202 graylog2-server#13203 graylog2-server#13094
-
When using the index time rotation strategy, rotating of empty index sets is skipped. graylog2-server#13028 graylog2-server#13735
-
Fixing autocompletion for inputs with quoting/containing slashes. graylog2-server#13082 graylog2-server#13087 graylog2-server#13092
-
Fix
source
field extraction for Beats version 8 and later. graylog2-server#13254 graylog2-server#13895 -
Do not toggle message details in message table widget, when selecting text. graylog2-server#13259 graylog2-server#13263
-
Fix performance regression on UDP inputs with newer Java versions graylog2-server#13306 graylog2-server#14005 (Thanks: @giangi)
-
Fix journal directory preflight size check graylog2-server#13454 graylog2-server#13470
-
Queries that have the form of
_exists_:field_name
are now validated without any wrong warning messages. graylog2-server#13455 graylog2-server#13489 -
Fixing latest aggregation if field is not present in time range. graylog2-server#13593 graylog2-server#13640
-
Fix "Unauthorized" messages in server log when "Trusted Header Authentication" is enabled and a user session expires. graylog2-server#13721 graylog2-server#13735
-
Take into account if "Always match" rule is inverted. Previously it was ignored for this rule type. graylog2-server#13819 graylog2-server#13847
-
The pipeline function flatten_json now respects the original JSON types. An optional parameter is provided for backwards compatibility. graylog2-server#13888 graylog2-server#13947
-
Remove not needed
rel='noreferer'
from documentation links graylog2-server#13934 graylog2-server#13941 -
Allow non-word-characters in lookup tables key field graylog2-server#13973 graylog2-server#14029
-
Fix appearing toast errors when creating HTTP JSONPath data adapter and start editing the title. graylog2-server#14004
-
Fix alert system on low message input graylog2-server#6770 graylog2-server#13556
-
Fixed bug preventing installation of Content Packs that reference System Streams. graylog2-server#7212 graylog2-server#13398
-
Fixed bug preventing processing of CEF message fields with large integer values. graylog2-server#7371 graylog2-server#13812
-
Fix content pack imports error for event notifications. graylog2-server#7801 graylog2-server#13171 graylog-plugin-enterprise-integrations#859 graylog-plugin-integrations#1129
-
Reset time-based rotation strategy after leader change. graylog2-server#12370
-
Fix parsing of invalid search operators in query validation. graylog2-server#12420
-
Improve server startup to log all errors to the log file instead of writing some of them to STDERR. graylog2-server#13088
-
Display current page as active in navigation. graylog2-server#13498
-
Fix server --dump-default-config command graylog2-server#13507
-
Allow "Show Top Values" action for enumerable compound fields. graylog2-server#13782
-
Filter autocompletion suggestions to currently selected streams. graylog2-server#13553
-
Isolate errors in result extraction to search type(s) causing it graylog2-server#13955
-
Fixed bug where old PagerDuty notifications would fail to load. graylog-plugin-integrations#1054 graylog-plugin-integrations#1077
-
Ensure Guice binder creation for the JobResourceHandler interface. graylog2-server#14054
Security Fixes
-
Update Jackson to latest stable version 2.13.4 graylog2-server#13541
-
Update Netty from 4.1.60 to 4.1.84 graylog2-server#13879
Graylog 4.3.15
Released: 2023-05-03
Fixed
-
Fix overlay problem with data table header and dashboard tabs dropdown. graylog2-server#15073graylog2-server#15091
Graylog 4.3.14
Released: 2023-04-05
Changed
-
Remove stack trace from the generic server error response. graylog2-server#14978
Fixed
-
Fix Maxmind database types in cloud environment. graylog2-server#13911
-
Fixed bug causing input status data not to be removed when an input was deleted. graylog2-server#14952graylog2-server#14954forwarder#99
-
Avoid excessive index creation for AccessToken. graylog2-server#14926
-
Sending new header on server response
X-Content-Type-Options:nosniff
. -
Fixes an off-by-one error that could result in an aggregation search failing silently. graylog2-server#15009
-
Fixed CSV File adapter to only verify file read access graylog2-server#14998graylog2-server#15058
Graylog 4.3.13
Released: 2023-03-01
Fixed
-
Improved CSV File Adapter error handling. graylog2-server#14670
-
Escape
$
properly when part of value that is added to query. graylog2-server#14692
Graylog 4.3.12
Released: 2023-02-01
Fixed
-
Fix grouping in aggregation builder for fields which only exist in the All Events, All System Events or Processing and Indexing Failures stream. graylog2-server#14387graylog2-server#14404
-
Reduce logging and add metric for "Couldn't remove default stream" warning. graylog2-server#14409
-
Fixing missing offset handling in Legacy Searches. graylog2-server#14575
Graylog 4.3.11
Released: 2023-01-04
Changed
-
Start JSON path value from HTTP API input on leader node only if
Global
option was selected in input configuration. graylog2-server#14074
Fixed
-
Fixed properly escape event content for HTML email notifications. graylog2-server#11183graylog2-server#14286 (Thanks: zhu!)
-
Fixed concatenation of query strings in export. graylog2-server#14268graylog2-server#14350
-
Avoid vanishing grouping direction when dragged. graylog2-server#14277
Security
-
Updated to FreeMarker 2.3.31 and used a more secure default configuration. graylog2-server#14354
Graylog 4.3.10
Released: 2022-12-14
Changed
-
Mask custom properties for Kafka inputs on the inputs page to hide sensitive information. graylog2-server#13383graylog2-server#13873
Fixed
-
Fix source field extraction for Beats version 8 and later. graylog2-server#13254graylog2-server#13895
-
Fix performance regression on UDP inputs with newer Java versions. graylog2-server#13306graylog2-server#14005 (Thanks: @giangi)
-
The pipeline function
flatten_json
can now respect the original JSON types. An optional parameter is provided for this to ensure backwards compatibility. graylog2-server#13888graylog2-server#13972 -
Improve JVM security provider compatibility by switching to a widely supported cipher transformation. graylog2-server#14153graylog2-server#14193
-
Fix connectivity check when Elasticsearch/OpenSearch is not available. graylog2-server#14063
-
Triggering field types refetching upon search refresh. graylog2-server#14171
Graylog 4.3.9
Released: 2022-11-02
Added
-
Add
includeToday
parameter to the/api/system/cluster/traffic
API endpoint. graylog2-server#13633
Changed
-
Change page sizes for the Event Definitions overview to 10, 50, and 100. graylog2-server#13305 graylog2-server#13720
-
Unify error responses for the lookup table API endpoints. graylog2-server#13623 graylog2-server#13649
Fixed
-
Fix Microsoft Teams notification to handle fields with colon characters. graylog2-server#1096 graylog2-server#1200 graylog2-server#1205
-
Fix problems with Sidecar content pack export and installation. graylog2-server#12778 graylog2-server#13632 graylog2-server#13645
-
Fix problem with "Latest Value" aggregation widget. graylog2-server#13593 graylog2-server#13640
-
Fix authentication problem with proxied API endpoints when using trusted header authentication. graylog2-server#13721 graylog2-server#13735
-
Fix installation of Event Definition content packs that use a default stream. graylog2-server#7212 graylog2-server#13398
-
Fix CEF parser to allow bigger numerical values for number fields. graylog2-server#7371 graylog2-server#13812
-
Allow "Show Top Values" aggregation on enumerable compound fields. graylog2-server#13782
Security
-
Fix potential disclosure of field values from other streams in query field value suggestions. graylog2-server#13817
-
Update
underscore
package dependency of the API browser UI to 1.13.6. graylog2-server#13668
Graylog 4.3.8
Released: 2022-10-05
Changed
-
Change the default value for the
elasticsearch_index_optimization_jobs
config option to10
to resolve an issue where index optimization could block message ingestion. graylog2-server#12025 graylog2-server#13521
Fixed
-
Fix validation issue with dashboards. graylog2-server#13013 graylog2-server#13500
-
Fix running Graylog on FIPS-enabled Red Hat Enterprise Linux. graylog2-server#13525 graylog2-server#13580
-
Fix search query validation for invalid regular expression queries. graylog2-server#13594 graylog2-server#13595
-
Fix
--dump-default-config
server command. graylog2-server#13507
Graylog 4.3.7
Released: 2022-09-16
Changed
-
Open hyperlink decorator links in a new widow or tab. graylog2-server#13351
Fixed
-
Fix disk calculation in message journal pre-flight check. graylog2-server#13454 graylog2-server#13470
-
Fix error on the "show message" page for messages from a Forwarder. graylog2-server#12485
-
Adjust name of the "JSON path from HTTP API" input to clarify its use case. graylog2-server#13439
Security
-
Update jQuery version used in the API browser to 3.6.1 to fix security vulnerabilities. (CVE-2012-6708, CVE-2015-9251, CVE-2019-11358, CVE-2020-11022, CVE-2020-11023, CVE-2020-7656) graylog2-server#13435
Graylog 4.3.6
Released: 2022-09-07
Added
- Add configuration setting to avoid rotating indices in empty index sets. graylog2-server#13028graylog2-server#13099
Fixed
- Fix close button on some modal UI components. graylog2-server#12479graylog2-server#12480
- Don't toggle the message details view when selecting the message text. graylog2-server#13259graylog2-server#13341
- Add migration to migrate PagerDuty event notifications from v1 to v2. graylog-plugin-integrations#1054graylog-plugin-integrations#1077
Graylog 4.3.5
Released: 2022-08-09
Added
- Fix Alert Notification content pack import error. graylog2-server#13197
Graylog 4.3.4
Released: 2022-08-03
Added
- Add
ignore_migration_failures
config file option to make it possible to skip problematic migrations during an upgrade. (Default is off and is not generally recommended.) graylog2-server#13053graylog2-server#13137 - Add automatic database reload to the GeoIP message processor. graylog2-server#13075graylog2-server#13106
- Add an optional default parameter to the
set_field
pipeline processing function. graylog2-server#5911graylog2-server#13132
Changed
- Automatically focus the first suggestion in search query input auto-completion. graylog2-server#6909graylog2-server#12991
Fixed
- Fix NullPointerException when sending email notifications without a configured sender. graylog2-server#12900graylog2-server#13055
- Fix field schema compatibility issue with the GeoIP message processor. graylog2-server#12909graylog2-server#13094
- Fix edit button on index set details page. graylog2-server#12997graylog2-server#13000
- Fix
FetchError
issue in search query validation. graylog2-server#13037graylog2-server#13089 - No longer renders inactive notifications. graylog2-server#13044
- Fix search query value suggestions when quoting is used. graylog2-server#13087
Security
- Add
X-Frame-Options
header to fix a potential clickjacking issue when the frontend is embedded into other pages with an iframe. graylog2-server#13160
Graylog 4.3.3
Released: 2022-07-06
Added
- Add
max_index_retention_period
config file option to enforce an upper limit for time-based index retention. graylog-plugin-cloud#1006graylog2-server#12905graylog2-server#12914
Fixed
- Display a system notification if message ingest for an active write index is blocked. graylog2-server#10930graylog2-server#12893
- Fix
NullPointerException
inIndexerClusterCheckerThread
periodical job. graylog2-server#12858graylog2-server#12979 - Fix search query validation for field names containing a
@
character. graylog2-server#12888graylog2-server#12924 - Fix field naming issue with GeoIP processor when schema enforcement is disabled. graylog2-server#12904graylog2-server#12930
- Fix problem with API incompatibility between Elasticsearch and OpenSearch when asking for the blocked status of indices. graylog2-server#12934
Graylog 4.3.2
Released: 2022-06-15
Added
- Add Microsoft Teams event notification plugin. graylog-plugin-integrations#1066
Removed
- Remove job scheduler debug API resource. graylog2-server#12884
Fixed
- Improve ES warning filter to avoid repetitive warnings in the server log. graylog2-server#12786graylog2-server#12866
- Fix NullPointerException for GeoIP message processor. graylog2-server#12788graylog2-server#12839
- Fix divide-by-zero exception in server pre-flight check. graylog2-server#12818graylog2-server#12820graylog2-server#12863
- Improve dashboard tab ordering. graylog2-server#12849
Graylog 4.3.1
Released: 2022-06-01
Fixed
- Fix search query validation for leading-wildcard queries. graylog2-server#12725graylog2-server#12727
Graylog 4.3.0
Released: 2022-05-25
Added
- Add option to update existing Grok patterns on bulk import. graylog2-server#11109graylog2-server#12174
- Add options to disable entity sharing with "everyone" and individual users. graylog2-server#11112graylog2-server#11620
- Extend search API to allow a query string in addition to a search object. graylog2-server#11257graylog2-server#11266
- Add time zone setting for email event notifications. graylog2-server#11418graylog2-server#11982
- Add search query validation in the UI. graylog2-server#11490graylog2-server#11502graylog2-server#11503graylog2-server#11534
- Add field value suggestions for search queries. graylog2-server#11491graylog2-server#11585graylog2-server#11787
- Add field type icon for the "ip" data type. graylog2-server#11699graylog2-server#11733
- Add user defined time zone support for message exports. graylog2-server#4523graylog2-server#9546graylog2-server#11734
- Run pre-flight checks for MongoDB and Elasticsearch on server startup. graylog2-server#5248graylog2-server#11889
- Add support for multiline search queries. graylog2-server#6530graylog2-server#11906
- Add a button to remove queued event notifications. graylog2-server#7096graylog2-server#12084
- Add latest-value metric to aggregation builder. graylog2-server#8296graylog2-server#11542
- Add
flatten_json
pipeline function to support parsing JSON arrays. graylog2-server#8706graylog2-server#11708 - Add
depth
parameter toparse_json
pipeline function. graylog2-server#9021graylog2-server#11640 - Add visual indicator to allow users to see where pipeline rules are used. graylog2-server#9724graylog2-server#11474
- Add support for OpenSearch as a storage backend. graylog2-server#11435
- Add config file setting to allow the configuration of an upper limit for time based index rotation. graylog2-server#11501
- Allow the usage of
this year/month/week
in keyword time ranges. graylog2-server#11581 - Introduce a simplified version of the search API. graylog2-server#11666
- Add pagination and filtering to the processing pipeline rules page. graylog2-server#5688
Changed
- Several improvements to the built-in geoip lookup message processor. graylog-plugin-integrations#952graylog2-server#11854
- Persist input state to avoid automatic starting of manually stopped inputs after a server restart. graylog2-server#10955graylog2-server#11362
- Improve the
key_value
pipeline function to handle quoted values. graylog2-server#11731graylog2-server#4751graylog2-server#11738 - Stop processing further pipeline stages after
drop_message
getting called. graylog2-server#4855graylog2-server#11754 - Switch to cookie based API authentication for the frontend. graylog2-server#6831graylog2-server#11788
- Remove and/or replace the term
master
with the termleader
to move towards more inclusive naming. graylog2-server#11766 - Improve server shutdown behavior in load balancer setups. graylog2-server#12221
Removed
- Remove database migrations that allow updates from pre-2.2 versions of Graylog. graylog2-server#11683
Fixed
- Improve content pack import to handle missing streams. graylog2-server#10008graylog2-server#10972
- Fix frontend DEV server proxying with large requests. graylog2-server#10645graylog2-server#11482
- Redirect to pipeline rules list when a rule doesn't exist anymore. graylog2-server#11044graylog2-server#11455
- Improve user experience when changing relative time ranges in the date picker. graylog2-server#11075graylog2-server#11302
- Fix date time formatter in charts for users without a configured timezone. graylog2-server#11341graylog2-server#12161
- Fix race condition in URL allow list form. graylog2-server#11345graylog2-server#11407
- Avoid the creation of unnecessary search objects on the default search page. graylog2-server#11372
- Fix index count on index set overview page to show the correct number of indices under management. graylog2-server#11375graylog2-server#11395
- Fix problem with keyword time range parsing in search. graylog2-server#11385graylog2-server#11386
- Fix issue with missing fields in the field selection of the aggregation builder. graylog2-server#11404graylog2-server#11405
- Fix timestamp values when adding them to the search query. graylog2-server#11429graylog2-server#12244
- Fix disappearing field selection in aggregation builder. graylog2-server#11433graylog2-server#11432
- Switch GitHub Action builds to the Eclipse Temurin JDK. graylog2-server#11467graylog2-server#11468
- Fix index field type poller handling on multiple nodes. graylog2-server#11504graylog2-server#11510
- Fix permission issue for permalinks to messages. graylog2-server#11540graylog2-server#11541
- Fix dashboard widget issues with non-english locales. graylog2-server#11596graylog2-server#11601graylog2-server#11637
- Improve error handling for message export. graylog2-server#11662graylog2-server#11728
- Fix page reload problem in API browser. graylog2-server#11802graylog2-server#12000
- Fix focus behavior of cloned widgets. graylog2-server#11918graylog2-server#12175
- Improve chart widget rendering when searching in all messages without any result. graylog2-server#12236graylog2-server#12242
- Ensure stable order for index rotation strategies in the drop-down UI. graylog2-server#12246graylog2-server#12247
- Fix user time zone issue when selecting time range from histogram widget. graylog2-server#12257graylog2-server#12277
- Fix filtering event definition list by ID. graylog2-server#12266graylog2-server#12336
- Fix validation of URL whitelist in event notification form. graylog2-server#12267graylog2-server#12344
- Fix URL validation in event notification. graylog2-server#12272graylog2-server#12295
- Fix DNS lookup for the
https_proxy_uri
to resolve dynamically. graylog2-server#6377graylog2-server#11813 - Fix name of button to delete a dashboard page. graylog2-server#7471graylog2-server#10403graylog2-server#12138
- Fix validation of pipeline stage numbers. graylog2-server#7591graylog2-server#11496
- Improve
Ctrl+f
/Command+f
andShift+Enter
handling in the search query form. graylog2-server#7884graylog2-server#8348graylog2-server#11511 - Limit the vertical space consumed by the event definition filter preview. graylog2-server#7886graylog2-server#11512
- Fix validation of saved searches and dashboards. graylog2-server#8257graylog2-server#11292
- Unlock event definition jobs after a server crash to make sure they continue to execute. graylog2-server#8612graylog2-server#11249
- Fix several issues related to changing or deleting stream outputs. graylog2-server#8714graylog2-server#11531graylog2-server#10199graylog2-server#12195
- Fix search to adhere to the query time range limit again. graylog2-server#9487graylog2-server#11297
- Improve consistency for the logged in indicator on the user details page. graylog2-server#9499graylog2-server#11481
- Improve error messages when searches or dashboards fail to load. graylog2-server#11371
- Fix race condition when installing content packs. graylog2-server#11413
- Improve message field type detection. graylog2-server#11778
- Improve field name completion performance on the search page. graylog2-server#11930graylog2-server#12110
- Fix reliability of scroll queries by disabling search highlighting for those. graylog2-server#12225
- Improve absolute time range defaults in date picker based on user time zone. graylog2-server#12248
Graylog 4.2.12
Released: 2022-08-09
Core
Added
- Add auto focus of the first suggestion in query input autocompletion. graylog2-server#12991
Graylog 4.2.11
Released: 2022-07-06
No changes since 4.2.10.
Graylog 4.2.10
Released: 2022-06-15
Core
Removed
- Remove job scheduler debug API resource. graylog2-server#12884
Graylog 4.2.9
Released: 2022-05-04
Core
Fixed
- Fix pie chart widget legend field matching. Graylog2/graylog2-server#12510Graylog2/graylog2-server#12594
Graylog 4.2.8
Released: 2022-04-12
Core
Added
- Introduce service account flag for user objects. Graylog2/graylog2-server#12405
Changed
- Convert built-in sidecar user to service account.
Fixed
- Fix issue with adding new sorts to aggregation widgets. Graylog2/graylog2-server#12427
- Fix value alignment in number visualization. Graylog2/graylog2-server#12424
- Fix updating timerange URL parameter when selecting a range in the histogram widget with the cursor. Graylog2/graylog2-server#11388Graylog2/graylog2-server#12306
- Disable search highlighting for scroll queries to improve performance and fix an issue with large messages. Graylog2/graylog2-server#12225
- Don’t auto-start stopped inputs on server restart. Graylog2/graylog2-server#10955Graylog2/graylog2-server#11362
Security
- Fix DEBUG logging of access token. Graylog2/graylog2-server#12395
Graylog 4.2.7
Released: 2022-03-02
Core
Fixed
- Improve search page rendering performance with a high number of message fields. Graylog2/graylog2-server#11930Graylog2/graylog2-server#12162
- Fix field order in CSV export. Graylog2/graylog2-server#12006Graylog2/graylog2-server#12186
- Improve download link handling for the Microsoft Edge browser. Graylog2/graylog2-server#12194
- Fix referential integrity issue when moving widgets between dashboards. Graylog2/graylog2-server#12185
- Fix issue with highlighting boolean field values in search. Graylog2/graylog2-server#11985Graylog2/graylog2-server#12210
Graylog 4.2.6
Released: 2022-02-02
Core
Security
- Update “marked” markdown parser dependency to fix two denial of service issues (only affects the UI, not the server). Graylog2/graylog2-server#11995GHSA-5v2h-r2cx-5xgjGHSA-rrrm-qjm4-v8hf
Integrations Plugin
No changes since 4.2.5
Graylog 4.2.5
Released: 2022-01-05
Core
- Updates Log4J to 2.17.1. Graylog2/graylog2-server#11897
- Updates PropTypes of ConfirmDialog for btnConfirmText and btnConfirmCancelText. Graylog2/graylog2-server#11916
- Prevents infinite recursion when serializing IpAddress. Graylog2/graylog2-server#11847
- Preserves build metadata in graylog version. Graylog2/graylog2-server#11872
- Performs message timestamp conversion after processing. Graylog2/graylog2-server#11915
Integrations Plugin
- Adds riot field to GreyNoise QuickIp lookup adapter. Graylog2/graylog-plugin-integrations#958
- Check for reserved IP addresses in GreyNoise Community IP Lookup Adapter. Graylog2/graylog-plugin-integrations#960
Graylog 4.2.4
Released: 2021-12-16
Core
Security
- Fix log4j CVE-2021-45046 by updating the library to 2.16.0. Graylog2/graylog2-server#11832
Integrations Plugin
No changes since 4.2.3.
Graylog 4.2.3
Released: 2021-12-10
Core
Fixed
- Fix extractor date converters. Graylog2/graylog2-server#11495Graylog2/graylog2-server#11750
Security
- Fix log4j CVE-2021-44228. Graylog2/graylog2-server#11786
Integrations Plugin
No changes since 4.2.2.
Graylog 4.2.2
Released: 2021-12-01
Core
Added
- Add
elasticsearch_max_write_index_age
config setting to set an upper limit for the time based rotation strategy. Graylog2/graylog2-server#11648 - Add UI configuration to disable sharing entities with “everyone” and individual users. Graylog2/graylog2-server#11112Graylog2/graylog2-server#11620
Fixed
- Fix browser locale related issue with dashboard widgets. Graylog2/graylog2-server#11596Graylog2/graylog2-server#11637
- Fix backwards compatibility for area chart widgets. Graylog2/graylog2-server#11611Graylog2/graylog2-server#11610
- Fix problem with rendering shares when entities have been shared with “everyone”. Graylog2/graylog2-server#11697Graylog2/graylog2-server#11698
Integrations Plugin
Added
- Add a GreyNoise lookup adapter. Graylog2/graylog-plugin-integrations#940
Graylog 4.2.1
Released: 2021-11-03
Core
Fixed
- Fix potential issue with duplicate index field type updates. Graylog2/graylog2-server#11504Graylog2/graylog2-server#11552
- Fix permission issue with permalink to single messages. Graylog2/graylog2-server#11540Graylog2/graylog2-server#11541
- Allow aggregation on fields which exist as
keyword
andtext
types in different indices. Graylog2/graylog2-server#11535 - Use correct
data_dir
setting to store native libraries. Graylog2/graylog2-server#11543Graylog2/graylog2-server#11571 - Fix issue where the first day on the traffic graph didn’t show the full day traffic value. Graylog2/graylog2-server#11546
Integrations Plugin
Added
- Allow the usage of templates in the channel name for the Slack plugin. Graylog2/graylog-plugin-integrations#927
Fixed
- Add timezone setting to PaloAlto inputs to fix timestamp parsing. Graylog2/graylog-plugin-integrations#931Graylog2/graylog-plugin-integrations#933
Graylog 4.2.0
Released: 2021-10-13
Search
- Keyword From/To search breaking change to prior semantics: alignment of the interval for e.g. "last monday"
to
the start/end of the day instead of a time in the day. Also, the interval ends the next day at
00:00:00
. https://graylog2/graylog2-server#10291
Core
Added
- Introduce feature flags to aid product development. Graylog2/graylog2-server#11070
- Add API endpoint to change log level for all nodes in the cluster. Graylog2/graylog2-server#10882
- Add pagination for pipelines. Graylog2/graylog2-server#5686
Changed
- Move edit button out of widget actions dropdown menu. Graylog2/graylog2-server#10927
- Deprecate API endpoint to shut down a node. Graylog2/graylog2-server#10668Graylog2/graylog2-server#10986
- Include search/dashboard title in document title. Graylog2/graylog2-server#11172
- Shorten widget titles with ellipsis when overflowing available space. Graylog2/graylog2-server#11185
- Hide search action “Export to dashboard” for users who are not allowed to create dashboards. Graylog2/graylog2-server#11262
- Simplify search API for scripting. Graylog2/graylog2-server#11247
Removed
- Remove deprecated legacy view permissions
extendedsearch:use
andview:use
. - Remove irrelevant forwarder client-side metrics from Prometheus exporter. Graylog2/graylog2-server#10964
- Remove graceful node shutdown menu entry. The API endpoint still exists but is deprecated. Graylog2/graylog2-server#11129
Fixed
- Fix problem with login form and 3rd party authentication providers. Graylog2/graylog2-server#10860
- Improve spacing in data table widget. Graylog2/graylog2-server#7429Graylog2/graylog2-server#10814
- Fix widget titles with long values. Graylog2/graylog2-server#10919
- Fix event notification selection for “Event Definition Creator” and “Event Notification Creator” roles. Graylog2/graylog2-server#10703 (Thanks @FlorinPeter)
- Fix forwarder metric names. Graylog2/graylog2-server#10964
- Fix issue with default heatmap widget configuration. Graylog2/graylog2-server#10967Graylog2/graylog2-server#10928Graylog2/graylog2-server#10978
- Fix pretty printing of JSON for API responses. Graylog2/graylog2-server#10906Graylog2/graylog2-server#10934
- Fix read handling of corrupted journal segments. Graylog2/graylog2-server#9305Graylog2/graylog2-server#9378
- Fix problem with traffic data storage. Graylog2/graylog2-server#9559Graylog2/graylog2-server#11176
- Fix warning about
SO_RCVBUF
sizes when starting an input. Graylog2/graylog2-server#7720Graylog2/graylog2-server#11195 - Fix loading spinner position in widget header. Graylog2/graylog2-server#11258
- Improve natural date parser for search timeranges. Graylog2/graylog2-server#10291Graylog2/graylog2-server#11391
- Fix indexing retries if ES cluster is without coordinator node. Graylog2/graylog2-server#10440Graylog2/graylog2-server#11317
- Improve debugging for invalid GELF messages by providing a log message on TRACE level. Graylog2/graylog2-server#11360
Graylog 4.1.14
Released: 2022-04-12
Core
Added
- Introduce service account flag for user objects. Graylog2/graylog2-server#12405
Changed
- Convert built-in sidecar user to service account.
Fixed
- Fix issue with adding new sorts to aggregation widgets. Graylog2/graylog2-server#12427
- Fix value alignment in number visualization. Graylog2/graylog2-server#12424
- Fix updating timerange URL parameter when selecting a range in the histogram widget with the cursor. Graylog2/graylog2-server#11388Graylog2/graylog2-server#12306
- Disable search highlighting for scroll queries to improve performance and fix an issue with large messages. Graylog2/graylog2-server#12225
Security
- Fix DEBUG logging of access token. Graylog2/graylog2-server#12395
Graylog 4.1.13
Released: 2022-03-02
Core
Fixed
- Improve search page rendering performance with a high number of message fields. Graylog2/graylog2-server#11930Graylog2/graylog2-server#12162
- Fix field order in CSV export. Graylog2/graylog2-server#12006Graylog2/graylog2-server#12186
- Improve download link handling for the Microsoft Edge browser. Graylog2/graylog2-server#12194
- Fix referential integrity issue when moving widgets between dashboards. Graylog2/graylog2-server#12185
- Fix issue with highlighting boolean field values in search. Graylog2/graylog2-server#11985Graylog2/graylog2-server#12210
Graylog 4.1.12
Released: 2022-02-02
Core
Security
- Update “marked” markdown parser dependency to fix two denial of service issues (only affects the UI, not the server). Graylog2/graylog2-server#11995GHSA-5v2h-r2cx-5xgjGHSA-rrrm-qjm4-v8hf
Integrations Plugin
No changes since 4.1.11
Graylog 4.1.11
Released: 2022-01-05
Core
- Updates Log4J to 2.17.1. Graylog2/graylog2-server/pull/11897
- Prevents infinite recursion when serializing IpAddress. Graylog2/graylog2-server#11848
Integrations Plugin
No changes since 4.1.10
Graylog 4.1.10
Released: 2021-12-16
Core
Security
- Fix log4j CVE-2021-45046 by updating the library to 2.16.0. Graylog2/graylog2-server#11832
Integrations Plugin
No changes since 4.1.9.
Graylog 4.1.9
Released: 2021-12-10
Core
Security
- Fix log4j CVE-2021-44228. Graylog2/graylog2-server#11786
Integrations Plugin
No changes since 4.1.8.
Graylog 4.1.8
Released: 2021-12-01
Core
Added
- Add UI configuration to disable sharing entities with “everyone” and individual users. Graylog2/graylog2-server#11112Graylog2/graylog2-server#11620
Fixed
- Fix browser locale related issue with dashboard widgets. Graylog2/graylog2-server#11596Graylog2/graylog2-server#11637
- Fix backwards compatibility for area chart widgets. Graylog2/graylog2-server#11611Graylog2/graylog2-server#11610
- Fix problem with rendering shares when entities have been shared with “everyone”. Graylog2/graylog2-server#11697Graylog2/graylog2-server#11698
Graylog 4.1.7
Released: 2021-11-03
Core
Fixed
- Fix potential issue with duplicate index field type updates. Graylog2/graylog2-server#11504Graylog2/graylog2-server#11552
- Allow aggregation on fields which exist as
keyword
andtext
types in different indices. Graylog2/graylog2-server#11535 - Use correct
data_dir
setting to store native libraries. Graylog2/graylog2-server#11543Graylog2/graylog2-server#11571 - Fix issue where the first day on the traffic graph didn’t show the full day traffic value. Graylog2/graylog2-server#11546
Integrations Plugin
Added
- Allow the usage of templates in the channel name for the Slack plugin. Graylog2/graylog-plugin-integrations#927
Fixed
- Add timezone setting to PaloAlto inputs to fix timestamp parsing. Graylog2/graylog-plugin-integrations#931Graylog2/graylog-plugin-integrations#933
Graylog 4.1.6
Released: 2021-10-06
Core
Fixed
- Fix potential race condition in traffic accounting. Graylog2/graylog2-server#11248Graylog2/graylog2-server#11296
- Fix permissions for alert events when event definitions don’t select streams. Graylog2/graylog2-server#11301Graylog2/graylog2-server#11303
- Fix system stats with MongoDB >= 4.4. Graylog2/graylog2-server#11357
- Fix index counts on index sets page. Graylog2/graylog2-server#11375Graylog2/graylog2-server#11357
- Fix race condition with multiple search executions. Graylog2/graylog2-server#11428
Graylog 4.1.5
Released: 2021-09-13
Core
Fixed
- Do not set ‘to’ when setting TimeRange to ‘All Time’, fixes an error when changing time ranges. Graylog2/graylog2-server#11017Graylog2/graylog2-server#11090
- Exclude non-data nodes from ES floodgate checks Graylog2/graylog2-server#11106Graylog2/graylog2-server#11125
- Fix resolving alias target for index sets with plus in prefix on ES6. Graylog2/graylog2-server#11142Graylog2/graylog2-server#11153
- Display Tooltips by default Graylog2/graylog2-server#11130Graylog2/graylog2-server#11138
- Fix race condition in message details related to uninitialized nodes store. Graylog2/graylog2-server#11226
- Cleanup permission grants for deleted users. Graylog2/graylog2-server#10385Graylog2/graylog2-server#11265
Graylog 4.1.4
Released: 2021-09-01
Core
Fixed
- Do not set ‘to’ when setting TimeRange to ‘All Time’, fixes an error when changing time ranges. Graylog2/graylog2-server#11017Graylog2/graylog2-server#11090
- Exclude non-data nodes from ES floodgate checks Graylog2/graylog2-server#11106Graylog2/graylog2-server#11125
- Fixing resolving alias target for index sets with plus in prefix on ES6. Graylog2/graylog2-server#11142Graylog2/graylog2-server#11153
- Display Tooltips by default Graylog2/graylog2-server#11130Graylog2/graylog2-server#11138
- Fix race condition in message details related to uninitialized nodes store. Graylog2/graylog2-server#11226
Graylog 4.1.3
Released: 2021-08-04
Core
Fixed
- Fix pagination and search on the streams overview page. Graylog2/graylog2-server#11091Graylog2/graylog2-server#11100
Graylog 4.1.2
Released: 2021-07-28
Core
Security
Session ID leak in Graylog DEBUG log file and audit log.
We recently discovered a session ID leak in the Graylog DEBUG log file as well as the audit log. A user can use a session ID to authenticate against Graylog and then this user has access to all the permissions associated with the owner of the session ID.
The ID was printed in DEBUG level log messages (DEBUG is not enabled by default) as well as the Graylog Enterprise Audit Log. By default, the Graylog Audit Log is only logging to the local database and only accessible by Graylog administrators.
We would like to thank David Herbstmann for discovering and responsibly disclosing this vulnerability.
The following CVE IDs have been assigned: CVE-2021-37759, CVE-2021-37760
Fixed
- Fix confusing dependencies warning when sharing searches. Graylog2/graylog2-server#11021Graylog2/graylog2-server#11027
- Fix index retries with connection failures to Elasticsearch 7 nodes. Graylog2/graylog2-server#11045Graylog2/graylog2-server#11057
Graylog 4.1.1
Released: 2021-07-07
Core
Fixed
- Fix loading of streams page in some edge cases. Graylog2/graylog2-server#10514Graylog2/graylog2-server#10943
- Fix forwarder metrics definitions for Prometheus exporter. Graylog2/graylog2-server#10976
- Fix API browser for some setups. Graylog2/graylog2-server#10952Graylog2/graylog2-server#10981
- Allow usage of insecure TLS ciphers for communication with legacy systems when setting enabled_tls_protocols to TLS versions < 1.2. Graylog2/graylog2-server#10944Graylog2/graylog2-server#10985
- Fix pretty printing JSON responses when requested. Graylog2/graylog2-server#10906Graylog2/graylog2-server#10993
- Fix issue when trying to modify heatmap widgets that have been created with older versions of Graylog. Graylog2/graylog2-server#10928Graylog2/graylog2-server#10967Graylog2/graylog2-server#10987
Graylog 4.1.0
Released: 2021-06-23
Core
Added
- Allow users to focus widgets in a search and on dashboards. Graylog2/graylog2-server#9711
- Add HTML body support to email notifications. Graylog2/graylog2-server#4569Graylog2/graylog2-server#9790 (Thanks @radykal-com!)
- Improved date/time picker for the search page and widgets. Graylog2/graylog2-server#9569
- Support custom chart legends and value actions in widgets. Graylog2/graylog2-server#6612Graylog2/graylog2-server#7207Graylog2/graylog2-server#9844
- Allow highlighting of dates and boolean values. Graylog2/graylog2-server#9835Graylog2/graylog2-server#10000
- Add static/gradient color options to value highlighting. Graylog2/graylog2-server#10033
- Add color scale configuration options for heatmap widget. Graylog2/graylog2-server#9836
- Support for connecting to newer Kafka clusters. Graylog2/graylog2-server#7101Graylog2/graylog2-server#7783Graylog2/graylog2-server#9927Graylog2/graylog2-server#10146
- Support IPinfo databases in GeoIP lookup data adapter. Graylog2/graylog2-server#10183
- Add
elasticsearch_mute_deprecation_warnings
config option to disable Elasticsearch related deprecation warnings. Graylog2/graylog2-server#9822Graylog2/graylog2-server#10163Graylog2/graylog2-server#10239 - Vastly improved search aggregation builder. Graylog2/graylog2-server#9742Graylog2/graylog2-server#10212Graylog2/graylog2-server#10281Graylog2/graylog2-server#10293Graylog2/graylog2-server#10301
- Add
allowed_auxiliary_paths
config option to optionally restrict file system access for the CSV File data dapter. Graylog2/graylog2-server#10244 - Add timerange indicator to widgets. Graylog2/graylog2-server#7358Graylog2/graylog2-server#10508
- Allow filtering for entity ID in pagination. Graylog2/graylog2-server#10537
- Add built-in Prometheus exporter. Graylog2/graylog2-server#10767
Changed
Also see: 4.1 upgrade notes
- Only show API tokens once after their creation. Graylog2/graylog2-server#9124Graylog2/graylog2-server#9746
- Replace sigar library with OSHI for collecting system stats. Graylog2/graylog2-server#6056Graylog2/graylog2-server#9840 (Thanks @desiderantes!)
- Due to the sigar to OSHI migration, the
disable_sigar
config option has been renamed todisable_native_system_stats_collector
. - Creating users is now using separate fields for firstname and lastname. Graylog2/graylog2-server#10074
- Use more secure TLS default ciphers. Graylog2/graylog2-server#10653
- Use relative URLs for web interface assets served by the Graylog server to improve reverse proxy setups. Graylog2/graylog2-server#10632Graylog2/graylog2-server#10267Graylog2/graylog2-server#10726
- Graylog doesn’t stop on startup anymore but tries to reconnect when Elasticsearch version probing is enabled but the cluster is unreachable.
Fixed
- Fix behavior of “Apply” for new pipeline rules. Graylog2/graylog2-server#9340
- Improved authentication failure messages. Graylog2/graylog2-server#9500
- Return 400 when modifying a user with invalid role names. Graylog2/graylog2-server#9722Graylog2/graylog2-server#5082Graylog2/graylog2-server#4655 (Thanks @radykal-com!)
- Fix notification when updating a user. Graylog2/graylog2-server#9731
- Fix issue when re-using a pipeline stage number. Graylog2/graylog2-server#6806Graylog2/graylog2-server#9911
- Improved indexing retries. Graylog2/graylog2-server#9852Graylog2/graylog2-server#9961
- Fix race condition when loading pipeline rule editor. Graylog2/graylog2-server#9341Graylog2/graylog2-server#10070
- Avoid triggering duplicate search executions when focusing widgets. Graylog2/graylog2-server#8421Graylog2/graylog2-server#9467Graylog2/graylog2-server#10053
- Show warning when moving away from the pipeline rule editor without saving. Graylog2/graylog2-server#8650Graylog2/graylog2-server#10073
- Improve server startup speed. Graylog2/graylog2-server#10005
- Keep title when copying widget from search to dashboard. Graylog2/graylog2-server#10003Graylog2/graylog2-server#10189
- Improve Java 11 compatibility. Graylog2/graylog2-server#7223Graylog2/graylog2-server#9802Graylog2/graylog2-server#10194
- Improve readybility of numeric values in data tables. Graylog2/graylog2-server#7831Graylog2/graylog2-server#10195
- Fix content-pack auto installation. Graylog2/graylog-docker#153Graylog2/graylog2-server#10216
- Improve buffer draining during server shutdown. Graylog2/graylog2-server#10247
- Fix message table scrolling on smaller screens. Graylog2/graylog2-server#8920Graylog2/graylog2-server#10276
- Fix problem with auto-generated TLS certificates. Graylog2/graylog2-server#9958Graylog2/graylog2-server#10400
- Improve logging for processing errors. Graylog2/graylog2-server#10421
- Scope message backlog in aggregation alerts. Graylog2/graylog2-server#6381Graylog2/graylog2-server#10483
- Improve search page layout to provide more space for content. Graylog2/graylog2-server#10518
- Improve saved search overview UI. Graylog2/graylog2-server#10541
- Improve error messages for errors in pipeline rule execution. Graylog2/graylog2-server#10526 10528
- Fix problem where message processing could block when updating outputs. Graylog2/graylog2-server#10168Graylog2/graylog2-server#10584
- Improve timezone handling for keyword timerages. Graylog2/graylog2-server#10290
- Improve search and dashboard tab positioning on smaller screens. Graylog2/graylog2-server#10371
- Improve API browser model content. Graylog2/graylog2-server#10637
- Improve search bar responsiveness. Graylog2/graylog2-server#10652
- Avoid buffering complete export responses in browser. Graylog2/graylog2-server#10602Graylog2/graylog2-server#10617
- Fix lookup table cache purging in distributed setup. Graylog2/graylog2-server#9554Graylog2/graylog2-server#10605
- Fix group selection on filtered entities when creating or updating a content-pack. Graylog2/graylog2-server#10731
- Fix rendering of the traffic graph in “System/Overview”. Graylog2/graylog2-server#10730
- Fix case issue on the user details and edit pages. Graylog2/graylog2-server#10687Graylog2/graylog2-server#10700
- Fix sorting on stream overview page. Graylog2/graylog2-server#10754
- Improve Elasticsearch version probing on server startup. Graylog2/graylog2-server#10651
- Prevent JSON Path Input from stopping on non-2xx responses. Graylog2/graylog2-server#9941Graylog2/graylog2-server#10717 (Thanks @MPreloaded!)
- Fix race condition in lookup data adapter and cache lifecycle. Graylog2/graylog2-server#10753Graylog2/graylog2-server#10815
- Improve Elasticsearch flood stage handling. Graylog2/graylog2-server#10889
Integrations Plugin
Added
- Greynoise data adapter. Graylog2/graylog-plugin-integrations#760
Graylog 4.0.17
Released: 2022-07-06
No changes since 4.0.16.
Graylog 4.0.16
Released: 2022-04-12
Core
Added
- Introduce service account flag for user objects. Graylog2/graylog2-server#12405
Changed
- Convert built-in sidecar user to service account.
Security
- Fix DEBUG logging of access token. Graylog2/graylog2-server#12395
Graylog 4.0.15
Released: 2021-12-16
Core
Security
- Fix log4j CVE-2021-45046 by updating the library to 2.16.0. Graylog2/graylog2-server#11814
Integrations Plugin
No changes since 4.0.14.
Graylog 4.0.14
Released: 2021-12-10
Core
Fixed
- Ensure that aggregation events always have a
source_streams
field for permission checks. Graylog2/graylog2-server#6876Graylog2/graylog2-server#6877 - Fix permissions for alert events when event definitions don’t select streams. Graylog2/graylog2-server#11301Graylog2/graylog2-server#11303
- Fix potential issue with duplicate index field type updates. Graylog2/graylog2-server#11504Graylog2/graylog2-server#11552
- Fix issue where the first day on the traffic graph didn’t show the full day traffic value. Graylog2/graylog2-server#11575
Security
- Fix log4j CVE-2021-44228. Graylog2/graylog2-server#11786
Integrations Plugin
No changes since 4.0.13.
Graylog 4.0.13
Released: 2021-09-13
Core
Fixed
-
Fix resolving alias target for index sets with plus in prefix on ES6.
Graylog2/graylog2-server#11142Graylog2/graylog2-server#11153
Cleanup permission grants for deleted users.
Graylog2/graylog2-server#10385Graylog2/graylog2-server#11265
Graylog 4.0.12
Released: 2021-09-01
Core
Fixed
- Fixing resolving alias target for index sets with plus in prefix on ES6. Graylog2/graylog2-server#11142Graylog2/graylog2-server#11153
Graylog 4.0.11
Released: 2021-08-04
Core
Fixed
- Fix
count
andgrand_total
values in search/dashboard pagination. Graylog2/graylog2-server#11034
Graylog 4.0.10
Released: 2021-07-28
Core
Security
Session ID leak in Graylog DEBUG log file and audit log.
We recently discovered a session ID leak in the Graylog DEBUG log file as well as the audit log. A user can use a session ID to authenticate against Graylog and then this user has access to all the permissions associated with the owner of the session ID.
The ID was printed in DEBUG level log messages (DEBUG is not enabled by default) as well as the Graylog Enterprise Audit Log. By default, the Graylog Audit Log is only logging to the local database and only accessible by Graylog administrators.
We would like to thank David Herbstmann for discovering and responsibly disclosing this vulnerability.
The following CVE IDs have been assigned: CVE-2021-37759, CVE-2021-37760
Graylog 4.0.9
Released: 2021-07-07
Core
Fixed
- Fix Elasticsearch flood-stage handling. Graylog2/graylog2-server#10887Graylog2/graylog2-server#10897
- Fixing shared entities overview filter for saved searches. Graylog2/graylog2-server#10878Graylog2/graylog2-server#10893
- Fix loading of streams page in some edge cases. Graylog2/graylog2-server#10514Graylog2/graylog2-server#10942
Graylog 4.0.8
Released: 2021-06-02
Core
Fixed
- Don’t run index jobs for missing indices. Graylog2/graylog2-server#10444
- Fix user sessions not timing out. Graylog2/graylog2-server#10578Graylog2/graylog2-server#10577
Integrations Plugin
Fixed
- Fix problem with PaloAlto timestamp handling. Graylog2/graylog-plugin-integrations#816
Graylog 4.0.7
Released: 2021-05-05
Core
Changed
- Log failed messages and full stack trace on processing errors when DEBUG is enabled. Graylog2/graylog2-server#10319Graylog2/graylog2-server#10421
Fixed
- Correctly display ES cluster status in the user interface. Graylog2/graylog2-server#10407Graylog2/graylog2-server#10428
- Fix sharing of streams that have outputs attached. Graylog2/graylog2-server#10443
- Allow using the same LDAP/AD attributes for different config settings. Graylog2/graylog2-server#10069Graylog2/graylog2-server#10437
- Support
+
character in index prefixes for index sets. Graylog2/graylog2-server#10392 - Encode usernames that are used in URLs. Graylog2/graylog2-server#10530Graylog2/graylog2-server#10566
Graylog 4.0.6
Released: 2021-04-07
Core
Fixed
- Fix rendering of trend color in report generation Graylog2/graylog2-server#10154
- Update Kafka client to 2.7.0 Graylog2/graylog2-server#10184
- Fix content-pack auto installation Graylog2/graylog2-server#10237
- Initialize ES7 client and sniffer lazily Graylog2/graylog2-server#10292
- Fix permission check for notifications in event definitions Graylog2/graylog2-server#10381
Graylog 4.0.5
Released: 2021-02-22
Core
Fixed
- Prevent NullPointerException in index optimization job Graylog2/graylog2-server#10119
Graylog 4.0.4
Released: 2021-02-22
Core
Fixed
- Fixing counting of messages in index for ES7 Graylog2/graylog2-server#10094
- Provide a timeout for request when optimizing index in ES7 Graylog2/graylog2-server#10098
- Add missing GRN type for outputs Graylog2/graylog2-server#10108
Integrations Plugin
Fixed
- Refactor PaloAltoTypeParser to improve performance Graylog2/graylog-plugin-integrations#737
Graylog 4.0.3
Released: 2021-02-16
Core
Fixed
- Fix search export to dashboard when running with a proxy and a path prefix. Graylog2/graylog2-server#9991Graylog2/graylog2-server#9989
- Fix moving widgets to a different tab when they have been copied from a dashboard. Graylog2/graylog2-server#9778Graylog2/graylog2-server#10007
- Fix potential MongoDB performance issue. Graylog2/graylog2-server#10043Graylog2/graylog2-server#10046
Integrations Plugin
Added
- Initial support for parsing USERID log type in PaloAlto 9.x inputs. Graylog2/graylog2-server#729
Graylog 4.0.2
Released: 2021-01-27
Core
Added
- Show field sort icons in message table. Graylog2/graylog2-server#9775
Fixed
- Fix missing buttons on sidecars page. Graylog2/graylog2-server#9677Graylog2/graylog2-server#9682
- Fix missing microseconds in timestamps in the message table. Graylog2/graylog2-server#9604Graylog2/graylog2-server#9698
- Fix notification when updating a user. Graylog2/graylog2-server#9733
- Keep tab order when installing a dashboard from a content pack. Graylog2/graylog2-server#8264Graylog2/graylog2-server#9812
- Allow users to change their own timezone again. Graylog2/graylog2-server#9814
- Fix search query parsing with
$
characters. Graylog2/graylog2-server#9497Graylog2/graylog2-server#9877 - Fix issue on streams page which legacy alert receivers present. Graylog2/graylog2-server#9637Graylog2/graylog2-server#9785
- Fix page size change selector on content packs page. Graylog2/graylog2-server#9629Graylog2/graylog2-server#9875
- Fix state problem with pipeline stage selection. Graylog2/graylog2-server#6806Graylog2/graylog2-server#9916
- Retry Elasticsearch requests on socket timeouts. Graylog2/graylog2-server#9922
- Fix date format specifiers in index mapping templates to avoid deprecation warnings. Graylog2/graylog2-server#9690Graylog2/graylog2-server#9948
- Reset stream rule form after sucessful rule creation. Graylog2/graylog2-server#9956Graylog2/graylog2-server#9968
- Fix pipeline rule syntax highlighting issues. Graylog2/graylog2-server#9250Graylog2/graylog2-server#9976
- Fix error using apply and then save & close on a new pipeline rule. Graylog2/graylog2-server#9252Graylog2/graylog2-server#9976
- Retry bulk indexing if index alias has invalid target(s) instead of dropping the messages. Graylog2/graylog2-server#9955Graylog2/graylog2-server#9962Graylog2/graylog2-server#9978
Legacy Collector Plugin
Fixed
- Fix collectors table styling. Graylog2/graylog-plugin-collector#172
Threatintel Plugin
Changed
- Deprecated ransomware data adapter because the service has been shutdown in 2019. Graylog2/graylog-plugin-threatintel/#183
Graylog 4.0.1
Released: 2020-11-25
Core
Fixed
- Fix incorrect support link in the UI. Graylog2/graylog2-server#9527
- Updates to Graylog Schema. Graylog2/graylog2-server#9556
- Fix an issue when running Graylog on Amazon Elasticsearch Service. Graylog2/graylog2-server#9599
- Fix problem with sharing dashboards and searches. Graylog2/graylog2-server#9525Graylog2/graylog2-server#9594
- Fix share button for event definitions. Graylog2/graylog2-server#9603
- Fix pagination of synced user accounts in authentication overview. Graylog2/graylog2-server#9606
- Fix link to the sidecar user’s API token management on the sidecars page. Graylog2/graylog2-server#9613
- Fix scratchpad text area colors in dark mode. Graylog2/graylog2-server#9607Graylog2/graylog2-server#9614
Integrations Plugin
Fixed
- Add message backlog limit to Slack plugin. Graylog2/graylog-plugin-integrations#659
- Add Discord support to Slack plugin. Graylog2/graylog-plugin-integrations#665
- Update Palo Alto input to support PANOS v10 schemas Graylog2/graylog-plugin-integrations#658
Threatintel Plugin
Fixed
- Improve WHOIS data adapter parsing. Graylog2/graylog-plugin-threatintel#181
Graylog 4.0.0
Released: 2020-11-18
Core
Added
- Add dark theme mode. Graylog2/graylog2-server#8718
- Add support for Elasticsearch version 7.
- Add improved entity sharing system for streams, searches, dashboards and event definitions.
- Add trusted header authentication support to replace legacy SSO authentication plugin. Graylog2/graylog2-server#9278
- Add support for disabling user accounts. Graylog2/graylog2-server#9374Graylog2/graylog2-server#9077
- Add pagination to stream overview page. Graylog2/graylog2-server#5675
- Add pagination to grok pattern overview page. Graylog2/graylog2-server#5683
- Add support for editing title, description and summary of a saved search. Graylog2/graylog2-server#8084
- Make it possible to move widgets between dashboard tabs. Graylog2/graylog2-server#8236Graylog2/graylog2-server#8152
- Make it possible to display the search page sidebar inline. Graylog2/graylog2-server#8294Graylog2/graylog2-server#7860
- Add
facility_num
field to Syslog messages. Graylog2/graylog2-server#8394 (Thanks @huksley) - Format numbers in data table/plots with decimal comma. Graylog2/graylog2-server#9318
- Add close button to user notifications. Graylog2/graylog2-server#9345
Changed
Also see: 4.0 upgrade notes
- Replace role based stream, search and dashboard sharing with a new entity sharing system.
- Change
/users
resource to use the user ID instead of the user name as parameter. - Disable CORS support by default. Graylog2/graylog2-server#8070
- Ensure consistent naming of inputs Graylog2/graylog2-server#8190Graylog2/graylog2-server#7345 (Thanks @Chunters)
- Increase overall font size in the web interface to improve readability. Graylog2/graylog2-server#8319
- Improve user management UI.
- Improve LDAP and Active Directory management UI.
- Show search link in navigation for all users. Graylog2/graylog2-server#8917Graylog2/graylog2-server#8745Graylog2/graylog2-server#8779Graylog2/graylog2-server#8921
- Show grok patterns menu entry to all users with reader role. Graylog2/graylog2-server#9319
- Exclude Illuminate message fields from traffic accounting. Graylog2/graylog2-server#9408Graylog2/graylog2-server#9361
- Change license to SSPL. See the following links for details:
Removed
Also see: 4.0 upgrade notes
- Remove support for Elasticsearch version 5. (supported versions are 6 and 7)
- Remove LDAP groups to role mapping. (replaced by team support in Graylog Enterprise)
- Remove legacy redirects for dashboards and saved searches. Graylog2/graylog2-server#8201Graylog2/graylog2-server#7151Graylog2/graylog2-server#8007
- Remove legacy saved searches API. Graylog2/graylog2-server#8199
- Remove legacy dashboards API. Graylog2/graylog2-server#8198
- Remove legacy aggregation API. Graylog2/graylog2-server#8329
- Remove legacy counts API. Graylog2/graylog2-server#8409
- Remove unused
elasticsearch_request_timeout
config file option. Graylog2/graylog2-server#8050
Fixed
- Improve styling of search widget action icons. Graylog2/graylog2-server#8064
- Give search input focus when saved search list is opening. Graylog2/graylog2-server#8052
- Fix issue with handling PKCS#8 PBES2 keys. Graylog2/graylog2-server#8133Graylog2/graylog2-server#7552
- Fix link to sidecar documentation page. Graylog2/graylog2-server#8144 (Thanks @Chunters)
- Fix NullPointerException if MongoDB doesn’t run with MMAPv1. Graylog2/graylog2-server#8274Graylog2/graylog2-server#8273 (Thanks @pdcemulator)
- Improve and ensure consistent rendering of monospace fonts. Graylog2/graylog2-server#8174
- Fix data table rendering for large table values. Graylog2/graylog2-server#8334
- Fix getting started guide page scroll behavior. Graylog2/graylog2-server#8131
- Improve rendering of time base bar charts. Graylog2/graylog2-server#8354Graylog2/graylog2-server#7167
- Fix sort and sort direction selector in aggregation builder. Graylog2/graylog2-server#7198Graylog2/graylog2-server#8355
- Improve error handling for absolute time range inputs. Graylog2/graylog2-server#8371Graylog2/graylog2-server#7191
- Fix disk journal utilization chart. Graylog2/graylog2-server#8420Graylog2/graylog2-server#8448
- Fix race conditions on “System/Configuration” page. Graylog2/graylog2-server#8778Graylog2/graylog2-server#8392
- Improve UI development flow across operating systems. Graylog2/graylog2-server#8487 (Thanks @binyellow)
- Improve image sizes to improve UI performance. Graylog2/graylog2-server#8976
- Improve pipeline rule link rendering for rules with long titles. Graylog2/graylog2-server#9016Graylog2/graylog2-server#9014
- Fix stream search bar issue with empty search results. Graylog2/graylog2-server#9028
- Retry message indexing when ES primary shards are not active.#9065
- Fix error when streams are referencing missing outputs. Graylog2/graylog2-server#9116Graylog2/graylog2-server#9012
- Fix JDK TLS protocol detection. Graylog2/graylog2-server#9356Graylog2/graylog2-server#9446Graylog2/graylog2-server#9445
- Improve error handling when node metrics cannot be received from the backend. Graylog2/graylog2-server#9316Graylog2/graylog2-server#9315
- Don’t allow modifications of email and full name for external users. Graylog2/graylog2-server#9390Graylog2/graylog2-server#9222
- Fix pipeline rule parsing issue with unary NOT operators. Graylog2/graylog2-server#8554
Integrations Plugin
Added
- Add Slack event notification plugin. Graylog2/graylog-plugin-integrations#569
- Add PagerDuty event notification plugin. Graylog2/graylog-plugin-integrations#606
Graylog 3.3.17
Released: 2022-04-12
Core
Added
- Introduce service account flag for user objects. Graylog2/graylog2-server#12405
Changed
- Convert built-in sidecar user to service account.
Security
- Fix DEBUG logging of access token. Graylog2/graylog2-server#12395
Graylog 3.3.16
Released: 2021-12-16
Core
Security
- Fix log4j CVE-2021-45046 by updating the library to 2.16.0. Graylog2/graylog2-server#11814
Integrations Plugin
No changes since 3.3.15.
Graylog 3.3.15
Released: 2021-12-10
Core
Security
- Fix log4j CVE-2021-44228. Graylog2/graylog2-server#11786
Integrations Plugin
No changes since 3.3.14.
Graylog 3.3.14
Released: 2021-07-28
Core
Security
Session ID leak in Graylog DEBUG log file and audit log.
We recently discovered a session ID leak in the Graylog DEBUG log file as well as the audit log. A user can use a session ID to authenticate against Graylog and then this user has access to all the permissions associated with the owner of the session ID.
The ID was printed in DEBUG level log messages (DEBUG is not enabled by default) as well as the Graylog Enterprise Audit Log. By default, the Graylog Audit Log is only logging to the local database and only accessible by Graylog administrators.
We would like to thank David Herbstmann for discovering and responsibly disclosing this vulnerability.
The following CVE IDs have been assigned: CVE-2021-37759, CVE-2021-37760
Graylog 3.3.13
Released: 2021-05-05
No changes since 3.3.12.
Graylog 3.3.12
Released: 2021-04-14
Core
Fixed
- Fix rendering of trend colors in report generation. Graylog2/graylog2-server#10157
- Don’t show “Enterprise” navigation for non-admin users. Graylog2/graylog2-server#8936Graylog2/graylog2-server#10188Graylog2/graylog2-server#10233
- Fix
NullPointerException
when MongoDB doesn’t run with the MMAPv1 storage engine. Graylog2/graylog2-server#8273Graylog2/graylog2-server#10300 - Log failed messages and full stack trace on processing errors when DEBUG is enabled. Graylog2/graylog2-server#10319Graylog2/graylog2-server#10432
Graylog 3.3.11
Released: 2021-02-16
Core
Fixed
- Fix search export to dashboard when running with a proxy and a path prefix. Graylog2/graylog2-server#9992Graylog2/graylog2-server#9989
- Fix Elasticsearch watermark notifications when running multiple Graylog nodes. Graylog2/graylog2-server#10066
Graylog 3.3.10
Released: 2021-01-27
Core
Added
- Show field sort icons in message table. Graylog2/graylog2-server#9775
Fixed
- Fix search query parsing with
$
characters. Graylog2/graylog2-server#9497Graylog2/graylog2-server#9877 - Fix CSV export for shared dashboards. Graylog2/graylog2-server#9906
- Retry Elasticsearch requests on socket timeouts. Graylog2/graylog2-server#9922
- Retry bulk indexing if index alias has invalid target(s) instead of dropping the messages. Graylog2/graylog2-server#9955Graylog2/graylog2-server#9962Graylog2/graylog2-server#9978
Graylog 3.3.9
Released: 2020-11-25
Core
Fixed
- Improve user feedback when the UI cannot fetch data from the metrics API. Graylog2/graylog2-server#9315Graylog2/graylog2-server#9316
- Updates to Graylog Schema. Graylog2/graylog2-server#9567
Graylog 3.3.8
Released: 2020-10-12
No changes since 3.3.7 (see Graylog Enterprise for changes there).
Graylog 3.3.7
Released: 2020-10-08
Core
Security
- Update JavaScript dependencies with security issues. Graylog2/graylog2-server#9098
Fixed
- Fix issues with changing number of results for a pivot configuration. Graylog2/graylog2-server#9087Graylog2/graylog2-server#9085
- Fix permission issue with search and dashboards by respecting ownership. Graylog2/graylog2-server#9068Graylog2/graylog2-server#9067
- Fix unintended search bar form submit in widget edit modal. Graylog2/graylog2-server#9096
Graylog 3.3.6
Released: 2020-09-28
Core
Security
- Fixing a path traversal issue in the API Browser for non-standard installations. Graylog2/graylog2-server#8986Graylog2/graylog2-server#8988 Due to a check happening before pathname normalization, a directory traversal was possible in the REST resource that serves the API browser UI. If the Graylog server was started with non-standard JRE options (using an additional classpath setting), it could have been used to access files from this additional classpath directory without authentication. Many thanks to Florian Hauser and Christian Fünfhaus of Code White for disclosing this vulnerability.
Changed
- Always show the search page link in the navigation to allow users to access the search without having to go to the streams page first. Graylog2/graylog2-server#8917Graylog2/graylog2-server#8745Graylog2/graylog2-server#8779Graylog2/graylog2-server#8921
Fixed
- Fix (un)schedule endpoints for event definitions to make them work without explicit content-type header. Graylog2/graylog2-server#8981
- Fix missing title attribute in pipeline UI. Graylog2/graylog2-server#9017
- Show better error message on the search page when users have no stream permissions. Graylog2/graylog2-server#8955Graylog2/graylog2-server#9011
- Fix problem with updating search controls (query, streams, timerange) in widgets. Graylog2/graylog2-server#7922Graylog2/graylog2-server#9043
Legacy AWS Plugin
Added
- Include
additional_event_data
as part of the graylog message. Graylog2/graylog-plugin-aws#419 (Thanks @rongutierrez)
Integrations Plugin
Added
- Add “9.1.3 GlobalProtect logs” support to the PaloAlto 9.x input. Graylog2/graylog-plugin-integrations#540Graylog2/graylog-plugin-integrations#541Graylog2/graylog-plugin-integrations#554
Fixed
- Fix “Key & Secret” authentication in CloudWatch input. Graylog2/graylog-plugin-integrations#577
Graylog 3.3.5
Released: 2020-08-17
No changes since 3.3.3 (see Graylog Enterprise for changes there).
Graylog 3.3.4
Released: 2020-08-06
No changes since 3.3.3.
Graylog 3.3.3
Released: 2020-07-29
Core
Added
- Add new vendor fields to Graylog schema. Graylog2/graylog2-server#8471Graylog2/graylog2-server#8642
Security
- [BREAKING]: Enable hostname validation for SSL/TLS-backed LDAP connections. Graylog2/graylog2-server#8625 Prior to v3.3.3, the certificates of LDAP servers which are connected to using a secure connection (SSL or TLS) were not validated, even if the “Allow self-signed certificates” option was unchecked. Starting with v3.3.3, certificates are validated against the local default keystore. This might introduce a breaking change, depending on your local LDAP settings and the validity of the certificates used (if any). Please ensure that all certificates used are valid, their common name matches the host part of your configured LDAP server and your local keystore contains all CA/intermediate certs required for validation.
See also: CVE-2020-15813
Changed
- Find a better default for
enabled_tls_protocols
setting. Graylog2/graylog2-server#7726Graylog2/graylog2-server#8637 This change builds the default TLS protocols based on what is supported by the currently running JRE.
Fixed
- Fix message table issue in fullscreen/TV mode. Graylog2/graylog2-server#8483Graylog2/graylog2-server#8575
Graylog 3.3.2
Released: 2020-06-24
Core
Changed
- Mark legacy aggregation API as deprecated in favor of the new views API. (to be removed in 4.0) Graylog2/graylog2-server#8323
- Update Graylog field schema. Graylog2/graylog2-server#8331
- Improve search page rendering performance. Graylog2/graylog2-server#8343
Fixed
- Fix issue with flickering in the single number widget. Graylog2/graylog2-server#7563Graylog2/graylog2-server#8341
- Fix issue with extending alert notification grace period. Graylog2/graylog2-server#8365Graylog2/graylog2-server#8402
- Fix rendering of message table header. Graylog2/graylog2-server#8415
Integrations Plugin
Added
- Add new Palo Alto input to support PAN-OS v9.x devices. Graylog2/graylog-plugin-integrations#496
Graylog 3.3.1
Released: 2020-06-10
Core
Fixed
- Fix problem with throughput counter in the UI Graylog2/graylog2-server#8172Graylog2/graylog2-server#8185
- Fix issue when adding a new header to the httpsJSONPath lookup data adapter. Graylog2/graylog2-server#8186Graylog2/graylog2-server#8266
- Retry message indexing when indices are read-only due to disk space problems in Elasticsearch. Graylog2/graylog2-server#8211Graylog2/graylog2-server#8269
- Fix issue with using float numbers in event definitions. Graylog2/graylog2-server#8290
- Only check data nodes for Elasticsearch disk usage stats. Graylog2/graylog2-server#8239Graylog2/graylog2-server#8282 (Thanks @radykal-com!)
Graylog 3.3.0
Released: 2020-05-20
Core
Added
- Make it possible to create new URL whitelist entries inside forms. Graylog2/graylog2-server#7275Graylog2/graylog2-server#7169Graylog2/graylog2-server#7401
- Store API tokens encrypted in MongoDB. Graylog2/graylog2-server#7556
- Add new CSV export that supports exporting multiple streams. Graylog2/graylog2-server#7709
- Add string concatenation to pipeline rule language. Graylog2/graylog2-server#7855Graylog2/graylog2-server#7863 (Thanks @rmanibus)
- Add
first_non_null
pipeline rule function. Graylog2/graylog2-server#7895Graylog2/graylog2-server#7916 (Thanks @radykal-com) - Allow users to request a Graylog Enterprise trial license from inside the product. Graylog2/graylog2-server#7992
- Add option to enable/disable event definitions and alerts. Graylog2/graylog2-server#7497Graylog2/graylog2-server#7902
Changed
- Lots of UI styling related changes to make them more consistent.
- Start index retention from the oldest index, not the newest. Graylog2/graylog2-server#7310
- Update MongoDB driver to the latest version to support MongoDB 4.2. Graylog2/graylog2-server#7142Graylog2/graylog2-server#7240 (Thanks @radykal-com)
- Improve unit tests. Graylog2/graylog2-server#7473Graylog2/graylog2-server#7595 (Thanks @cpugputpu)
- Improve progress bar implementation. Graylog2/graylog2-server#7443
- Don’t directly expose “KafkaJournalConfiguration” values in journal API endpoint. Graylog2/graylog2-server#7521Graylog2/graylog2-server#7526
- Optimize JavaScript code bundle sizes. Graylog2/graylog2-server#7598
- Improve dashboard widget legend positioning. Graylog2/graylog2-server#7743
- Change default title for dashboard tabs to
Page#
Graylog2/graylog2-server#7748 - Improve triggering search executions from search bar. Graylog2/graylog2-server#7829Graylog2/graylog2-server#7572Graylog2/graylog2-server#7596Graylog2/graylog2-server#7724
- Don’t truncate messages in process-buffer dump. Graylog2/graylog2-server#7937Graylog2/graylog2-server#7938
Removed
- Remove unused frontend code from the legacy search. Graylog2/graylog2-server#7338
- Remove the unused system client provider. Graylog2/graylog2-server#6376
- Remove legacy saved searches API endpoints. Graylog2/graylog2-server#7804Graylog2/graylog2-server#7805
Fixed
- Fix race condition when creating admin role. Graylog2/graylog2-server#7378
- Display getting started guide with full height. Graylog2/graylog2-server#7529
- Handle absence of field types in search components. Graylog2/graylog2-server#7538
- Improve compatibility with IE 11. Graylog2/graylog2-server#7660Graylog2/graylog2-server#7670Graylog2/graylog2-server#7951
- Prevent logging ReadTimeoutException as an error if KeepAlive is configured by the user. Graylog2/graylog2-server#7819 (Thanks @jesseczko)
- Allow dashboard deletion for users with edit rights. Graylog2/graylog2-server#7729Graylog2/graylog2-server#7817
- Only show dashboard delete button for users with correct permissions. Graylog2/graylog2-server#7793Graylog2/graylog2-server#7846
- Improve field name completion performance by caching field names. Graylog2/graylog2-server#7827
- Speed up event processing when it’s lagging behind. Graylog2/graylog2-server#6740
- Improve performance loading streams from the database. Graylog2/graylog2-server#7867
- Improve autocompletion performance in select fields. Graylog2/graylog2-server#7753Graylog2/graylog2-server#7818
- Improve performance for field type retrieval endpoint. Graylog2/graylog2-server#7865
- Reset pagination on page size change. Graylog2/graylog2-server#7825Graylog2/graylog2-server#7826
- Ensure that dashboards have empty root query strings. Graylog2/graylog2-server#7750Graylog2/graylog2-server#7858
- Fix metric naming options in aggregation builder. Graylog2/graylog2-server#7771Graylog2/graylog2-server#7892
- Improve tarball packaging. Graylog2/graylog2-server#7920 (Thanks @mayrstefan)
- Improve error messages when filtering on empty dashboards. Graylog2/graylog2-server#7807Graylog2/graylog2-server#7888
- Improve error messages when users don’t have required stream permissions. Graylog2/graylog2-server#7505Graylog2/graylog2-server#7782
- Fix LDAP errors for local user accounts. Graylog2/graylog2-server#2267Graylog2/graylog2-server#7917 (Thanks @mayrstefan)
- Fix warning in pipeline rule parser. Graylog2/graylog2-server#7918Graylog2/graylog2-server#7919 (Thanks @mayrstefan)
- Fix sidebar highlighting layout for field values with a long name. Graylog2/graylog2-server#7738Graylog2/graylog2-server#8018
- Improve compatibility with Safari browsers. Graylog2/graylog2-server#8003Graylog2/graylog2-server#8030
- Reset job trigger on event definition updates. Graylog2/graylog2-server#7841Graylog2/graylog2-server#8060
- Fix problem with event notification grace period. Graylog2/graylog2-server#8065Graylog2/graylog2-server#8067
- Improve rendering performance of select fields in event definitions. Graylog2/graylog2-server#8083
- Improve default email notification template. Graylog2/graylog2-server#8112
- Fix timezone rendering of event annotations in graphs. Graylog2/graylog2-server#8125
Security
- Two XSS issues were discovered in the content packs module and the hyperlink string decorator by Juha Laaksonen, Cyber Security Specialist at Solita. A big thanks to Juha for alerting us about these issues. Graylog2/graylog2-server#8072Graylog2/graylog2-server#8104Graylog2/graylog2-server#8150
- Mika Kulmala, Cyber Security Specialist at Solita, reported a leak of the AWS secret key in certain (authenticated) Graylog REST API calls. Graylog is no longer revealing the AWS secret key in REST API responses. A big thanks to Mika for alerting us about this issue. Graylog2/graylog-plugin-aws#361
Graylog 3.2.6
Released: 2020-06-10
Core
Fixed
- Retry message indexing when indices are read-only due to disk space problems in Elasticsearch. Graylog2/graylog2-server#8211Graylog2/graylog2-server#8269
- Fix issue with using float numbers in event definitions. Graylog2/graylog2-server#8290
Graylog 3.2.5
Released: 2020-05-19
Core
Added
- Add minimal support for Beats 7.x to the beats input. Graylog2/graylog2-server#6501Graylog2/graylog2-server#7894
- Show system notification when disk in Elasticsearch fills up. Graylog2/graylog2-server#7899 (Thanks @radykal-com)
Changed
- Enforce unix newlines in the sidecar collector configuration file editor. Graylog2/graylog2-server#7889Graylog2/collector-sidecar#389Graylog2/graylog2-server#7975
- Mask passwords in input configuration returned from the
/system/inputstates
endpoint. Graylog2/graylog2-server#8037 - Sanitize URLs in content packs. Graylog2/graylog2-server#8072Graylog2/graylog2-server#8104
- Sanitize URls in “Hyperlink String” decorator. Graylog2/graylog2-server#8150
Fixed
- Fix UI issues in sidecar configuration. Graylog2/graylog2-server#7406Graylog2/graylog2-server#7754
- Fix dashboard migration issues. Graylog2/graylog2-server#7732Graylog2/graylog2-server#7749Graylog2/graylog2-server#7840
- Fix message list sorting option. Graylog2/graylog2-server#7758Graylog2/graylog2-server#7763
- Fix compatibility issue with Safari and the aggregation configuration. Graylog2/graylog2-server#7806Graylog2/graylog2-server#7815
- Fix pipeline stage parsing endpoint. Graylog2/graylog2-server#7322Graylog2/graylog2-server#7830
AWS Plugin (legacy)
Changed
- Encrypt default AWS secret key with system secret. Graylog2/graylog-plugin-aws#361
Graylog 3.2.4
Released: 2020-03-19
Core
Changed
- Display old LDAP group mappings so they can be deleted by the user. Graylog2/graylog2-server#7502Graylog2/graylog2-server#7697
- Don’t allow aggregations on analyzed fields. Graylog2/graylog2-server#7508Graylog2/graylog2-server#7685
Fixed
- Fix problem with message list pagination. Graylog2/graylog2-server#7680Graylog2/graylog2-server#7665Graylog2/graylog2-server#7693
- Fix issue removing custom fields from event definitions. Graylog2/graylog2-server#7544Graylog2/graylog2-server#7692
- Fix drop-down overlay placements on search page. Graylog2/graylog2-server#7723
- Remove streams parameter from URL when the last stream got removed from a search query. Graylog2/graylog2-server#7717Graylog2/graylog2-server#7719
Graylog 3.2.3
Released: 2020-03-11
Core
Added
- Add back auto-completion for
_exists_
queries. Graylog2/graylog2-server#7441Graylog2/graylog2-server#7604 - Add back surrounding search feature for searches and dashboards. Graylog2/graylog2-server#7616Graylog2/graylog2-server#7621
- Add support for newer Kafka versions and allowing more customization options. Graylog2/graylog2-server#7504 (Thanks @muralibasani)
- Add back field sorting for the message table widget. Graylog2/graylog2-server#7645
- Add back “replay search” button for dashboard widgets. Graylog2/graylog2-server#7372Graylog2/graylog2-server#7648
- Add option to share a saved search with other users. Graylog2/graylog2-server#7668
Changed
- Improve chart rendering for zero values. Graylog2/graylog2-server#7605
- Rename “Aggregate” field option to “Show top values” to make it more clear. (this was previously called quick values) Graylog2/graylog2-server#7663
Fixed
- Fix widget error “n.find is not a function”. Graylog2/graylog2-server#7365Graylog2/graylog2-server#7538
- Fix problem with rendering table widgets. Graylog2/graylog2-server#7565Graylog2/graylog2-server#7611
- Fix aggregation event definitions when no streams are selected. Graylog2/graylog2-server#7619Graylog2/graylog2-server#7625
- Fix problem with showing message journal statistics on the node details page. Graylog2/graylog2-server#7521Graylog2/graylog2-server#7633
- Fix sorting problem when sorting over different streams. Graylog2/graylog2-server#6490Graylog2/graylog2-server#7569
- Fix search and dashboard issues with Internet Explorer 11. Graylog2/graylog2-server#7660
- Fix search page refresh handling. Graylog2/graylog2-server#7661
Graylog 3.2.2
Released: 2020-02-20
Core
Changed
- Use Graylog data dir for storing netty tcnative libraries. Graylog2/graylog2-server#5762Graylog2/graylog2-server#7359
- Add colon (
:
) when selecting a field from auto-completion. Graylog2/graylog2-server#7408Graylog2/graylog2-server#7493
Fixed
- Suppress system notification for whitelist errors from test alerts. Graylog2/graylog2-server#7350Graylog2/graylog2-server#7390
- Fix issue with duplicating dashboard tabs. Graylog2/graylog2-server#7397
- Improve search URL synchronization by avoiding unnecessary entries in browser history. Graylog2/graylog2-server#7415
- Fix error on system overview page. Graylog2/graylog2-server#7329Graylog2/graylog2-server#7351
- Fix issue with content pack creation. Graylog2/graylog2-server#6690Graylog2/graylog2-server#7449
- Fix problem with dashboard migration and hidden filters. Graylog2/graylog2-server#7366Graylog2/graylog2-server#7420
- Fix dashboard migration issue with field name extraction. Graylog2/graylog2-server#7452
- Fix widget error “n.find is not a function”. Graylog2/graylog2-server#7365Graylog2/graylog2-server#7450
- Fix dashboard widget migration error related to value sorting. Graylog2/graylog2-server#7476Graylog2/graylog2-server#7481
- Fix issue with Active Directory authentication support. Graylog2/graylog2-server#7431Graylog2/graylog2-server#7498
- Fix issue with field ordering in message table widgets. Graylog2/graylog2-server#6808Graylog2/graylog2-server#7501
- Fix problem with running Graylog under a subpath. Graylog2/graylog2-server#7447Graylog2/graylog2-server#7500
Integrations Plugin
Fixed
- Fix issue with AWS Kinesis token refresh. Graylog2/graylog-plugin-integrations#386Graylog2/graylog-plugin-integrations#389
Graylog 3.2.1
Released: 2020-02-04
Core
Fixed
- Fix problem with message processing and invalid
timestamp
fields. Graylog2/graylog2-server#7364Graylog2/graylog2-server#7290 - Fix scrolling issue in data table widget for Safari browser. Graylog2/graylog2-server#7344Graylog2/graylog2-server#7353
- Fix two issues with saved search migration. Graylog2/graylog2-server#7362Graylog2/graylog2-server#7369
Graylog 3.2.0
Released: 2020-01-31
Core
Added
- Add configuration options for event index set prefixes. Graylog2/graylog2-server#6340Graylog2/graylog2-server#6350
- Add support for trailing comma characters in GELF input. Graylog2/graylog2-server#6325
- Add “apply” button to pipeline rule editor to improve editing workflow. Graylog2/graylog2-server#6312Graylog2/graylog2-server#6351 (Thanks @radykal-com!)
- Start infrastructure for UI theming.
- Support for percentile aggregations in the aggregation builder. Graylog2/graylog2-server#6597
- Add support for MaxMind ASN geo IP databases. Graylog2/graylog2-server#6623
- Introduce cluster global REST API browser button.
- Add heatmap visualization in aggregation builder. Graylog2/graylog2-server#6678
- Add area chart visualization to aggregation builder. Graylog2/graylog2-server#6893
- Add support for disabling the built-in root user. Graylog2/graylog2-server#6688
- Support for string list values in lookup tables. Graylog2/graylog2-server#6542
- Add pipeline functions to update string list values in lookup tables. Graylog2/graylog2-server#7189
- Bring back content pack auto-load. Graylog2/graylog2-server#5744Graylog2/graylog2-server#6096
- Add scratchpad for short notes. Graylog2/graylog2-server#6492
- Add content pack support for searches. Graylog2/graylog2-server#6973
- Add support for multiple conditions in event and alert aggregations. Graylog2/graylog2-server#6353Graylog2/graylog2-server#6879
- Configuration option to enforce system wide TLS protocol settings. Graylog2/graylog2-server#6444Graylog2/graylog2-server#7130
- Support for multiple dashboard tabs.
- Automatic tab rotation on dashboards in TV/full-screen mode.
- Add
gl2_accounted_message_size
field to every message to help with accounting license traffic. Graylog2/graylog2-server#6838Graylog2/graylog2-server#7187 - Remember event/alert display settings in event/alerts overview page. Graylog2/graylog2-server#6796Graylog2/graylog2-server#7221
- Add support for dumping the current process buffer state to help debugging slow processing. Graylog2/graylog2-server#7199
- Add
elasticsearch_discovery_default_scheme
config file setting to improve Elasticsearch node discovery. Graylog2/graylog2-server#6280Graylog2/graylog2-server#6315 (Thanks @radykal-com!) - Allow customization of colors in visualizations.
- Add global filter and timerange override for dashboards. Graylog2/graylog2-server#6424Graylog2/graylog2-server#6445
Changed
- Improve navigation display on small screens. Graylog2/graylog2-server#6329
- Introduce abstraction for bootstrap UI components. Graylog2/graylog2-server#6385
- Improve log level configuration to include more log classes. Graylog2/graylog2-server#6423
- Improve event notification test button. Graylog2/graylog2-server#6522
- Don’t show event streams in pipeline configuration. Graylog2/graylog2-server#6454Graylog2/graylog2-server#6513
- Migrated legacy dashboards into new dashboards.
- Migrated legacy saved searches into new search bookmarks.
- Improve lookup cache error handling. Graylog2/graylog2-server#6295Graylog2/graylog2-server#6518
- Migrate “Sources” page into a dashboard. Graylog2/graylog2-server#7024
Removed
- Remove unused search-type implementations. Graylog2/graylog2-server#6438
- Sources page has been removed and converted into a dashboard. Graylog2/graylog2-server#7024
Fixed
- Fix sorting issue on inputs page. Graylog2/graylog2-server#5921 (Thanks @radykal-com!)
- Fix issue creating database indices for processin status. Graylog2/graylog2-server#6322Graylog2/graylog2-server#6333
- Fix server shutdown problem with message generator input. Graylog2/graylog2-server#6305
- Fix issue loading views. Graylog2/graylog2-server#6346Graylog2/graylog2-server#6352
- Fix display issues with auto-completion in search bar. Graylog2/graylog2-server#6461
- Fix issue with compound index field types. Graylog2/graylog2-server#6313Graylog2/graylog2-server#6462
- Fix issues with field highlighting. Graylog2/graylog2-server#6511Graylog2/graylog2-server#6512
- Fix race condition in index management. Graylog2/graylog2-server#6383Graylog2/graylog2-server#6634
- Fix issue with event notification backlog seeting display. Graylog2/graylog2-server#6580
- Fix sorting in streams selection in search. Graylog2/graylog2-server#6514Graylog2/graylog2-server#6655
- Fix issue with managing event index set templates. Graylog2/graylog2-server#6507Graylog2/graylog2-server#6656
- Fix issue reloading changed GROK patterns in a cluster setup. Graylog2/graylog2-server#6666
- Fix pipeline rule parsing error. Graylog2/graylog2-server#6716
- Fix UI problem modifying pipeline stages. Graylog2/graylog2-server#5896Graylog2/graylog2-server#6743
- Fix issue with object validation in REST API. Graylog2/graylog2-server#5402
- Fix timestamp data type issue with COMMONAPACHELOG GROK pattern. Graylog2/graylog2-server#1647Graylog2/graylog2-server#6847
- Fix issue with pipelines and the default stream in content packs. Graylog2/graylog2-server#6873 (Thanks @pschichtel!)
- Improve REST API browser documentation. Graylog2/graylog2-server#6955
- Fix event aggregation issues with empty fields. Graylog2/graylog2-server#6933Graylog2/graylog2-server#7070
- Fix issue with upsert database operations. Graylog2/graylog2-server#7258Graylog2/graylog2-server#7259
- Fix issue in DNS adapter that could cause message processing stalls. Graylog2/graylog2-server#5782Graylog2/graylog2-server#7325
Integrations Plugin
Added
- Add IPFIX input plugin.
Graylog 3.1.4
Released: 2020-01-14
Core
Added
- Add URL whitelist service to make sure that lookup data adapters and event notifications cannot use arbitrary URLs. Attention: The URL whitelist is enabled by default! On the first server startup after the upgrade, the URL whitelist service will automatically generate whitelist entries for existing lookup data adapters and event notifications. See URL whitelist documentation for details.
Changed
- Reduce amount of log messages when job scheduler is disabled on a node. Graylog2/graylog2-server#6451Graylog2/graylog2-server#6816
Fixed
- Fix global API browser link. Graylog2/graylog2-server#6823Graylog2/graylog2-server#6826
- Ensure that aggregation events always have a
source_streams
field for permission checks. Graylog2/graylog2-server#6876Graylog2/graylog2-server#6877 - Fix caching issue with
route_to_stream
pipeline function. Graylog2/graylog2-server#4954Graylog2/graylog2-server#6788 - Fix issue with calculating index ranges. Graylog2/graylog2-server#6828Graylog2/graylog2-server#6957Attention: If you are affected by Graylog2/graylog2-server#6828, you have to manually recalculated index ranges for all your index sets.
- Improve API browser for event resources. Graylog2/graylog2-server#6742Graylog2/graylog2-server#6955
- Fix message indexing issue that could potentially stop message indexing completely. Graylog2/graylog2-server#5091Graylog2/graylog2-server#6965Graylog2/graylog2-server#7071
Integrations Plugin
Added
- Add support for automatic authentication scheme for the AWS Kinesis integration. (environment variables, Java properties, instance roles) Graylog2/graylog-plugin-integrations#264Graylog2/graylog-plugin-integrations#279
- Add “assume role” support for AWS Kinesis integration. Graylog2/graylog-plugin-integrations#264Graylog2/graylog-plugin-integrations#279
Fixed
- Fix rate limit issue with AWS Kinesis streams. Graylog2/graylog-plugin-integrations#341Graylog2/graylog-plugin-integrations#342
Graylog 3.1.3
Released: 2019-11-06
Core
Added
- Add test button to allow testing of event notifications. Graylog2/graylog2-server#6138Graylog2/graylog2-server#6549
- Add support for MaxMind ASN database type in lookup tables. Graylog2/graylog2-server#6631
- Add
metric_counter_inc
pipeline function. Graylog2/graylog2-server#6644 - Add
length
pipeline function. Graylog2/graylog2-server#6645 - Add
traffic_accounting_size
pipeline function. Graylog2/graylog2-server#6646 - Implement pipeline rule timers to help debugging slow rules. Graylog2/graylog2-server#5494Graylog2/graylog2-server#6680
Changed
- Hide event streams from pipelines because events are currently not supported in pipeline rules. Graylog2/graylog2-server#6454Graylog2/graylog2-server#6545
- Increase default connection limits for Elasticsearch connections. Graylog2/graylog2-server#4637Graylog2/graylog2-server#6679
Fixed
- Fix problem with message highlighting. Graylog2/graylog2-server#6511Graylog2/graylog2-server#6526
- Improve event and alert processing on nodes with low ingest rates. Graylog2/graylog2-server#6453Graylog2/graylog2-server#6548
- Remove event streams from global search to fix custom sorting issue. Graylog2/graylog2-server#6384Graylog2/graylog2-server#6544
- Fix event processing on nodes with a disabled journal. Graylog2/graylog2-server#6449Graylog2/graylog2-server#6547
- Fix UI problem with select components. Graylog2/graylog2-server#6554
- Fix problem adding multiple percentile aggregations in views. Graylog2/graylog2-server#6597Graylog2/graylog2-server#6638
- Fix API browser links in setups with multiple nodes. Graylog2/graylog2-server#2360Graylog2/graylog2-server#5920Graylog2/graylog2-server#6636
- Fix display of backlog size for legacy event notification plugins. Graylog2/graylog2-server#6647
- Fix issue with MongoDB index creation. Graylog2/graylog2-server#6383Graylog2/graylog2-server#6643
- Fix stream permission checks for view searches. Graylog2/graylog2-server#6651
- Fix stream sorting in streams filter option in views. Graylog2/graylog2-server#6514Graylog2/graylog2-server#6657
- Fix problem with event index set migration. Graylog2/graylog2-server#6507Graylog2/graylog2-server#6662Graylog2/graylog2-server#6674
- Ensure Grok pattern reloading on bulk pattern import. Graylog2/graylog2-server#6673
- Fix error handling in pipeline parser. Graylog2/graylog2-server#6696Graylog2/graylog2-server#6731
Integrations Plugin
Fixed
- Fix checkpointing AWS Kinesis streams. Graylog2/graylog-plugin-integrations#286Graylog2/graylog-plugin-integrations#294
Graylog 3.1.2
Released: 2019-09-12
Core
Fixed
- Cannot read property ‘query’ of undefined when replaying search Graylog2/graylog2-server#6355
- Cannot focus input fields in modal form (Dashboard) Graylog2/graylog2-server#6356
- Server start fails with Index with name: compound_0 already exists with a different name Graylog2/graylog2-server#6383
- Alerting not working if cluster contains nodes with no active inputs Graylog2/graylog2-server#6415
Graylog 3.1.1
Released: 2019-09-04
Core
Fixed
- Error when loading a view. Graylog2/graylog2-server#6346
- Fix server startup issue resulting from long index name. Graylog2/graylog2-server#6322
Integrations Plugin
Added
- Add a new AWS Kinesis/CloudWatch Input to Graylog, which guides the user through the setup process and performs checks along the way. It also supports an automated CloudWatch Logs to Kinesis Streams setup which helps to automate much of the complicated manual setup.
Graylog 3.1.0
Released: 2019-08-16
Views & Extended Search
- This feature was partially (everything besides support for parameters in queries) open-sourced in this version. Formerly it was accessible only through the commercial enterprise plugin.
- The API prefix for the views/extended search endpoints has changed from
/api/plugins/org.graylog.plugins.enterprise/(views|search)
to/api/views
&/api/views/search.
- The configuration file directive specifying the maximum age of an unreferenced search object before it is
purged
has changed from
enterprise_search_maximum_search_age
toviews_maximum_search_age.
Core
Added
- Add
GracefulShutdownService
Java API to allow plugins to participate in a graceful server shutdown. Graylog2/graylog2-server#5738 - Add
MessageOutput.Factory2
Java API to allow writing output plugins that receive the output instance ID. Graylog2/graylog2-server#5670 - Add metrics for Sidecar API resources. Graylog2/graylog2-server#5632
- Add new pipeline rule function
grok_exists
to check for the existence of Grok patterns. Graylog2/graylog2-server#5699Graylog2/graylog2-server#5689 - Allow the
group.id
setting in a Kafka input to be configured by users. Graylog2/graylog2-server#5867Graylog2/graylog2-server#3976 (Thank you @pdepaepe) - Add “show documents for value” field value action to views.
- Add automatic refresh feature to views search.
- Add support for extractor creation links to views.
- Add support for highlighting terms in message search results in views.
- Allow user defined granularity for auto interval time-bucketing in views.
- Add views action to duplicate query tabs. (including widgets)
- Make message fields in views message list sortable.
- Add support for stacked bar charts in views.
- Make colors in view charts configurable.
- Add support for percentile metrics in views.
- Add syntax highlighting for pipeline rule editor. Graylog2/graylog2-server#5957
- Add new alerts and events system.
- Add default events and system events streams. Graylog2/graylog2-server#6089Graylog2/graylog2-server#6085
- Add default
gl2_message_id
field for each new message. Graylog2/graylog2-server#6074Graylog2/graylog2-server#5994 - Add experimental JDK 11 support. Graylog2/graylog2-server#5909 (please don’t use in production, yet)
- Add default filebeat collector config for Windows. Graylog2/graylog2-server#6287Graylog2/collector-sidecar#350
Changed
- Add a high-resolution logo and favicon and optimize all image files. Graylog2/graylog2-server#5748
- Improve autogenerated UI elements for boolean fields. Graylog2/graylog2-server#5678
- Make modal dialogs only close with ESC key, Cancel and “X” buttons. They don’t close anymore when users click outside of the modal content. Graylog2/graylog2-server#5823
- Improve error messages when updating Grok patterns. Graylog2/graylog2-server#5629
- Improve error messages for search errors. Graylog2/graylog2-server#5681
- Improve navigation bar layout. Graylog2/graylog2-server#6001
- Improve views query autocompletion suggestions.
- Move Save/Cancel buttons in views widget edit mode.
- Use dynamic pager in views message lists. Graylog2/graylog2-server#6090
- Set default value for email sender to empty value. Graylog2/graylog2-server#5981 (Thank you @bjoernhaeuser)
- Improve stream router engine performance. Graylog2/graylog2-server#6170
- Avoid logging excessive exceptions when other Graylog nodes are not reachable via https. Graylog2/graylog2-server#6229
- Darken disabled inputs on the inputs page, making it easier to see when an input is disabled. Graylog2/graylog2-server#6257
Removed
- Remove “show documents” action for message widgets.
- Remove old stream alerts system. (replaced by new alerts and events system, including automatic alerts migration)
Fixed
- Fix slow loading API and UI after server startup. Graylog2/graylog2-server#5669
- Fix API path prefixing to allow running Graylog with a sub-path again. Graylog2/graylog2-server#5703Graylog2/graylog2-server#5702
- Fix issue with dashboard data migration. Graylog2/graylog2-server#5751Graylog2/graylog2-server#5737
- Add wildcard support to search page query parser. Graylog2/graylog2-server#5730Graylog2/graylog2-server#5719
- Fix “Expect: 100-Continue” handling in inputs. Graylog2/graylog2-server#5725Graylog2/graylog2-server#5690
- Fix input keep-alive handling. Graylog2/graylog2-server#5728Graylog2/graylog2-server#5720
- Fix Grok pattern handling with
OR
patterns. Graylog2/graylog2-server#5749Graylog2/graylog2-server#4773 - Fix issues with Cisco ASA NetFlow handling. Graylog2/graylog2-server#5729Graylog2/graylog2-server#5715
- Fix support for underscores (
_
) in Grok pattern match group names. Graylog2/graylog2-server#5800Graylog2/graylog2-server#5704Graylog2/graylog2-server#5563 - Fix auto-completion in several drop-down fields across the UI. Graylog2/graylog2-server#5665Graylog2/graylog2-server#5659
- Fix problem with loading the extractors page in the UI. Graylog2/graylog2-server#5954Graylog2/graylog2-server#5948
- Fix links on stream outputs page. Graylog2/graylog2-server#5953Graylog2/graylog2-server#5952
- Fix edit mode of message widget in views.
- Don’t refresh view query when changing query tabs.
- Copy widget filter when creating statistics widget for a field in views.
- Support nested maps in lists for content packs. Graylog2/graylog2-server#6003Graylog2/graylog2-server#5742
- Reload changed Grok patterns in Grok extractor. Graylog2/graylog2-server#5982Graylog2/graylog2-server#5833
- Fix support for TLS trusted certificate directories in inputs. Graylog2/graylog2-server#5958Graylog2/graylog2-server#5939
- Fix plugin UI routes when running the web interface with a sub-path. Graylog2/graylog2-server#6150Graylog2/graylog2-server#6149
- Fix rendering of events in single message view. Graylog2/graylog2-server#6156Graylog2/graylog2-server#6142
- Fix rendering of LDAP page. Graylog2/graylog2-server#6249Graylog2/graylog2-server#6247
- Fix pagination issue with newer JDKs. Graylog2/graylog2-server#6256Graylog2/graylog2-server#6254
- Fix issue with UDP based inputs becoming unresponsive. Graylog2/graylog2-server#6263Graylog2/graylog2-server#5701
Graylog 3.0.2
Released: 2019-05-03
Integrations Plugin
- Fix issue handling quoted values in PaloAlto input Graylog2/graylog-plugin-integrations#15Graylog2/graylog-plugin-integrations#16
Graylog 3.0.1
Released: 2019-04-01
Core
- Fix dashboard position migration. Graylog2/graylog2-server#5737Graylog2/graylog2-server#5763
- Fix 100 handling in inputs. Graylog2/graylog2-server#5690Graylog2/graylog2-server#5725
- Fix input keep-alive handling. Graylog2/graylog2-server#5720Graylog2/graylog2-server#5728
- Fix running Graylog web interface under a path prefix. Graylog2/graylog2-server#5702Graylog2/graylog2-server#5703
- Fix issue with wildcards in the search query parser when running with newer Elasticsearch versions. Graylog2/graylog2-server#5719Graylog2/graylog2-server#5766
- Fix Grok patterns that use “OR” to not return “null” values. Graylog2/graylog2-server#4773Graylog2/graylog2-server#5749
- Fix NetFlow parsing for Cisco ASA devices. Graylog2/graylog2-server#5715Graylog2/graylog2-server#5729
- Fix Grok patterns to support underscores in match group names again. Graylog2/graylog2-server#5704Graylog2/graylog2-server#5563Graylog2/graylog2-server#5800
- Document password escaping issue for the MongoDB connection URL. Graylog2/graylog2-server#5680Graylog2/graylog2-server#5764
Integrations Plugin
- Fix input parsing problem in PaloAlto input. Graylog2/graylog-plugin-integrations#10Graylog2/graylog-plugin-integrations#11
Threatintel Plugin
- Fix problem with content pack migration. Graylog2/graylog-plugin-threatintel#123
Graylog 3.0.0
Released: 2019-02-14
- Announcement blog post: https://www.graylog.org/post/announcing-graylog-v3-0-ga
- Upgrade notes: Upgrading to Graylog 3.0.x
A detailed changelog is following soon!
Graylog 2.5.2
Released: 2019-03-15
Core
- Mask password fields of inputs returned by the REST API. Graylog2/graylog2-server#5432Graylog2/graylog2-server#5733
Integrations Plugin
- Fix input parsing problem in PaloAlto input. Graylog2/graylog-plugin-integrations#10Graylog2/graylog-plugin-integrations#11
Graylog 2.5.1
Released: 2018-12-19
Core
- Improve description of
web_endpoint_uri
ingraylog.conf
. Graylog2/graylog2-server#5359 - Add CSRF backward compatibility for older Sidecars. Graylog2/graylog2-server#5388Graylog2/graylog2-server#4987
AWS Plugin
- Remove low limit for GZIP decompression of AWS events. Graylog2/graylog-plugin-aws#98
Pipeline Processor Plugin
- Fix IPv6 handling in IPv4
cidr_match
pipeline function. Graylog2/graylog-plugin-pipeline-processor#254Graylog2/graylog2-server#5405
Graylog 2.5.0
Released: 2018-11-30
Core
- Improve CSRF protection by requiring a custom header for non-GET requests sent to the API. (requires sidecar 0.1.7) Graylog2/graylog2-server#4998Graylog2/graylog2-server#5012Graylog2/graylog2-server#5182
- Improve alert conditions by making the query string configurable. Graylog2/graylog2-server#5277Graylog2/graylog2-server#3966
- Improve alert overview for streams. Graylog2/graylog2-server#5311
- Add test button for alert conditions. Graylog2/graylog2-server#5322
- Add DNS lookup adapter that supports foward and reverse lookups. Graylog2/graylog2-server#5274Graylog2/graylog2-server#4200Graylog2/graylog2-server#5124Graylog2/graylog-plugin-threatintel#64
- Add support for Elasticsearch 6.x. Graylog2/graylog2-server#5020Graylog2/graylog2-server#5064
- Update time zone database for the web interface. Graylog2/graylog2-server#5260Graylog2/graylog2-server#5245
- Fix description and default values for the DSV lookup table adapter. Graylog2/graylog2-server#4973@zionio
- Fix slow and unreliable CSV export by using a bigger default batch size. Graylog2/graylog2-server#5172Graylog2/graylog2-server#5304
- Fix index stats in index set overview. Graylog2/graylog2-server#5306
- Fix security issue with the users API where regular users could retrieve details of other users. Graylog2/graylog2-server#5308Graylog2/graylog2-server#5068@radykal-com
- Fix backslash escaping for phrase searches. Graylog2/graylog2-server#5314Graylog2/graylog2-server#4111Graylog2/graylog2-server#5266
Integrations Plugin
- Add Palo Alto input
AWS Plugin
- Add throttling support to the AWS Flow Logs input. Graylog2/graylog-plugin-aws#94Graylog2/graylog-plugin-aws#85
- Improve logging for the CloudTrail input. Graylog2/graylog-plugin-aws#95Graylog2/graylog-plugin-aws#80
Pipeline Processor Plugin
- Fix key-value function to be more robust with splitting values. Graylog2/graylog-plugin-pipeline-processor#249Graylog2/graylog2-server#4920@radykal-com
- Add support for decimal IPv4 representation in the
to_ip
function. Graylog2/graylog-plugin-pipeline-processor#253Graylog2/graylog2-server#5268
Graylog 2.4.7
Released: 2019-03-01
Core
- Mask password fields of inputs returned by the REST API. Graylog2/graylog2-server#5408Graylog2/graylog2-server#5734
Graylog 2.4.6
Released: 2018-07-16
Core
- Unbreak input throttling by publishing throttle state again. Graylog2/graylog2-server#4850Graylog2/graylog2-server#4321
- Check for permission before terminating input. Graylog2/graylog2-server#4867Graylog2/graylog2-server#4858
- Require user to be authenticated to retrieve plugin list. Graylog2/graylog2-server#4868Graylog2/graylog2-server#4863
- Add missing permission checks. Graylog2/graylog2-server#4873Graylog2/graylog2-server#4861Graylog2/graylog2-server#4859
- UI fixes for index rotation strategy dropdown. Graylog2/graylog2-server#4826Graylog2/graylog2-server#4769
- XSS fix for typeahead components. Graylog2/graylog2-server#4904
- Fix potential NullPointerException in csv and maxmind data adapters. Graylog2/graylog2-server#4912Graylog2/graylog2-server#4748
- Add “https_non_proxy_hosts” configuration option. Graylog2/graylog2-server#4915Graylog2/graylog2-server#4905Graylog2/graylog2-server#4392
Graylog 2.4.5
Released: 2018-05-28
Core
- Improve proxy authentication to support more proxy server software. Graylog2/graylog2-server#4788Graylog2/graylog2-server#4790
- Fix an issue where the Elasticsearch URL credentials have been written to the Graylog log file. Graylog2/graylog2-server#4804Graylog2/graylog2-server#4806
- Fix issue with deleting dashboard widgets. Graylog2/graylog2-server#4525Graylog2/graylog2-server#4808
Graylog 2.4.4
Released: 2018-05-02
Core
- Fix issues with loading example message for extractor. Graylog2/graylog2-server#4553Graylog2/graylog2-server#4559
- Allow : character in password. Graylog2/graylog2-server/#4557
- Fix lookup table cache entry count metric. Graylog2/graylog2-server#4558
- Simplify plugin development for lookup table plugins. Graylog2/graylog2-server#4586Graylog2/graylog2-server#4587
- Fix security issue with unescaped text in notification and dashboard names. Graylog2/graylog2-server#4727Graylog2/graylog2-server#4739
- Improve high-availability behavior with missing Elasticsearch nodes. Graylog2/graylog2-server#4738
- Fix issue with updating saved searches. Graylog2/graylog2-server#2285Graylog2/graylog2-server#4743
- Fix issue assigning stream outputs to the default stream. Graylog2/graylog2-server#4747Graylog2/graylog2-server#4754
- Improve rendering of input configuration forms. Graylog2/graylog2-server#4755Graylog2/graylog2-server#4745 by @Al2Klimov
- Add code to allow proxy authentication in
https_proxy_uri
config option. Graylog2/graylog2-server#4594Graylog2/graylog2-server#4758
ThreatIntel Plugin
- Fix issue with missing threat names in lookup results. Graylog2/graylog-plugin-threatintel#99 by @pbr0ck3r
AWS Plugin
- Support new AWS regions. Graylog2/graylog-plugin-aws#71Graylog2/graylog-plugin-aws#73Graylog2/graylog-plugin-aws#75
Graylog 2.4.3
Released: 2018-01-24
https://www.graylog.org/blog/108-announcing-graylog-v2-4-3
Core
- Fix timezone issue when using the timestamp field in quick values. Graylog2/graylog2-server#4519Graylog2/graylog2-server#4509
Graylog 2.4.2
Released: 2018-01-24
Core
- Fix issue with creating dashboards as non-admin user. Graylog2/graylog2-server#4505Graylog2/graylog2-server#4511
- Fix edge case in recent message loader for extractors. Graylog2/graylog2-server#4513Graylog2/graylog2-server#4510
- Fix formatting issue when using quick values on the timestamp field. Graylog2/graylog2-server#4423Graylog2/graylog2-server#4288
- Fix issue with handling the timestamp field in stacked quick value widgets. Graylog2/graylog2-server#4516Graylog2/graylog2-server#4509
Threatintel Plugin
- Fix README.md about
tor_lookup()
function. Graylog2/graylog2-server#86
Graylog 2.4.1
Released: 2018-01-19
https://www.graylog.org/blog/107-announcing-graylog-v2-4-1
Core
- Fix SyslogCodecTest.testCiscoSyslogMessages. Graylog2/graylog2-server#4446
- Fix privileges for input start/stop operations. Graylog2/graylog2-server#4454Graylog2/graylog2-server#4455Graylog2/graylog2-server#4439
- Fix problem with Elasticsearch indexing over https. Graylog2/graylog2-server#4485Graylog2/graylog2-server#4232
- Fix web plugin compatibility problem. Graylog2/graylog2-server#4496
- Fix problem that didn’t allow a reader user to edit their own profile. Graylog2/graylog2-server#4488Graylog2/graylog2-server#4494Graylog2/graylog2-server#4442Graylog2/graylog2-server#4420
Pipeline Processor Plugin
- Fix pipeline interpreter log message by handing change event. Graylog2/graylog-plugin-pipeline-processor#235Graylog2/graylog-plugin-pipeline-processor#241
AWS Plugin
- Fix problem updating the AWS configuration in the UI. Graylog2/graylog-plugin-aws#58Graylog2/graylog-plugin-aws#60
- Add missing proxy configuration option to UI. Graylog2/graylog-plugin-aws#59Graylog2/graylog-plugin-aws#61
Threatintel Plugin
- Fix
otx_lookup_domain
pipeline function. Graylog2/graylog-plugin-threatintel#83Graylog2/graylog2-server#4489
Graylog 2.4.0
Released: 2017-12-22
https://www.graylog.org/blog/106-announcing-graylog-v2-4-0
No changes since 2.4.0-rc.2.
Graylog 2.4.0-rc.2
Released: 2017-12-20
Core
- Fixed node-id validator problem by removing the validator for now. Graylog2/graylog2-server#4433
Graylog 2.4.0-rc.1
Released: 2017-12-19
https://www.graylog.org/blog/105-announcing-graylog-v2-4-0-rc-1
Core
- Fix problem with new node-id file check that got introduced in 2.4.0-beta.4. Graylog2/graylog2-server#4428 # 4427
Threatintel Plugin
- Improve Whois data adapter to always use the ARIN registry for now. Graylog2/graylog2-server#78 76
- Fix object comparison in Whois data adapter. Graylog2/graylog2-server#69
Graylog 2.4.0-beta.4
Released: 2017-12-15
Core
- Improve httpsJSONPath lookup table data adapter UI. Graylog2/graylog2-server#4406
- Add and use ExternalLink and ExternalLinkButton components. Graylog2/graylog2-server#4414
- Improve UI components when user lacks permissions. Graylog2/graylog2-server#4416Graylog2/graylog2-server#4407
- Fix output traffic graph on “System/Overview”. Graylog2/graylog2-server#4418Graylog2/graylog2-server#4395
- Improve query suggestions for field existence. Graylog2/graylog2-server#4422Graylog2/graylog2-server#4362
- Check node-id file permissions and improve error messages. Graylog2/graylog2-server#4417Graylog2/graylog2-server#4410
Pipeline Processor Plugin
- Fix problem with
null
values in theselect_jsonpath
function. Graylog2/graylog-plugin-pipeline-processor#233Graylog2/graylog-plugin-pipeline-processor#232
Threatintel Plugin
- Fix several issues with OTX and Whois data adapters. Graylog2/graylog-plugin-threatintel#75
Anonymous Usage-Stats Plugin
- The plugin got removed.
Graylog 2.4.0-beta.3
Released: 2017-12-04
Core
- Improve documentation for outputbuffer settings. Graylog2/graylog2-server#4331
- Improve QuickValues stacking. Graylog2/graylog2-server#4343
- Improve auth providers UI. Graylog2/graylog2-server#4347
- Add pluggable global notification area to page. Graylog2/graylog2-server#4353Graylog2/graylog2-server#4389Graylog2/graylog2-server#4393
- Fix changing the default index set from the UI. Graylog2/graylog2-server#4377
- Add global traffic counter to system overview page. Graylog2/graylog2-server#4357
- Remove anonymous usage-stats plugin. Graylog2/graylog2-server#4349
AWS Plugin
- Add “logGroup” and “logStream” attributes to flow log and raw log codecs. Graylog2/graylog-plugin-aws#55Graylog2/graylog-plugin-aws#54
CEF Plugin
- Upgrade to CEF parser 0.0.1.10. Graylog2/graylog-plugin-cef#23Graylog2/graylog-plugin-cef#24
Threatintel Plugin
- Fix lookup table used in
tor_lookup()
function. Graylog2/graylog-plugin-threatintel#71 - Fix lookup table used in
spamhaus_lookup_ip()
function. Graylog2/graylog-plugin-threatintel#73
Graylog 2.4.0-beta.2
Released: 2017-11-07
https://www.graylog.org/blog/104-announcing-graylog-v2-4-0-beta-2
Core
- Improve UI elements for field analyzers. Graylog2/graylog2-server#4280Graylog2/graylog2-server#4230
- Add upgrade notes for new plugins. Graylog2/graylog2-server#4187
- Fix query button in QuickValues widget. Graylog2/graylog2-server#4216Graylog2/graylog2-server#4278
- Improve QuickValues histogram data. Graylog2/graylog2-server#4312Graylog2/graylog2-server#4309
- Add loading indicator when reloading field chart data. Graylog2/graylog2-server#4319
- Add feedback on create widget modal. Graylog2/graylog2-server#4320Graylog2/graylog2-server#4318
- Improve robustness of QuickValues widget with stacked fields. Graylog2/graylog2-server#4322Graylog2/graylog2-server#4289Graylog2/graylog2-server#4287Graylog2/graylog2-server#4082
Graylog 2.4.0-beta.1
Released: 2017-10-20
https://www.graylog.org/blog/103-announcing-graylog-v2-4-0-beta-1
Core
- Ship NetFlow plugin by default. Graylog2/graylog2-server#4086
- Ship AWS plugin by default. Graylog2/graylog2-server#4085
- Ship Threat Intelligence plugin by default. Graylog2/graylog2-server#4084
- Ship CEF plugin by default. Graylog2/graylog2-server#4161
- Fix race condition in user session removal. Graylog2/graylog2-server#4041Graylog2/graylog2-server#3634Graylog2/graylog2-server#3948Graylog2/graylog2-server#3973
- Update web interface dependencies and fix deprecations. Graylog2/graylog2-server#4057Graylog2/graylog2-server#4059Graylog2/graylog2-server#4037Graylog2/graylog2-server#4192Graylog2/graylog2-server#4189
- Improve Elasticsearch query performance. Graylog2/graylog2-server#4056Graylog2/graylog2-server#4051
- Improve web UI performance by using React production mode. Graylog2/graylog2-server#4048
- Add possibility for server plugins to add database migrations. Graylog2/graylog2-server#4095
- Add support for custom headers in httpsJSONPath lookup table adapter. Graylog2/graylog2-server#4094
- Fix header size settings. Graylog2/graylog2-server#4128Graylog2/graylog2-server#4118
- Add
/system/indices/index_sets/{id}/stats
REST API endpoint to fetch stats for a single index set. Graylog2/graylog2-server#4129Graylog2/graylog2-server#4088 - Add DSV over data adapter for lookup tables. Graylog2/graylog2-server#4096
- Improve and update Elasticsearch testing infrastructure. Graylog2/graylog2-server#4125Graylog2/graylog2-server#4165
- Improve dashboard widget layout to show long widget titles. Graylog2/graylog2-server#4072@billmurrin
- Fix problem in GELF output by removing special handling of the
facility
. Graylog2/graylog2-server#4141Graylog2/graylog2-server#4140 - Expose
LdapUserAuthenticator#syncLdapUser()
method to allow usage from plugins. Graylog2/graylog2-server#4159@gaspardpetit - Fix problem with getting Elasticsearch stats. Graylog2/graylog2-server#4127Graylog2/graylog2-server#4119
- Fix Elasticsearch document counting with lots of indices. Graylog2/graylog2-server#4147Graylog2/graylog2-server#4136
- Fix link placement in multi select UI elements. Graylog2/graylog2-server#3911
- Fix problems when searching in lots of indices. Graylog2/graylog2-server#4149Graylog2/graylog2-server#4054Graylog2/graylog2-server#4168
- Fix config issues with stacked charts. Graylog2/graylog2-server#4151Graylog2/graylog2-server#4150
- Improve eslint rules for UI development. Graylog2/graylog2-server#4173
- Update serveral server dependencies. Graylog2/graylog2-server#4134
- Add config option to disable analysis features (such a QuickValues) for certain message fields. Graylog2/graylog2-server#4175Graylog2/graylog2-server#3957
- Improve message separator handling for TCP based inputs. Graylog2/graylog2-server#4106Graylog2/graylog2-server#4105
- Improve CSV lookup table adapter to use the same field for key and value. Graylog2/graylog2-server#4181Graylog2/graylog2-server#4177
- Add possibility to create charts for non-numeric fields to show cardinality and total counts. Graylog2/graylog2-server#4182Graylog2/graylog2-server#4083
- Improve widget and grid positioning and styling. Graylog2/graylog2-server#4160Graylog2/graylog2-server#4209
- Improve UI testing environment. Graylog2/graylog2-server#4162
- Improve error logging on indexing failures. Graylog2/graylog2-server#4195Graylog2/graylog2-server#4166
- Improve styling for highlighting checkbox in the search sidebar. Graylog2/graylog2-server#4201
- Fix problem with lookup table content pack import. Graylog2/graylog2-server#4197Graylog2/graylog-plugin-threatintel#57
- Add configuration options to QuickValue widget. Graylog2/graylog2-server#4205Graylog2/graylog2-server#4082Graylog2/graylog2-server#4259Graylog2/graylog2-server#4258
- Improve styling and positioning for search page widget buttons. Graylog2/graylog2-server#4219
- Improve permission handling to allow regular users to create dashboards. Graylog2/graylog2-server#4155
- Add stats summary for all index sets to the “System/Indices” page. Graylog2/graylog2-server#4211Graylog2/graylog2-server#4204
- Improve table layout in lookup table UI for entries with long descriptions. Graylog2/graylog2-server#4239Graylog2/graylog2-server#4172
- Fix permission check which was hiding a menu item in the UI. Graylog2/graylog2-server#4237Graylog2/graylog2-server#4234
- Fix error with message histogram selection. Graylog2/graylog2-server#4243Graylog2/graylog2-server#4214
- Add histogram option to QuickValue widget to show values over time. Graylog2/graylog2-server#4244Graylog2/graylog2-server#4082
- Fix permission handling for editing/deleting roles. Graylog2/graylog2-server#4265
- Fix some smaller lookup table issues. Graylog2/graylog2-server#4266
Map Widget plugin
- Improve rendering and styling for map widget. Graylog2/graylog-plugin-map-widget#53Graylog2/graylog-plugin-map-widget#54
- Improve styling and positioning for search page widget buttons. Graylog2/graylog-plugin-map-widget#56
Pipeline Processor plugin
- Add various Base encoding functions. (e.g. Base16, Base32, Base64) Graylog2/graylog-plugin-pipeline-processor#190
- Fix sorting of pipeline rules. Graylog2/graylog-plugin-pipeline-processor#208
- Fix
parse_json()
function on invalid input. Graylog2/graylog-plugin-pipeline-processor#210Graylog2/graylog-plugin-pipeline-processor#209 - Fix NullPointerException when parsing invalid rules. Graylog2/graylog-plugin-pipeline-processor#212Graylog2/graylog-plugin-pipeline-processor#211
- Improve documentation for lookup table function. Graylog2/graylog-plugin-pipeline-processor#217@supahgreg
- Fix numeric conversions with
to_double()
andto_long()
. Graylog2/graylog-plugin-pipeline-processor#219 - Improve rule function documentation in editor by sorting functions alphabetically by name. Graylog2/graylog-plugin-pipeline-processor#222
- Add
remove_from_default
option toroute_to_stream()
function. Graylog2/graylog-plugin-pipeline-processor#220 - Add
remove_from_stream()
function. Graylog2/graylog-plugin-pipeline-processor#220
Collector plugin
- Add
exclude_files
configuration option for filebeat collectors. Graylog2/graylog-plugin-collector#63@silenceper
AWS plugin
- Fix problem with parsing SNS notification messages. Graylog2/graylog-plugin-aws#47Graylog2/graylog-plugin-aws#44
- Add support for overriding the
source
field for all input types. Graylog2/graylog-plugin-aws#46 - Add support for cross account role based authentication. Graylog2/graylog-plugin-aws#49Graylog2/graylog-plugin-aws#48@radykal-com
CEF plugin
- Improve CEF parser and add proper testing infrastructure.
- Fix problems with Kafka and AMQP inputs.
NetFlow plugin
- Improved NetFlow v9 support. Graylog2/graylog-plugin-netflow#21
Threat Intelligence plugin
- Convert plugin to use the lookup table system. Graylog2/graylog-plugin-threatintel#48
- Fix problem with absent OTX API key in plugin configuration. Graylog2/graylog-plugin-threatintel#54Graylog2/graylog-plugin-threatintel#53
- Improve pipeline function parameter consistency. Graylog2/graylog-plugin-threatintel#58
- Improve lookup table based data adapters. Graylog2/graylog-plugin-threatintel#63Graylog2/graylog-plugin-threatintel#61Graylog2/graylog-plugin-threatintel#59Graylog2/graylog-plugin-threatintel#67
Graylog 2.3.2
Released: 2017-10-19
https://www.graylog.org/blog/102-announcing-graylog-v2-3-2
Core
- Fix permission handling for editing/deleting roles. Graylog2/graylog2-server#4270Graylog2/graylog2-server#4254
- Fix CSV export when using lots of Elasticsearch index shards. Graylog2/graylog2-server#4269Graylog2/graylog2-server#4190
- Fix infinite redirect loop when accessing non-permitted resources/entities. Graylog2/graylog2-server#4139Graylog2/graylog2-server#4117
Graylog 2.3.1
Released: 2017-08-25
https://www.graylog.org/blog/100-announcing-graylog-v2-3-1
Core
- Fix NullPointerException for field stats. Graylog2/graylog2-server#4026Graylog2/graylog2-server#4045Graylog2/graylog2-server#4046
- Make GELF parser less strict. Graylog2/graylog2-server#4055
- Fix search requests with selected fields by using source filtering. Graylog2/graylog2-server#4069Graylog2/graylog2-server#4077Graylog2/graylog2-server#4068
- Add missing index for session_id in “sessions” MongoDB collection. Graylog2/graylog2-server#4070Graylog2/graylog2-server#4076
- Fix search errors when lots of indices will be used. Graylog2/graylog2-server#4062Graylog2/graylog2-server#4078Graylog2/graylog2-server#4054
- Upgrade to Jest 2.4.7+jackson. Graylog2/graylog2-server#4107
- Fix search term highlighting. Graylog2/graylog2-server#4108Graylog2/graylog2-server#4101
Pipeline Processor Plugin
- Make
locale
parameter ofparse_date()
optional. Graylog2/graylog-plugin-pipeline-processor#202
Graylog 2.3.0
Released: 2017-07-26
https://www.graylog.org/blog/98-announcing-graylog-v2-3-0
Core
- Fix remote address field for GELF UDP inputs. Graylog2/graylog2-server#3982Graylog2/graylog2-server#3988Graylog2/graylog2-server#3980
- Improve error messages for rotation strategies. Graylog2/graylog2-server#3995Graylog2/graylog2-server#3990
- Fix legend for stacked charts. Graylog2/graylog2-server#4010Graylog2/graylog2-server#3996
- Fix size based index rotation strategy. Graylog2/graylog2-server#4011Graylog2/graylog2-server#4008Graylog2/graylog2-server#3997
- Implement retry handling for failed Elasticsearch requests. Graylog2/graylog2-server#4012Graylog2/graylog2-server#3993
- Fix NullPointerException in ExceptionUtils. Graylog2/graylog2-server#4014Graylog2/graylog2-server#4003
- Avoid noisy stack traces when Elasticsearch is not available. Graylog2/graylog2-server#3934Graylog2/graylog2-server#3861
- Do not run SetIndexReadOnlyAndCalculateRangeJob if index is closed. Graylog2/graylog2-server#3931Graylog2/graylog2-server#3909
- Fix issues when updating users and user roles. Graylog2/graylog2-server#3942Graylog2/graylog2-server#3918
- Improved IPv6 support. Graylog2/graylog2-server#3926Graylog2/graylog2-server#3870
- Fix login code to unbreak SSO plugin. Graylog2/graylog2-server#3973Graylog2/graylog2-server#3948
- Allow case-insensitive lookups for CSV lookup data adapter. Graylog2/graylog2-server#3971Graylog2/graylog2-server#3961
- Allow manual lookup table cache purge via UI and API. Graylog2/graylog2-server#3967Graylog2/graylog2-server#3962
- Mark Message class as not thread-safe. Graylog2/graylog2-server#3978Graylog2/graylog2-server#3876
- Fail fast and loud for invalid GELF messages. Graylog2/graylog2-server#3972Graylog2/graylog2-server#3970
- Add support for automatic Elasticsearch node discovery. Graylog2/graylog2-server#3805
- Fix DateHistogram-related functionality in Searches class. Graylog2/graylog2-server#3806
- Hide update spinner with auto-update interval <=5s. Graylog2/graylog2-server#3738Graylog2/graylog2-server#3723@billmurrin
- Small spelling/documentation fixes. Graylog2/graylog2-server#3817
- Fix pagination and offset/total hits in Searches. Graylog2/graylog2-server#3821Graylog2/graylog2-server#3813
- Add sort order to terms API call. Graylog2/graylog2-server#3829
- Don’t start stopped inputs after updating them. Graylog2/graylog2-server#3824Graylog2/graylog2-server#3479
- Allow specifying locale for Date converter. Graylog2/graylog2-server#3820
- Hide “Delete from stream” button if stream is undefined. Graylog2/graylog2-server#3822
- Don’t reload errorstates on pages that don’t need them. Graylog2/graylog2-server#3839Graylog2/graylog2-server#3834
- Emit StreamsChangedEvent and StreamDeletedEvent in BundleImporter. Graylog2/graylog2-server#3848Graylog2/graylog2-server#3842
- Add Lookup Table search result decorator. Graylog2/graylog2-server#3852Graylog2/graylog2-server#3844
- Check Elasticsearch version when creating index template. Graylog2/graylog2-server#3862
- Add admin user to list of receivers in EmailAlarmCallback. Graylog2/graylog2-server#3864Graylog2/graylog2-server#3859
- Fix parameters for count query in
Searches#count()
. Graylog2/graylog2-server#3865Graylog2/graylog2-server#3841 - Add search system for objects in MongoDB Graylog2/graylog2-server#3877
- Make Kafka config setting
auto.offset.reset
configurable for input. Graylog2/graylog2-server#3743Graylog2/graylog2-server#3894@r4um - Use preemptive authentication for Elasticsearch if credentials are given. Graylog2/graylog2-server#3895Graylog2/graylog2-server#3907
- Add lookup adapter and cache config validation. Graylog2/graylog2-server#3836
- Unbreak elasticsearch duration config settings. Graylog2/graylog2-server#3899
- Fix lookup table UI state problem. Graylog2/graylog2-server#3898
- Enable search for lookup tables, data adapters and caches. Graylog2/graylog2-server#3878
- Make Elasticsearch version injectable. Graylog2/graylog2-server#3896
- Refactor lifecycle for lookup adapters and caches. Graylog2/graylog2-server#3873
- Introduce setting for enabling ES request compression. Graylog2/graylog2-server#3901
- Add content pack import/export for lookup tables, caches and adapters. Graylog2/graylog2-server#3892
- Upgrade to Jackson 2.8.9. Graylog2/graylog2-server#3908
- Fix and centralize lookup adapter/cache error handling. Graylog2/graylog2-server#3905
- Switch RoleResponse to java.util.Optional to fix serialization. Graylog2/graylog2-server#3915
- Add lookup table/cache/adapter permissions. Graylog2/graylog2-server#3914
- Collect and show metrics for lookup caches and adapters. Graylog2/graylog2-server#3917
- Remove obsolete “disableExpensiveUpdates” user preference. Graylog2/graylog2-server#3922
- Migrate to Jackson-based release of Jest 2.4.5. Graylog2/graylog2-server#3925
- Use aliases for reopened indices. Graylog2/graylog2-server#3897
- Add default values for lookup tables. Graylog2/graylog2-server#3921
- Add support for updating extractors in InputService. Graylog2/graylog2-server#3910
- Fix index set overview with closed indices. Graylog2/graylog2-server#3930
- Don’t check ES cluster health when flushing messages. Graylog2/graylog2-server#3927
- Retrying bulk indexing in case of all IOExceptions. Graylog2/graylog2-server#3929Graylog2/graylog2-server#3941
- Add support for automatic Elasticsearch node discovery. Graylog2/graylog2-server#3805
- Fix DateHistogram-related functionality in Searches class. Graylog2/graylog2-server#3806
- Hide update spinner with auto-update interval <=5s. Graylog2/graylog2-server#3738Graylog2/graylog2-server#3723@billmurrin
- Small spelling/documentation fixes. Graylog2/graylog2-server#3817
- Fix pagination and offset/total hits in Searches. Graylog2/graylog2-server#3821Graylog2/graylog2-server#3813
- Add timing metrics to GelfOutput. Graylog2/graylog2-server#3810Graylog2/graylog2-server#3716
- Add sort order to terms API call. Graylog2/graylog2-server#3829
- Don’t start stopped inputs after updating them. Graylog2/graylog2-server#3824Graylog2/graylog2-server#3479
- Allow specifying locale for Date converter. Graylog2/graylog2-server#3820
- Hide “Delete from stream” button if stream is undefined. Graylog2/graylog2-server#3822
- Don’t reload errorstates on pages that don’t need them. Graylog2/graylog2-server#3839Graylog2/graylog2-server#3834
- Emit StreamsChangedEvent and StreamDeletedEvent in BundleImporter. Graylog2/graylog2-server#3848Graylog2/graylog2-server#3842
- Add Lookup Table search result decorator. Graylog2/graylog2-server#3852Graylog2/graylog2-server#3844
- Check Elasticsearch version when creating index template. Graylog2/graylog2-server#3862
- Add admin user to list of receivers in EmailAlarmCallback. Graylog2/graylog2-server#3864Graylog2/graylog2-server#3859
- Fix parameters for count query in
Searches#count()
. Graylog2/graylog2-server#3865Graylog2/graylog2-server#3841 - Allow version ‘0’ for structured syslog messages. Graylog2/graylog2-server#3503
- Ignore Content-Type in
httpsTransport
. Graylog2/graylog2-server#3508Graylog2/graylog2-server#3477 - Ensure that
index_prefix
is lower case. Graylog2/graylog2-server#3509Graylog2/graylog2-server#3476 - Make map in
MessageInput#asMap()
mutable. Graylog2/graylog2-server#3521Graylog2/graylog2-server#3515 - Fix pagination for alert conditions. Graylog2/graylog2-server#3529Graylog2/graylog2-server#3528
- Wait until alert notification types are loaded. Graylog2/graylog2-server#3537Graylog2/graylog2-server#3534
- Upgrade development environment to Webpack v2. Graylog2/graylog2-server#3460
- Add an option to repeat alert notifications again. Graylog2/graylog2-server#3536Graylog2/graylog2-server#3511
- Fix accidentally changed exports of
UsersStore
Graylog2/graylog2-server#3560Graylog2/graylog2-server#3556 - Properly escape username/roles in web interface. Graylog2/graylog2-server#3570Graylog2/graylog2-server#3569
- Improved dashboard grid system. Graylog2/graylog2-server#3575
- Add support for sorting by count to
Search#terms()
. Graylog2/graylog2-server#3540 (@billmurrin) - Fix for copy query button. Graylog2/graylog2-server#3548 (@billmurrin)
- Fix issue with cloning streams. Graylog2/graylog2-server#3615Graylog2/graylog2-server#3608
- Prevent session extension when polling system messages. Graylog2/graylog2-server#3632Graylog2/graylog2-server#3628
- Prevent session extension when polling system jobs. Graylog2/graylog2-server#3625Graylog2/graylog2-server#3587
- Prevent NPE due to race between rotation and retention threads. Graylog2/graylog2-server#3637Graylog2/graylog2-server#3494
- Fix problem with message decorators and field selection. Graylog2/graylog2-server#3585Graylog2/graylog2-server#3584
- Fix issue with loading indicator on an empty search result page. Graylog2/graylog2-server#3652Graylog2/graylog2-server#3650
- Fix navigation in LDAP users UI. Graylog2/graylog2-server#3651Graylog2/graylog2-server#3485
- Ensure that plugin RPMs will be built for Linux. Graylog2/graylog2-server#3658Graylog2/graylog2-server#3657
- Fix reloading problem with content packs and GROK patterns. Graylog2/graylog2-server#3621Graylog2/graylog2-server#3610
- Add support for Cisco and FortiGate Syslog messages. Graylog2/graylog2-server#3599
- Fix permission problem for inputs API. Graylog2/graylog2-server#3681
- Restore removal of role permissions upon roles update. Graylog2/graylog2-server#3683
- Comply with grace condition when repeat alert notifications is enabled. Graylog2/graylog2-server#3676Graylog2/graylog2-server#3579
- Invalidate dashboards data after logout. Graylog2/graylog2-server#3700Graylog2/graylog2-server#3693
- Fix OptionalStringValidator and validations for extractors. Graylog2/graylog2-server#3633Graylog2/graylog2-server#3630
- Better time range for “Show Received Messages” button on inputs page. Graylog2/graylog2-server#3725
- Remove deprecated rotation/retention configuration resources. Graylog2/graylog2-server#3724
- Introduce lookup tables feature. Graylog2/graylog2-server#3748
- Creating dashboard from search page does now select the right ID Graylog2/graylog2-server#3786Graylog2/graylog2-server#3785
- Fix importing of dashboards from content packs Graylog2/graylog2-server#3766Graylog2/graylog2-server#3765
Beats Plugin
- Spelling fixes. Graylog2/graylog-plugin-beats#22@jsoref
Collector Plugin
- Increase “Show messages” time range.
- Allow collectors list to be filtered by tags. Graylog2/graylog-plugin-collector#52
- UI and UX improvements. Graylog2/graylog-plugin-collector#55
- Fix configuration setting usage for collector heartbeat interval. Graylog2/graylog-plugin-collector#58
- Prevent unwanted session extension. Graylog2/graylog-plugin-collector#49
Map Widget Plugin
- Adjust to lookup cache and adapter changes in server. Graylog2/graylog-plugin-map-widget#48Graylog2/graylog-plugin-map-widget#50
- Fix refresh handling in error conditions. Graylog2/graylog-plugin-map-widget#49
- Fix HMR as in Graylog/graylog2-server#3591 Graylog2/graylog-plugin-map-widget#51
- Update to a new GeoIP2 release.
- Add lookup tables data adapter for the GeoIP2 database. Graylog2/graylog-plugin-map-widget#40
Pipeline Processor Plugin
- Improve robustness of
clone_message()
pipeline function. Graylog2/graylog-plugin-pipeline-processor#192Graylog2/graylog2-server#3880 - Fix pipline condition handling of “match all”/”match either”. Graylog2/graylog-plugin-pipeline-processor#193Graylog2/graylog2-server#3924
- Fix serialization/deserialization of pipeline StageSource. Graylog2/graylog-plugin-pipeline-processor#195Graylog2/graylog-plugin-pipeline-processor#194
- Improve error handling with invalid expressions. Graylog2/graylog-plugin-pipeline-processor#196Graylog2/graylog-plugin-pipeline-processor#185
- Spelling fixes. Graylog2/graylog-plugin-pipeline-processor#181@jsoref
- Add support for custom locale in
parse_date()
function. Graylog2/graylog-plugin-pipeline-processor#184Graylog2/graylog-plugin-pipeline-processor#183 - Smaller UI and UX changes. Graylog2/graylog-plugin-pipeline-processor#186
- New function: debug() Graylog2/graylog-plugin-pipeline-processor#188
- Allow snake-case access to bean objects Graylog2/graylog-plugin-pipeline-processor#189
- Improve lookup functions. Graylog2/graylog-plugin-pipeline-processor#191
- Spelling fixes. Graylog2/graylog-plugin-pipeline-processor#181@jsoref
- Use uppercase timezone in
TimezoneAwareFunction
and fix default value. Graylog2/graylog2-server#169Graylog2/graylog2-server#168 - Add
lookup
andlookup_value
pipeline functions for lookup table support. Graylog2/graylog2-server#177
Graylog 2.2.3
Released: 2017-04-04
https://www.graylog.org/blog/92-announcing-graylog-v2-2-3
Core
- Prevent unwanted session extension. Graylog2/graylog2-server#3583
- Properly escape username/roles in web interface. Graylog2/graylog2-server#3588
- Allow “-” in the path pattern for the index range rebuild endpoint. Graylog2/graylog2-server#3600
- Copy Query Button Fix. Graylog2/graylog2-server#3491
- Fixing slicing of alert notifications in pagination. Graylog2/graylog2-server#3619
- Fix cloning alert conditions with identical id when cloning stream. Graylog2/graylog2-server#3616
- Use UTC for embedded Date objects as well. Graylog2/graylog2-server#3626
- Prevent session extension for polling system messages. Graylog2/graylog2-server#3638
- Support replacing whitespace in nested keys for JSON extractor. Graylog2/graylog2-server#3623
- Prevent NPE due to race between rotation and retention threads. Graylog2/graylog2-server#3640
- Prevent session extension in SystemJobsStore. Graylog2/graylog2-server#3625
- Render loading indicator on no results page. Graylog2/graylog2-server#3667
- Using consistent collection of non displayable fields to filter against. Graylog2/graylog2-server#3668
- Ensure that plugin RPMs will be built for Linux. Graylog2/graylog2-server#3659
- Fix navigation in LDAP components. Graylog2/graylog2-server#3670
- Publish GrokPatternsChangedEvent when using content packs. Graylog2/graylog2-server#3621
- Add support for Cisco and FortiGate syslog messages. Graylog2/graylog2-server#3599
- Effectively change user permissions when listing inputs. Graylog2/graylog2-server#3682
- Restore removal of role permissions upon roles update. Graylog2/graylog2-server#3684
- Comply with grace condition when repeat alert notifications is enabled Graylog2/graylog2-server#3676
Pipeline Processor
- Use uppercase timezone in TimezoneAwareFunction and fix default value. Graylog2/graylog-plugin-pipeline-processor#169
Graylog 2.2.2
Released: 2017-03-03
https://www.graylog.org/blog/90-announcing-graylog-v2-2-2
Core
- Give an option to repeat alert notifications. Graylog2/graylog2-server#3511
- Wait until notification types are loaded. Graylog2/graylog2-server#3534
- Fixing slicing of alert conditions in pagination. Graylog2/graylog2-server#3528
- Fix command line help of the server jar. Graylog2/graylog2-server#3527
Graylog 2.2.1
Released: 2017-02-20
https://www.graylog.org/blog/89-announcing-graylog-v2-2-1
Core
- Allow version ‘0’ for structured syslog messages. Graylog2/graylog2-server#3502
- Ignore
Content-Type
inhttpsTransport
. Graylog2/graylog2-server#3477 - Ensure that
index_prefix
is lower case. Graylog2/graylog2-server#3476 - Add missing whitespace in SystemOutputsPage. Graylog2/graylog2-server#3505
Graylog 2.2.0
Released: 2017-02-14
https://www.graylog.org/blog/88-announcing-graylog-v2-2-0
Core
- Warn about pipeline stream routing Graylog2/graylog2-server#3472
- Add npm shrinkwrap for 2.2.0 Graylog2/graylog2-server#3468
- Use consistent case in old message count conditions Graylog2/graylog2-server#3454
- Fix stream filter view. Graylog2/graylog2-server#3390
- Use the default index set by default in stream create form. Graylog2/graylog2-server#3397
- Fix broken decorator with duplicate messages. Graylog2/graylog2-server#3400
- Updating index sets store when stream form is opened. Graylog2/graylog2-server#3410
- Only show extractor actions on string fields. Graylog2/graylog2-server#3404
- Use correct format when adding timestamp to search. Graylog2/graylog2-server#3412
- Properly escape strings sent to /messages/{index}/analyze. Graylog2/graylog2-server#3418
- Retain input and stream IDs in content packs. Graylog2/graylog2-server#3416
- Use “order”: -1 in default index template to allow override. Graylog2/graylog2-server#3422
- Improve base-line memory usage. Graylog2/graylog2-server#3425
- Use condition and notification placeholders. Graylog2/graylog2-server#3432
- Get field stats for indices only, which contain field. Graylog2/graylog2-server#3424
- Redirect to overview after editing index set configuration. Graylog2/graylog2-server#3438
- Send “stream” property when updating a decorator. Graylog2/graylog2-server#3439
- Adding simple cache for index sets in MongoIndexSetRegistry. Graylog2/graylog2-server#3440
- Restrict search in RecentMessageLoader to 1 hour. Graylog2/graylog2-server#3367
- Remove stray whitespace in MongoIndexSet. Graylog2/graylog2-server#3371
- Add more detail to index range system notification. Graylog2/graylog2-server#3372
- Suppress error notification when loading a potentially missing input. Graylog2/graylog2-server#3373
- Ensure resolved at is non-null on resolvedSecondsAgo. Graylog2/graylog2-server#3376
- Do not allow testing a message against the default stream. Graylog2/graylog2-server#3377
- Propagate shard failure in multi-index search to global search failure. Graylog2/graylog2-server#3379
- Add support for arrays to “contains” stream rule. Graylog2/graylog2-server#3380
- Automatically unsubscribe from DecoratorsStore in SearchPage. Graylog2/graylog2-server#3363
- Keep modified search bar params when opening modal. Graylog2/graylog2-server#3384
- Reset keyword content after changing range type. Graylog2/graylog2-server#3386
- Disable the “set as default” action for the default index set. Graylog2/graylog2-server#3385
- Unregistering component callbacks from Stream(Rules)Store. Graylog2/graylog2-server#3378
- Check for stream existence when displaying replay link. Graylog2/graylog2-server#3387
- Reuse Generator instance in DocumentationResource. Graylog2/graylog2-server#3293
- Fix: Refreshing saved searches store after deleting one. Graylog2/graylog2-server#3309
- Escape curly braces in Swagger resource URIs for challenged browsers. Graylog2/graylog2-server#3290
- Unbreak Firefox by requesting JSON when pinging the API Graylog2/graylog2-server#3312
- Escape search query when using surrounding search. Graylog2/graylog2-server#3314
- Close idle GELF connections after a timeout. Graylog2/graylog2-server#3315
- Ensure that index ranges are deleted when an index set is removed. Graylog2/graylog2-server#3310
- Ignore reopened indices for count-based retention strategies. Graylog2/graylog2-server#3321
- Ignore deprecated “default” field in IndexSetConfig. Graylog2/graylog2-server#3329
- Use last executed search data on auto-refresh. Graylog2/graylog2-server#3330
- Show stats for each index set on the index sets overview page. Graylog2/graylog2-server#3322
- Not fetching/checking unnecessary streams in AlertScannerThread. Graylog2/graylog2-server#3336
- Add more metrics for extractors. Graylog2/graylog2-server#3332
- Saved search improvements. Graylog2/graylog2-server#3338
- Warn when neither reader nor admin roles are selected for a user. Graylog2/graylog2-server#3337
- Prevent setting default index set readonly. Graylog2/graylog2-server#3339
- Add migration to fix parameter value types for alert conditions. Graylog2/graylog2-server#3340
- Fix unlock dashboard from link. Graylog2/graylog2-server#3344
- Allow re-configuration of shards and replicas in the UI. Graylog2/graylog2-server#3349
- Adapt grace period to latest changes in alerts. Graylog2/graylog2-server#3346
- Go back in history instead to users page when canceling user form. Graylog2/graylog2-server#3350
- Improve wrapping of entity title and description. Graylog2/graylog2-server#3351
- Keep stream filter after editing stream. Graylog2/graylog2-server#3352
- Guard against duplication key error from MongoDB. Graylog2/graylog2-server#3358
- Keep calling convention of SearchPage._refreshData consistent. Graylog2/graylog2-server#3357
- Creating MongoDB indices in services running conditional queries. Graylog2/graylog2-server#3345
- Fix NPE in MongoDbSessionDAO#doDelete(). Graylog2/graylog2-server#3227
- Support syslog messages with ISO-8601 timestamps. Graylog2/graylog2-server#3228
- Use local copies of Droid Sans font in Swagger UI. Graylog2/graylog2-server#3229
- Remove empty row if input description is empty. Graylog2/graylog2-server#3237
- Make “sender” optional in EmailAlarmCallback. Graylog2/graylog2-server#3224
- Fix URL for throbber image. Graylog2/graylog2-server#3242
- Remove special handling in SplitAndCountConverter. Graylog2/graylog2-server#3230
- Add missing AuditBindings to journal commands. Graylog2/graylog2-server#3226
- Don’t check private key/certificate if REST API and web interface on same port. Graylog2/graylog2-server#3231
- Add configuration settings for timeout and concurrency of OptimizeIndexJob. Graylog2/graylog2-server#3225
- Change way of exporting CSV search results. Graylog2/graylog2-server#3238
- Add space in processing limit notification. Graylog2/graylog2-server#3256
- Only recalculate index set ranges in index set maintenance menu. Graylog2/graylog2-server#3252
- Fix alert condition validations. Graylog2/graylog2-server#3257
- Validate alarm callbacks before saving them. Graylog2/graylog2-server#3262
- Only update index ranges for managed indices. Graylog2/graylog2-server#3259
- Resolve alerts from deleted alert conditions. Graylog2/graylog2-server#3265
- Alert UI changes. Graylog2/graylog2-server#3266
- Properly track stream throughput for the default stream. Graylog2/graylog2-server#3278
- Add support for OPTIONS request to httpsTransport. Graylog2/graylog2-server#3234
- Add list of stream IDs to Message#toElasticSearchObject(). Graylog2/graylog2-server#3277
- Fix document counts with an empty index set. Graylog2/graylog2-server#3291
- Handle ElasticsearchException in Counts class. Graylog2/graylog2-server#3288
- Move client-side split/import of Grok pattern files to server. Graylog2/graylog2-server#3284
- Showing index set in stream listing only if user is permitted to. Graylog2/graylog2-server#3300
- Fix reloading after notification changes. Graylog2/graylog2-server#3264
- Add “messages:analyze” permission to reader permission set. Graylog2/graylog2-server#3305
- Disable alarm notification controls if user is not permitted to edit. Graylog2/graylog2-server#3303
- Changing conditional to check for presence of index set definition. Graylog2/graylog2-server#3304
- Allow to get a thread dump as plain text. Graylog2/graylog2-server#3289
- Add missing authentication to ClusterResource and ClusterStatsResource. Graylog2/graylog2-server#3279
- Save anchor and last rotation in TimeBasedRotationStrategy depending on IndexSet. Graylog2/graylog2-server#3306
- Fix loading of plugins in development mode. Graylog2/graylog2-server#3185
- Add contains string tester. Graylog2/graylog2-server#3186
- Index set fixes. Graylog2/graylog2-server#3193
- Add synthetic JavaBean getters to AutoValue classes. Graylog2/graylog2-server#3188
- Improve IndexSetValidator. Graylog2/graylog2-server#3197
- Add custom Jackson (de-) serializer for ZonedDateTime and DateTime. Graylog2/graylog2-server#3198
- Improved alarm callback testing. Graylog2/graylog2-server#3196
- Fix DateTime serialization. Graylog2/graylog2-server#3202
- Fix labels on field graphs. Graylog2/graylog2-server#3204
- Alerts cleanup. Graylog2/graylog2-server#3205
- Index set UI fixes. Graylog2/graylog2-server#3203
- Fix quickvalues and field statistics refresh. Graylog2/graylog2-server#3206
- Allow fetching streams by index set ID. Graylog2/graylog2-server#3207
- UI improvements. Graylog2/graylog2-server#3213
- IndexSet default setting. Graylog2/graylog2-server#3209
- Alerts UI improvements. Graylog2/graylog2-server#3214
- Create DefaultIndexSetConfig when creating the default index set. Graylog2/graylog2-server#3215
- ClusterEventPeriodical must use MongoJackObjectMapper. Graylog2/graylog2-server#3217
- Fix V20161130141500_DefaultStreamRecalcIndexRanges. Graylog2/graylog2-server#3222
- Migration improvements. Graylog2/graylog2-server#3211
Beats plugin
- Add support for Metricbeat
- Extract “fields” for every type of beat
Pipeline processor plugin
- Allow duplicate stream titles in route_to_stream. Graylog2/graylog-plugin-pipeline-processor#154
- Do not use lambdas with gauge metrics. Graylog2/graylog-plugin-pipeline-processor#152
- Add clone_message() function. Graylog2/graylog-plugin-pipeline-processor#153
- Track total pipeline interpreter executionTime as a single metric. Graylog2/graylog-plugin-pipeline-processor#155
Collector sidecar plugin
- Fix: Reload on Beats configuration change.
- Update Beats to version 5.1.1
- Fix race conditions in start/stop/restart code for the exec runner Graylog2/collector-sidecar#123
- Add debug switch Graylog2/collector-sidecar#124
- Using Modern UI in a standard way (thanks to @nicozanf) Graylog2/collector-sidecar#125
- Extract etag cache into its own service. Graylog2/graylog-plugin-collector#43
Graylog 2.1.3
Released: 2017-01-26
https://www.graylog.org/blog/84-announcing-graylog-2-1-3
Core
- Use “order”: -1 in default index template to allow override. Graylog2/graylog2-server#3426
- Add missing authentication to ClusterResource and ClusterStatsResource. Graylog2/graylog2-server#3427
- Unbreak Firefox by requesting JSON when pinging the API. Graylog2/graylog2-server#3430
- Use custom Grizzly error page to prevent XSS. Graylog2/graylog2-server#3428
Beats plugin
- Add support for Metricbeat. Graylog2/graylog-plugin-beats#19
- Extract “fields” for every type of beat. Graylog2/graylog-plugin-beats#18
Graylog 2.1.2
Released: 2016-11-04
https://www.graylog.org/blog/75-announcing-graylog-v2-1-2
Core
- Improve logging in DecodingProcessor. Graylog2/graylog2-server#3025, Graylog2/graylog2-server#3034
- Support all ZLIB compression levels for GELF messages. Graylog2/graylog2-server#3022, Graylog2/graylog2-server#3036
- Implement “contains” stream rule. Graylog2/graylog2-server#3020, Graylog2/graylog2-server#3037
- Make ValidatorProvider a Singleton. Graylog2/graylog2-server#3019, Graylog2/graylog2-server#3038
- Fix NPE in MongoProbe if MongoDB doesn’t run with MMAPv1. Graylog2/graylog2-server#3018, Graylog2/graylog2-server#3039
- Fix NPE in Indices#numberOfMessages(String). Graylog2/graylog2-server#3016, Graylog2/graylog2-server#3041
- Only create new LdapConnectionConfig if LDAP is enabled. Graylog2/graylog2-server#3017, Graylog2/graylog2-server#3040
- Properly track replace-all flag and pass through to API. Graylog2/graylog2-server#3023, Graylog2/graylog2-server#3043
- Replace Jersey GZipEncoder with Grizzly’s GZipFilter. Graylog2/graylog2-server#3021, Graylog2/graylog2-server#3044
- Prevent n+1 query loading for Stream Rules. Graylog2/graylog2-server#3024, Graylog2/graylog2-server#3035. Thank you @bjoernhaeuser!
- Handle search execution errors. Graylog2/graylog2-server#3027, Graylog2/graylog2-server#3045
- Calculate cardinality on field graphs. Graylog2/graylog2-server#3028, Graylog2/graylog2-server#3046
- Update stats function in field graph description. Graylog2/graylog2-server#3029, Graylog2/graylog2-server#3047
- Use response status 500 if search failed but wasn’t syntax error. Graylog2/graylog2-server#3026, Graylog2/graylog2-server#3042
- Improved search indicators. Graylog2/graylog2-server#3031, Graylog2/graylog2-server#3050
- Fix field analyzers loading when search changes. Graylog2/graylog2-server#3030, Graylog2/graylog2-server#3049
- Close search query autocompletion on enter. Graylog2/graylog2-server#3032, Graylog2/graylog2-server#3051
- Refresh stream search when stream changes. Graylog2/graylog2-server#3033, Graylog2/graylog2-server#3052
- Update Joda-Time and moment-timezone. Graylog2/graylog2-server#3059, Graylog2/graylog2-server#3060
- Search button does not always trigger a new search. Graylog2/graylog2-server#3062, Graylog2/graylog2-server#3063
Beats plugin
- Fix frame decoding in case of lost connection. Graylog2/graylog-plugin-beats#14, Graylog2/graylog-plugin-beats#15, Graylog2/graylog-plugin-beats#17. Thank you @hc4!
- Support messages >1024 bytes in BeatsFrameDecoder. Graylog2/graylog-plugin-beats#10, Graylog2/graylog-plugin-beats#12
Pipeline processor plugin
- Don’t doubly negate the value of the expression. Graylog2/graylog-plugin-pipeline-processor#126, Graylog2/graylog-plugin-pipeline-processor#127
Graylog 2.1.1
Released: 2016-09-14
https://www.graylog.org/blog/69-announcing-graylog-v2-1-1
Core
- Proxied requests query other nodes in parallel. Graylog2/graylog2-server#2764, Graylog2/graylog2-server#2779
- Fix 404s on IE 11 using compatibility view. Graylog2/graylog2-server#2768, Graylog2/graylog2-server#2782
- Modify actions in search page triggering a page reload. Graylog2/graylog2-server#2488, Graylog2/graylog2-server#2798
- Do not display login form while loading. Graylog2/graylog2-server#2770, Graylog2/graylog2-server#2802
- Check in SearchPage if search is in progress, reuse promise then. Graylog2/graylog2-server#2799, Graylog2/graylog2-server#2803
- Use index and message_id as message identifier. Graylog2/graylog2-server#2801, Graylog2/graylog2-server#2804
- Fix: file handle leak in KeyUtil (SSL). Graylog2/graylog2-server#2808. Thank you @gbu-censhare!
- Use current search time configuration for CSV export. Graylog2/graylog2-server#2795, Graylog2/graylog2-server#2809
- Explicitly close okresponse body, avoiding leak connection warning. Graylog2/graylog2-server#2811. Thank you @chainkite!
- Properly close OkResponse objects to avoid resource leaks. Graylog2/graylog2-server#2812
- Remove ldap settings check from authenticators. Graylog2/graylog2-server#2817, Graylog2/graylog2-server#2820
Map plugin
- Ignore internal message fields (starting with “gl2_”). Graylog2/graylog-plugin-map-widget#17
Pipeline processor plugin
- Display boolean values in pipeline simulator. Graylog2/graylog-plugin-pipeline-processor#54, Graylog2/graylog-plugin-pipeline-processor#99
- Use case insensitive lookup for timezone IDs. Graylog2/graylog-plugin-pipeline-processor#100, Graylog2/graylog-plugin-pipeline-processor#102
Graylog 2.1.0
Released: 2016-09-01
https://www.graylog.org/blog/68-announcing-graylog-v-2-1-0-ga
Core
- Refactoring of audit events. Graylog2/graylog2-server#2687
- Add a prop to display/hide the page selector. Graylog2/graylog2-server#2711
- Ensure that
rest_transport_uri
can override the URI scheme ofrest_listen_uri
. Graylog2/graylog2-server#2680, Graylog2/graylog2-server#2704 - Handle indexer cluster down in web interface. Graylog2/graylog2-server#2623, Graylog2/graylog2-server#2713
- Prevent NPE and verbose logging if converter returns null. Graylog2/graylog2-server#2717, Graylog2/graylog2-server#2729
- Let widget replay search button open in a new tab or window. Graylog2/graylog2-server#2725, Graylog2/graylog2-server#2726
- Return
"id"
instead of"_id"
for message decorators. Graylog2/graylog2-server#2734, Graylog2/graylog2-server#2735 - Make id field consistent for alarm callback histories. Graylog2/graylog2-server#2737
- Audit event changes. Graylog2/graylog2-server#2718
- Let specific stores reuse promises if request is in progress. Graylog2/graylog2-server#2625, Graylog2/graylog2-server#2712
- Disable editing controls for decorator if user lacks permissions. Graylog2/graylog2-server#2730, Graylog2/graylog2-server#2736
- Styling of decorator list. Graylog2/graylog2-server#2743, Graylog2/graylog2-server#2744
- Do not load plugins for journal commands. Graylog2/graylog2-server#2667
- Use proper other count for pie chart slices. Graylog2/graylog2-server#2639, Graylog2/graylog2-server#2671
- Removing unused prop type in StreamRuleList component. Graylog2/graylog2-server#2673
- Add a generic search form component. Graylog2/graylog2-server#2678
- Decorator improvements. Graylog2/graylog2-server#2519, Graylog2/graylog2-server#2666, Graylog2/graylog2-server#2674
- Only show notification link when there are notifications. Graylog2/graylog2-server#2677
- Enable gzip per default for REST API listener. Graylog2/graylog2-server#2670, Graylog2/graylog2-server#2672
- Improvements in raw message loader. Graylog2/graylog2-server#2684
- Allow users of MessageFields to disable field actions. Graylog2/graylog2-server#2685
- Generating a relative redirect URL for web interface in root resource. Graylog2/graylog2-server#2593, Graylog2/graylog2-server#2675
- Add help text for session’s client address. Graylog2/graylog2-server#2656, Graylog2/graylog2-server#2692
- Fix content pack extractor validation. Graylog2/graylog2-server#2663, Graylog2/graylog2-server#2697
- Reset users’ startpages if referenced stream/dashboard is deleted. Graylog2/graylog2-server#2400, Graylog2/graylog2-server#2695, Graylog2/graylog2-server#2702
- Fix token creation via API browser. Graylog2/graylog2-server#2668, Graylog2/graylog2-server#2698
- Allow surrounding search to be opened in new tab. Graylog2/graylog2-server#2531, Graylog2/graylog2-server#2699
- Reformatting component, adding error handler for fetching dashboard. Graylog2/graylog2-server#2576, Graylog2/graylog2-server#2703
- Add format string message decorator. Graylog2/graylog2-server#2660
- Reloading CurrentUserStore when updated user is the current user. Graylog2/graylog2-server#2705, Graylog2/graylog2-server#2706
- General UI improvements Graylog2/graylog2-server#2700
- Add Syslog severity mapper decorator. Graylog2/graylog2-server#2590
- Improvements in message decorators. Graylog2/graylog2-server#2592, Graylog2/graylog2-server#2591, Graylog2/graylog2-server#2598, Graylog2/graylog2-server#2654
- Revert “Move link to API Browser into System menu”. Graylog2/graylog2-server#2586, Graylog2/graylog2-server#2587
- Print - instead of null when client did not provide user agent header. Graylog2/graylog2-server#2601. Thank you @mikkolehtisalo!
- Change logging in normalizeDn() to debug to avoid noisy warnings. Graylog2/graylog2-server#2599
- Ensure that
{rest,web}_{listen,transport,endpoint}_uri
settings are absolute URIs. Graylog2/graylog2-server#2589, Graylog2/graylog2-server#2596, Graylog2/graylog2-server#2600 - Use and default ports for network settings. Graylog2/graylog2-server#2595, Graylog2/graylog2-server#2605
- Dashboard improvements. Graylog2/graylog2-server#2084, Graylog2/graylog2-server#2281, Graylog2/graylog2-server#2626
- Ensure that
password_secret
is at least 16 characters long. Graylog2/graylog2-server#2619, Graylog2/graylog2-server#2622 - Reduce production .js files sizes by 51%. Graylog2/graylog2-server#2617
- Allow
web_endpoint_uri
to be a relative URI. Graylog2/graylog2-server#2600, Graylog2/graylog2-server#2614 - Use default session attribute for principal. Graylog2/graylog2-server#2620, Graylog2/graylog2-server#2621
- Compile regex pattern for MetricFilter only once. Graylog2/graylog2-server#2637. Thank you again @mikkolehtisalo!
- Fix NPE in Indices#checkForReopened(IndexMetaData). Graylog2/graylog2-server#2628, Graylog2/graylog2-server#2635
- Mark message offset as committed in case of a decoding error. Graylog2/graylog2-server#2627, Graylog2/graylog2-server#2643
- Fix cloning streams and editing legacy stream rules. Graylog2/graylog2-server#2244, Graylog2/graylog2-server#2346, Graylog2/graylog2-server#2646
- Add back storing of index failures in MongoDB. Graylog2/graylog2-server#2633, Graylog2/graylog2-server#2644
- Enable running Graylog REST API on different context path. Graylog2/graylog2-server#2603, Graylog2/graylog2-server#2397, Graylog2/graylog2-server#2634
- Add support for ECDSA private keys to KeyUtil. Graylog2/graylog2-server#2454, Graylog2/graylog2-server#2641
- Check for conflict of
rest_listen_uri
andweb_listen_uri
. Graylog2/graylog2-server#2634, Graylog2/graylog2-server#2652 - Remove uppercase example decorator before 2.1 final. Graylog2/graylog2-server#2588, Graylog2/graylog-plugin-pipeline-processor#73
- Make sure to include charset in getBytes and other relevant code sections. Graylog2/graylog2-server#2567, Graylog2/graylog2-server#2574
- Landing page greets with 2.0 in 2.1. Graylog2/graylog2-server#2579
- Run WebAppNotFoundResponseFilter later and for GET requests only. Graylog2/graylog2-server#2657, Graylog2/graylog2-server#2664
- Update dependencies. Graylog2/graylog2-server#2543, Graylog2/graylog2-server#2565
- Allowing to run REST API and web interface on same port. Graylog2/graylog2-server#2515
- Changing default to make REST API and web if to listen on same host/port. Graylog2/graylog2-server#2446, Graylog2/graylog2-server#2525
- Change plugin REST resource injection to use Class instances. Graylog2/graylog2-server#2492
- Validate that Elasticsearch home/data paths are readable. Graylog2/graylog2-server#2536, Graylog2/graylog2-server#2538
- Fix Version#fromClasspathProperties() when loading from JAR plugin. Graylog2/graylog2-server#2535
- Decorator UI Fixes. Graylog2/graylog2-server#2539
- Fix timing issue in MessageCountAlertCondition. Graylog2/graylog2-server#1704, Graylog2/graylog2-server#2382, Graylog2/graylog2-server#2546
- For httpsHeadersToken pass actual remote address. Graylog2/graylog2-server#2556
- Do not blindly override permission set of ldap users. Graylog2/graylog2-server#2516, Graylog2/graylog2-server#2529
- Display original date time of index ranges on hover. Graylog2/graylog2-server#2549, Graylog2/graylog2-server#2552
- Make it possible for plugins to request a shared class loader. Graylog2/graylog2-server#2436, Graylog2/graylog2-server#2508
- Fix REST API browser after changes to the PluginRestResource injection. Graylog2/graylog2-server#2550
- Make version comparison more lenient with pre-release versions. Graylog2/graylog2-server#2462, Graylog2/graylog2-server#2548
- Always trim message field values on Message class. Graylog2/graylog2-server#1936, Graylog2/graylog2-server#2510
- Fix search results console warnings. Graylog2/graylog2-server#2527
- Fix bulk import of Grok patterns. Graylog2/graylog2-server#2229, Graylog2/graylog2-server#2561
- Add helper method to add AuditLogAppenders. Graylog2/graylog2-server#2562
- Add explanation about the configuration file format. Graylog2/graylog2-server#2563
- Display session information, fix usability in user list, editing users. Graylog2/graylog2-server#2526, Graylog2/graylog2-server#2528, Graylog2/graylog2-server#2540, Graylog2/graylog2-server#2541
- Fix issues with app prefix. Graylog2/graylog2-server#2564, Graylog2/graylog2-server#2583
- Fix extractor and static fields creation in multi-node setups. Graylog2/graylog2-server#2580, Graylog2/graylog2-server#2584
- Authentication improvements. Graylog2/graylog2-server#2572, Graylog2/graylog2-server#2573
- Move Error Prone into default build profile. Graylog2/graylog2-server#2575
- Journal info command does not work. Graylog2/graylog2-server#2493 and Graylog2/graylog2-server#2495
- Search result highlighting color similar to white. Graylog2/graylog2-server#2480
- Cannot POST on Regex Tester (error 500). Graylog2/graylog2-server#2471 and Graylog2/graylog2-server#2472
- Middle-clicking to open new tab not working for some System menu items. Graylog2/graylog2-server#2468
- Json extractor should check for valid lucene keys. Graylog2/graylog2-server#2434 and Graylog2/graylog2-server#2481
- Elasticsearch Red cluster state triggered by index rotation under some conditions. Graylog2/graylog2-server#2371, Graylog2/graylog2-server#2429 and Graylog2/graylog2-server#2477
- Report syntax error when search query contains unescaped slash. Graylog2/graylog2-server#2372 and Graylog2/graylog2-server#2450
- Allowing path prefixes in
web_listen_uri
so web interface is accessible via path != “/”. Graylog2/graylog2-server#2271 and Graylog2/graylog2-server#2440 - LDAP group mapping: stringwise comparison fails due to different DN formats. Graylog2/graylog2-server#1790 and Graylog2/graylog2-server#2484
- Json extractor prefix. Graylog2/graylog2-server#1646 and Graylog2/graylog2-server#2481
- LDAP users are shown a change password form. Graylog2/graylog2-server#2124, Graylog2/graylog2-server#2327 and Graylog2/graylog2-server#2485
- Switch message filters from polling to subscribing to change events. Graylog2/graylog2-server#2391 and Graylog2/graylog2-server#2496
- Make auth providers fully pluggable. Graylog2/graylog2-server#2232, Graylog2/graylog2-server#2367 and Graylog2/graylog2-server#2522
- Grok extractor: Allow returning only named captures. Graylog2/graylog2-server#1486 and Graylog2/graylog2-server#2500
- Attempt reading DSA key if RSA failed. Graylog2/graylog2-server#2503. Special thanks to @mikkolehtisalo!
- Fix session validation propagation. Graylog2/graylog2-server#2498
- A wrapper to protect from decompression bombs. Graylog2/graylog2-server#2339. Thank you again, @mikkolehtisalo!
- Make exceptions more useful by providing messages and context. Graylog2/graylog2-server#2478
- Decorate search results. Graylog2/graylog2-server#2408, Graylog2/graylog2-server#2482, Graylog2/graylog2-server#2499, Graylog2/graylog-plugin-pipeline-processor#41, Graylog2/graylog-plugin-pipeline-processor#43 and Graylog2/graylog-plugin-pipeline-processor#52
- Introduce CombinedProvider to sync actions and stores initialization. Graylog2/graylog2-server#2523
- Actually use the bluebird promise in FetchProvider. Graylog2/graylog2-server#2762
- Audit event cleanup. Graylog2/graylog2-server#2746
- Update documentation links. Graylog2/graylog2-server#2759
- Allow child elements in the search form. Graylog2/graylog2-server#2756
- Make key_prefix configuration optional. Graylog2/graylog2-server#2755, Graylog2/graylog2-server#2757
- Invalidating widget result cache cluster wide when a widget changes. Graylog2/graylog2-server#2732, Graylog2/graylog2-server#2745
- Correct documentation links in ‘misc/graylog.conf’. Graylog2/graylog2-server#2747. Thank you @supahgreg!
- Throttle LB status if journal utilization is too high. Graylog2/graylog2-server#1100, Graylog2/graylog2-server#1952 and Graylog2/graylog2-server#2312. Thank you @mikkolehtisalo!
- TLS ciphers for inputs should probably be configurable. Graylog2/graylog2-server#2051.
- SelfSignedCertificate should migrate from sun.security.*. Graylog2/graylog2-server#2132 and Graylog2/graylog2-server#2316. Thank you @mikkolehtisalo!
- Fix formatting metric names including more than one namespace prefix. Graylog2/graylog2-server#2254 and Graylog2/graylog2-server#2425.
- Waiting for index range calculation before switching deflector alias. Graylog2/graylog2-server#2264 and Graylog2/graylog2-server#2278.
- Specify application.context. Graylog2/graylog2-server#2271 and Graylog2/graylog2-server#2440.
- Add handler for / in the Graylog REST API. Graylog2/graylog2-server#2376 and Graylog2/graylog2-server#2377.
- User preferred timezone not saved. Graylog2/graylog2-server#2393 and Graylog2/graylog2-server#2395.
- Unable to delete closed index. Graylog2/graylog2-server#2419 and Graylog2/graylog2-server#2437.
- Absolute search results in widget using wrong time. Graylog2/graylog2-server#2428 and Graylog2/graylog2-server#2452.
- Upgrade to Kafka 0.9.0.1. Graylog2/graylog2-server#1912.
- RestAccessLogFilter to use X-Forwarded-For set by trusted proxies. Graylog2/graylog2-server#1981. Thank you @mikkolehtisalo!
- Upgrade to Drools 6.4.0.Final. Graylog2/graylog2-server#2106.
- Stream Rule Titles. Graylog2/graylog2-server#2244.
- Improve search with no results page. Graylog2/graylog2-server#2253.
- Refactor Version class to use com.github.zafarkhaja.semver.Version. Graylog2/graylog2-server#2275.
- Alert condition titles. Graylog2/graylog2-server#2282.
- Upgrade to Jackson 2.7.4. Graylog2/graylog2-server#2304.
- Support changes for pipeline processor simulator. Graylog2/graylog2-server#2320.
- Add dependency on jna to fix chatty Elasticseach log message. Graylog2/graylog2-server#2342.
- Interfaces and simple implementations of an audit log. Graylog2/graylog2-server#2344.
- Do not init available alarm callback types, fetch them explicitly. Graylog2/graylog2-server#2353.
- Move custom analyzer into index template. Graylog2/graylog2-server#2354.
- Remove automatic private key/certificate generation. Graylog2/graylog2-server#2355.
- Improved feedback. Graylog2/graylog2-server#2357.
- Longer retention interval for journal tests. Graylog2/graylog2-server#2388.
- Remove
elasticsearch_discovery_zen_ping_multicast_enabled
setting. Graylog2/graylog2-server#2394. - Fix unrequested refresh of configuration forms/Reset configuration forms on cancel. Graylog2/graylog2-server#2399.
- Web If: Updating a few dependencies which are safe to update. Graylog2/graylog2-server#2407.
- Added Information for journal partitions. Graylog2/graylog2-server#2412.
- Fix memory problems with webpack-dev-server in development mode. Graylog2/graylog2-server#2433.
- Remove
_ttl
in index mapping. Graylog2/graylog2-server#2435. - Add raw message loader. Graylog2/graylog2-server#2438.
- Extracting our customized ESLint config into separate module. Graylog2/graylog2-server#2441.
- Remove deprecated MongoDB metrics reporter. Graylog2/graylog2-server#2443.
- Allow access to MongoDatabase in MongoConnection. Graylog2/graylog2-server#2444.
- Add some useful FindBugs plugins. Graylog2/graylog2-server#2447.
- Proxies deflector cycle call to make it available on every node. Graylog2/graylog2-server#2448.
Collector sid