Announcing Graylog 5.2 Beta.1

This is a beta for the upcoming release of Graylog v5.2. Please read on for detailed descriptions of everything that is included.

Download Links

• DEB and RPM packages are available in our repositories
• Docker Compose
• Container Images
  • Graylog Open
  • Graylog Enterprise
  • Graylog Data Node
• Tarballs (manual installation):
  • Graylog Server
  • Graylog Server (bundled JVM, linux-x64)
  • Graylog Server (bundled JVM, linux-aarch64)
  • Graylog Enterprise Server
  • Graylog Enterprise Server (bundled JVM, linux-x64)
  • Graylog Enterprise Server (bundled JVM, linux-aarch64)
  • Graylog Data Node (bundled JVM, linux-x64)
  • Graylog Data Node (bundled JVM, linux-aarch64)

 

GRAYLOG FORWARDER

• Tarball (manual installation):
  • Graylog Forwarder
• OS Packages
  • DEB Package
  • RPM Package
• Docker image:
  • Docker Hub
  • docker pull graylog/graylog-forwarder:5.2-beta.1-1

 

Please report bugs and any other issues in our GitHub issue tracker. Thank you!

 

GRAYLOG OPERATIONS 5.2 BETA.1

Released: 2023-10-02

Added

• Added support for region selection for GCP Log Events input dataset creation. graylog-plugin-enterprise#1002
• Added Event Notification to auto generate Investigations and add Events. graylog-plugin-enterprise#4792 graylog-plugin-enterprise#5178
• Added ability for anomaly detectors to trigger events/alerts. graylog-plugin-enterprise#5092 graylog-plugin-enterprise#5210 graylog-plugin-enterprise#5338
• Added Asset Enrichment module. graylog-plugin-enterprise#5097 graylog-plugin-enterprise#5199 graylog-plugin-enterprise#5165 graylog-plugin-enterprise#5166 graylog-plugin-enterprise#5447 graylog-plugin-enterprise#5483 graylog-plugin-enterprise#5696 graylog-plugin-enterprise#5697 graylog-plugin-enterprise#5735 graylog-plugin-enterprise#5698 graylog-plugin-enterprise#5163 graylog-plugin-enterprise#5171 graylog-plugin-enterprise#5176 graylog-plugin-enterprise#5186 graylog-plugin-enterprise#5220 graylog-plugin-enterprise#5229 graylog-plugin-enterprise#5312 graylog-plugin-enterprise#5327 graylog-plugin-enterprise#5310 graylog-plugin-enterprise#5387 graylog-plugin-enterprise#5396 graylog-plugin-enterprise#5395 graylog-plugin-enterprise#5477 graylog-plugin-enterprise#5459 graylog-plugin-enterprise#5476 graylog-plugin-enterprise#5453 graylog-plugin-enterprise#5480 graylog-plugin-enterprise#5496 graylog-plugin-enterprise#5475 graylog-plugin-enterprise#5508 graylog-plugin-enterprise#5504 graylog-plugin-enterprise#5548 graylog-plugin-enterprise#5597 graylog-plugin-enterprise#5643 graylog-plugin-enterprise#5687 graylog-plugin-enterprise#5714 graylog-plugin-enterprise#5740 graylog-plugin-enterprise#5826 graylog-plugin-enterprise#5818 graylog-plugin-enterprise#5831 graylog-plugin-enterprise#5865 graylog-plugin-enterprise#5870 graylog-plugin-enterprise#5873
• Add claim-based team sync support for OIDC backends. graylog-plugin-enterprise#5267 graylog-plugin-enterprise#5350 graylog-plugin-enterprise#5304 graylog2-server#15792
• Show investigation after adding evidence to it and keep it open when navigating to a new tab or window. graylog-plugin-enterprise#5367 graylog-plugin-enterprise#5370 graylog-plugin-enterprise#5429 graylog-plugin-enterprise#5446
• Added ability to filter users when assigning investigations. graylog-plugin-enterprise#5565 graylog-plugin-enterprise#5587
• Added ability to upload sigma rule files. graylog-plugin-enterprise#5579 graylog-plugin-enterprise#5693
• Added proper support for F5 BIG-IP webui log parsing graylog-plugin-enterprise-integrations#1057 graylog-plugin-enterprise-integrations#1066
• Added the ability to run the AWS Security Lake Input in cloud. graylog-plugin-enterprise-integrations#1069 graylog-plugin-enterprise-integrations#1071
• Added AWS Security Lake Input graylog-plugin-enterprise-integrations#995 graylog-plugin-enterprise-integrations#1035 (Thanks: @Srinidhi-Saravanan)
• Added Salesforce Input graylog-plugin-enterprise#1088 (Thanks: @Srinidhi-Saravanan)
• Added gl2_forwarder_input field to messages coming in through the forwarder inputs. graylog-plugin-enterprise#4586 graylog-plugin-enterprise#5096
• Added search capability when importing a Sigma rule from a git repository graylog-plugin-enterprise#5061 graylog-plugin-enterprise#5109 graylog-plugin-enterprise#5144
• Added Markdown support to investigations notes graylog-plugin-enterprise#4946 graylog-plugin-enterprise#5152
• Added automated email notification for Investigations assignments. graylog-plugin-enterprise#5180
• On cloud migrate IndexSetDefault configuration to new time size based rotation strategy in case it is not the configured default graylog-plugin-cloud#1149 graylog2-server#15556 graylog-plugin-enterprise#5213
• Added endpoint for looking up forwarder input by id. graylog-plugin-enterprise#5361
• Added new plugin component for asset list in log messages graylog-plugin-enterprise#5461 graylog-plugin-enterprise#5460
• Added ability to download and bulk download sigma rules. graylog-plugin-enterprise#5197 graylog-plugin-enterprise#5517
• Added ability to upload Sigma Rule files. graylog-plugin-enterprise#5197 graylog-plugin-enterprise#5580 graylog-plugin-enterprise#5589
• Added ability to export Graylog messages to GELF (Newline-delimited) format. graylog-plugin-enterprise#5608
• Forwarder heartbeat interval is now adjustable to arbitrary duration. graylog-plugin-enterprise#5657
• Added separate tabs for viewing machine and user assets. graylog-plugin-enterprise#5630 graylog-plugin-enterprise#5695
• Added the ability to run the CrowdStrike Input in Graylog Cloud. graylog-plugin-enterprise-integrations#1080

 

Changed

• Gave to the user the option to convert a relative search into an absolute search before adding it as evidence in an Investigation. graylog-plugin-enterprise#5369 graylog-plugin-enterprise#5557
• Changed the minimum allowed Anomaly Detector interval to 10 minutes. graylog-plugin-enterprise#5383 graylog-plugin-enterprise#5524
• Wrote an audit log entry when deleting an aged-out archive. graylog-plugin-enterprise#5672 graylog-plugin-enterprise#5805
• Changed some field parsing for the Microsoft Defender for Endpoint input. graylog-plugin-enterprise#5773 graylog-plugin-enterprise#5775
• Added ability to skip background Anomaly Detection jobs graylog-plugin-enterprise#3337 graylog-plugin-enterprise#5234
• Re-enabled “CSV File (Upload)” lookup data adapter. graylog-plugin-enterprise#5354
• Used composable index templates instead of legacy templates for failure index/illuminate indices. graylog-plugin-enterprise#15782 graylog-plugin-enterprise#15948
• Changed Illuminate processor so that it no longer needs CSV files for data adapters written to disk. graylog-plugin-enterprise#3081 graylog-plugin-enterprise#5619
• Merged enterprise integrations plugin into the enterprise plugin. graylog-plugin-enterprise#5724
• Adjusted Microsoft Defender for Endpoint input to populate the evidence field inside the full_message. graylog-plugin-enterprise#5748
• Adjusted F5 BIG-IP input log fields graylog-plugin-enterprise-integrations#1058

 

Fixed

• Fixed GCP Log Events input large memory usage. graylog-plugin-enterprise#1009
• Fixed Exception being thrown in browser console when logging out graylog-plugin-enterprise#15848
• Fixed Illuminate activation errors for non default root users graylog2-server#16302 graylog-plugin-enterprise#5734
• Fixed race condition in range calculation when restoring small indices graylog-plugin-enterprise#2220 graylog-plugin-enterprise#5393
• Fixed log view messages export, when there search result does not contain messages graylog-plugin-enterprise#2830 graylog-plugin-enterprise#5105
• Fixed archive backend configuration not updated on archives page graylog-plugin-enterprise#4334 graylog-plugin-enterprise#5102
• Fixed forwarder input only loading 10 items. graylog-plugin-enterprise#5118 graylog-plugin-enterprise#5119
• Fixed bug where Illuminate Spotlight Packs marked as core did not have their content packs installed graylog-plugin-enterprise#5142 graylog-plugin-enterprise#5143
• Fixed Anomaly layout padding issue. graylog-plugin-enterprise#5193 graylog-plugin-enterprise#5285
• Fixed Archiving with Snappy compression on Java 17. graylog-plugin-enterprise#5221 graylog-plugin-enterprise#5222
• Fixed navigation in plugins when the web app is using a path prefix graylog-plugin-enterprise#5238 graylog-plugin-enterprise#5239
• Allowed selecting all enumerable fields in values of field select in the parameter declaration form. graylog-plugin-enterprise#5271 graylog-plugin-enterprise#5431
• Fixed invalid index prefix options in anomaly detector creation menu graylog-plugin-enterprise#5275 graylog-plugin-enterprise#5360
• Fixed anomaly detector audit log messages not displaying IDs/names. graylog-plugin-enterprise#5308 graylog-plugin-enterprise#5328
• Fixed handling of backslashes in Sigma rule queries that caused OpenSearch errors. graylog-plugin-enterprise#5326 graylog-plugin-enterprise#5440
• Fixed a bug where OIDC and Okta errors were not handled on the login page graylog-plugin-enterprise#5358 graylog-plugin-enterprise#5639
• Fixed team sync not supported message for OIDC authentication backend. graylog-plugin-enterprise#5766 graylog-plugin-enterprise#5765
• Fixed indefinite error loop in Office 365 Input. graylog-plugin-enterprise-integrations#1049 graylog-plugin-enterprise-integrations#1065
• Fixed failure to load the New Report page when invalid search ID is referenced graylog-plugin-enterprise#3490 graylog-plugin-enterprise#3494
• Fixed cases where the session got extended when fetching data in the UI periodically. graylog-plugin-enterprise#5173
• Fixed unknown email_attributes error when using AD team sync; honor user-configured LDAP attribute names. graylog-plugin-enterprise#5423
• Fixed event definition enable UI state for Event Correlation. graylog2-server#16070 graylog-plugin-enterprise#5549
• Improved free license warning on Illuminate Install page. graylog-plugin-enterprise#5598
• Fixed error when adding Sigma Git repo rule directories with the default branch. graylog-plugin-enterprise#5613
• Fixed several CrowdStrike input issues and adjusted parsing. graylog-plugin-enterprise#1084 graylog-plugin-enterprise#5756
• Fixed API browser sort direction parameter functionality on several Security endpoints. graylog-plugin-enterprise#5869
• Fixed several F5 Input runtime issues. graylog-plugin-enterprise-integrations#1050 graylog-plugin-enterprise-integrations#1052

 

GRAYLOG OPEN 5.2 BETA.1

Released: 2023-10-02

Added

• Added log messages like in the old JEST client to show nodes arriving/dropping from an ES/OS cluster graylog2-server#14383 graylog2-server#14898
• Created time range quick access list for multiple time range types graylog2-server#15484
• Added sidecar graylog_host variable, Auditbeat collector for Linux and default configurations. graylog2-server#15570 graylog2-server#15571
• Created undo/redo actions in search graylog2-server#15704
• Tracked when an event definition was last successfully matched. graylog2-server#15751 graylog2-server#16071
• Added bulk action for streams overview to start a search with selected streams. graylog2-server#15975 graylog2-server#16015
• Secured datanode REST API with the same SSL certificate as the one used for Opensearch HTTP graylog2-server#15990 graylog2-server#16058
• Enabled basic auth for datanode rest API if security is enabled graylog2-server#16447 graylog2-server#16446
• New Content Stream section to welcome page to show Rss feed and Release notice. graylog-plugin-enterprise#5404 graylog2-server#15843
• New pipeline rule functions for map manipulation: map_set, map_remove. graylog2-server#6470 graylog2-server#16174
• Optional flag to invert the condition of remove_field function. graylog2-server#8128 graylog2-server#16182
• Added event definition title as a summary to Microsoft Teams notifications. graylog-plugin-integrations#1341 graylog-plugin-integrations#1343
• Ran matrix tests with a given indexer version. graylog2-server#15088
• Datanode autodiscovery, indexer hosts refactoring, preflight startup logic implemented graylog2-server#15197 graylog-plugin-enterprise#5101
• Created message in system notification stream when sidecar becomes inactive graylog2-server#6697 graylog2-server#15222
• Added Sidecar Reader and Sidecar Manager roles to read and manage sidecars. graylog2-server#12044 graylog2-server#15380
• Added system logs to nodes overview page. graylog2-server#15381
• AMQP input improvements: retry connection with configurable interval and encrypt password. graylog2-server#12447 graylog2-server#15401
• Added specific field types for streams, node & input fields. graylog2-server#15409
• Advanced field types for scripting api – support for stream, node and input name resolution graylog2-server#15421
• Resolved input/streams/node ids in aggregation results, showing titles. graylog2-server#15464
• Pipeline Rule Builder UI graylog2-server#15490 graylog2-server#15470
• Allowed simulation of json messages on the rule creation page graylog2-server#15490 graylog2-server#15480
• Added CA configuration to load a given CA during startup for datanode certificate provisioning. graylog2-server#15546
• Restricted time size based rotation strategy duration leeway on cloud graylog-plugin-cloud#1149 graylog2-server#15556 graylog-plugin-enterprise#5213
• Implemented highlighting for advanced field types (streams, nodes, inputs). graylog2-server#15601
• Included titles of advanced field types in suggestions. graylog2-server#15614
• Updated Sources Dashboard with better widgets to gain insights into log volume distribution. graylog2-server#15677
• Added the string_entropy pipeline function. graylog-plugin-enterprise#4839 graylog2-server#15682
• Implemented percentage metric for aggregations. graylog2-server#6763 graylog2-server#15738
• Added action to cleanup & rebuild index ranges of all index sets. graylog2-server#11919 graylog2-server#15808
• Added values pivot option to disable empty buckets. graylog2-server#15814
• Enabled percentage/percentile metrics in event definitions. graylog2-server#10082 graylog2-server#15863
• Added event limit for filter event definition. graylog-plugin-enterprise-integrations#5382 graylog2-server#16035
• Implemented option to change order of search highlighting rules. graylog2-server#16095
• Marked users synced from a deactivated authorization backend in user overview list and on user detail page. graylog2-server#13823 graylog2-server#16134
• Added pipeline name and stage to log output when an exception occurs during pipeline processing. graylog2-server#8627 graylog2-server#16161
• Added API endpoint for event definition duplication. graylog2-server#16251
• Introduced telemetry custom event name graylog2-server#16317
• DataNode: if you use the DataNode, the nodes system clocks have to be synchronized for JWT usage. graylog2-server#16334
• Added change field type action for a field graylog2-server#16469 graylog2-server#16344
• Added ability to clean field names for set_field and set_fields pipeline functions graylog2-server#7137 graylog-plugin-enterprise#5794 graylog2-server#16514
• Enabled pre-flight UI for general availability. graylog2-server#16722
• Enabled field type management for general availability. graylog2-server#16773
• Included link to replay an alert in teams and slack notification template. graylog-server#15678 graylog-plugin-integrations#1348

 

Changed

• Displayed keyword in time range summary instead of from / to range. Display effective search execution time range in sidebar, which can be helpful for relative and keyword time ranges. graylog2-server#11401 graylog2-server#15961
• Memorized state of time range tabs in time range picker while picker is open. graylog2-server#11465 graylog2-server#16107
• Implemented share button for saved searches overview. graylog2-server#15355 graylog2-server#16126
• Read CSP directives from a resource property file. graylog2-server#15370 graylog2-server#15439
• On View Event Definition page added a Duplicate button and removed the Edit button for definitions that are scoped as immutable. graylog2-server#15916 graylog2-server#16515
• Updated AWS Java SDK to the latest version graylog-plugin-enterprise-integrations#971 graylog2-server#14712
• Updated Content Security Policy on the fly, when an authentication backend is created. graylog2-server#15371 graylog2-server#15305
• Moved AWS plugin into server repository. graylog2-server#15318
• ‘Show received messages’ for forwarder inputs now queries for messages using the new gl2_forwarder_input field. graylog-plugin-enterprise#4586 graylog2-server#15378
• Updated Kafka client library from 2.7.0 to 3.4.0. graylog2-server#15488
• Used composable index templates instead of legacy templates. graylog2-server#15782 graylog2-server#15948
• When entity was added to the favorites, it was added to the end of the list. It meant that the top of the favorites’ list contained entities that had been added first to the list. It seemed wrong. From now on, the newly added entity will be shown on the top of the favorites’ list. graylog2-server#16050
• Made creation_date optional when creating index sets via api. If none is provided, the current server time will be used. graylog2-server#4709 graylog2-server#16166
• Showed syntax error in pipeline rule editor when trying to access nested variables using an array literal, e.g. result.[“key”]. graylog2-server#16029 graylog2-server#16196
• Introduced a cache configuration setting to avoid caching empty values. graylog2-server#13579 graylog2-server#15200 graylog2-server#16199
• Merged integrations plugin into core repository. graylog2-server#16274
• Published system events asynchronously to prevent threads getting blocked. graylog2-server#16426

 

Deprecated

• Added REST endpoint to create custom field type mappings for index sets. graylog2-server#16241
• GreyNoise Data Adapter functionality has been limited to only use with non-community GreyNoise subscriptions. graylog-plugin-enterprise#5157 graylog-plugin-integrations#1340 graylog-plugin-enterprise-integrations#1059 graylog2-server#15592

 

Removed

• Removed support for legacy Collector Sidecars. graylog-project-internal#102
• Removed obsolete ElasticsearchConfigMigration and AddRetentionRotationAndDefaultFlagToIndexSetMigration migrations. graylog2-server#16153
• Removed ERROR level logs that happened during user/role creation. graylog2-server#16184

 

Fixed

• Displayed indicator when dashboard has unsaved changes. graylog2-server#10682 graylog2-server#16122
• Validated in aggregation builder if metric name is unique. graylog2-server#11592 graylog2-server#16097
• Fixed join() and substring() pipeline function parameter names. graylog2-server#11868
• Do not show query input suggestions when using Add to query field value action. graylog2-server#12165 graylog2-server#15885
• Improved the index set overview page performance and added a title-based search feature. graylog2-server#12498 graylog2-server#15155
• Made sure that boolean fields are returned as true|false in aggregations on Opensearch 2.4+. graylog2-server#14661 graylog2-server#15809
• Adjusted keybindings for query input auto-completion. graylog2-server#14793 graylog2-server#16162
• Fixed heatmap colorbar font color for dark mode. graylog2-server#15035 graylog2-server#16129
• Improveed readability of hover legend in aggregations. graylog2-server#15084 graylog2-server#15888
• Enabled/Disabled EventDefinition status when clicking on status badge. graylog2-server#15095 graylog2-server#16203
• Fixed BulkActions dialog not closing after clicking on Confirm. graylog2-server#15259 graylog2-server#15384
• Fixed pagination problems on Events page. graylog2-server#15273 graylog2-server#15357
• Fixed problem with search bar submit button incorrectly indicating changes for keyword time range. graylog2-server#15472 graylog2-server#15938
• Applied pivot limits correctly when installing saved searches/dashboard from pre-5.1 content packs. graylog2-server#15509 graylog2-server#15523
• Made sure that search is re-executed when ‘Add to query’/‘Remove from query’ on dashboards. graylog2-server#15519 graylog2-server#15593
• Properly prefix frontend paths to prevent error when custom app path suffix is used. graylog2-server#15536 graylog2-server#15540
• Used search query from URL params for dashboard page search input. graylog2-server#15536 graylog2-server#15540
• When modifying a user’s session timeout, the system will automatically update existing user sessions to ensure application of the new timeout settings. graylog2-server#15609 graylog2-server#15657
• Removed LastOpened and Favorite items from internal Entity List graylog2-server#15638 graylog2-server#15574 graylog2-server#15658
• Saved modified search when query is changed through URL parameters. graylog2-server#15642 graylog2-server#15653
• Restored mail attribute for AD authentication. graylog2-server#15536
• Included link to replay an alert in alert mail notification template. graylog2-server#15678 graylog2-server#15922
• Fixed sorting with variance/stddev/sumofsquare metrics. graylog2-server#15707 graylog2-server#15878
• Fixed problem with focus loss in query input autocompletion. graylog2-server#15718 graylog2-server#15933
• Rendered values consistently between normal and full screen mode. graylog2-server#15778 graylog2-server#15864
• Fixed problems with editing Search Filters of entities installed via Content Packs. Search Filters of those types of entities are not inlined during Content Pack installation and can be edited. graylog2-server#15841 graylog2-server#16085 graylog-plugin-enterprise#5560
• Disabled offline detection for REST API client. graylog2-server#15913 graylog2-server#15914
• Showed errors again when loading a saved search or dashboard which exceeds the query limit. graylog2-server#15958 graylog2-server#15998 graylog2-server#16033
• Fixed TLS compatibility with older operating systems. (e.g. Win Server 2019). graylog2-server#16076
• Cluster initial manager nodes in datanode configurable. graylog2-server#16143 graylog2-server#16146
• Improved logic which controls when we show the query input completions. graylog2-server#16207 graylog2-server#16168
• Fixed validation of max index retention lifetime for time-size-optimizing indices. graylog-plugin-enterprise#5685 graylog2-server#16392
• Updated title of dashboard is now properly saved. graylog2-server#16440 graylog2-server#16441
• Fixed broken streams page if streams without matching_type exist. graylog2-server#16474 graylog2-server#16522
• Fixde error which occurred when saving a dashboard after deleting a page in the pages configuration modal. graylog2-server#16634 graylog2-server#16674
• Fixed wrong lookup cache metrics after reconfiguration. graylog2-server#8633
• Fixed GELF output to not block output processing. graylog2-server#9917 graylog-plugin-enterprise#4623 graylog2-server#15385
• Showed all streams in global decorators configuration, fixing display problem graylog2-server#13465 graylog2-server#13467 graylog2-server#15280
• Improved decorator config by showing map of all decorators present. graylog2-server#14546 graylog2-server#15284
• Made sure that search creation has finished before executing it for new saved searches/dashboards. graylog2-server#15435 graylog2-server#15437
• Fixed session expiration on the nodes page. graylog-plugin-enterprise#5158 graylog2-server#15465
• Fixed archiving failure in case of AWS Opensearch 429 error graylog-plugin-enterprise#5136 graylog2-server#15503
• Extended authentication cookie’s max age on every session extension. graylog2-server#15502 graylog2-server#15504
• Do not extend session when fetching indexer cluster health. graylog2-server#15505
• Kept query order when exporting saved searches/dashboards to content packs. graylog2-server#15341 graylog2-server#15528 graylog2-server#15505
• Improved widget placement for specific widget sizes/positions. graylog2-server#15308 graylog2-server#15538 graylog2-server#15545
• NodeService#allActive returns only nodes of correct type based on current server type graylog2-server#15505
• Avoided redirecting to path with trailing / when delivering static assets. graylog2-server#15613
• Fixed search creation when replaying events/event definitions. graylog2-server#15552 graylog2-server#15689 graylog2-server#15688
• Fixed enabled_index_rotation_strategies configuration to allow setting of TimeBasedSizeOptimizingStrategy graylog2-server#15750
• Sorted function names, add rule builder fragments with implicit to_string, fix string parameter handling in fragments. graylog2-server#15785
• Fixed query decoration in aggregation alerts. graylog2-server#15737 graylog2-server#15793
• Forced user to select an entity for when picking a start page type. graylog2-server#15578 graylog2-server#15869
• Fixed problem with STOPPED reactor on OutOfMemoryError. This error stops the whole GL instance now, instead of constantly logging errors related to stopped reactor. graylog-plugin-enterprise#4980 graylog2-server#15889
• Marked required fields in body of API call PUT roles/{rolename} graylog2-server#16019
• Included parameters when replaying search for dashboard widget. graylog-plugin-enterprise#4576 graylog2-server#16051
• Fixed event definition enable UI state for Filter & Aggregation. graylog2-server#16070 graylog2-server#16072
• Fixed internal server error for cluster logger level API requests. graylog2-server#11408 graylog2-server#14256 graylog2-server#16092
• Fixed possible NullPointerExceptions when writing pipeline rules with maps. graylog2-server#14818 graylog2-server#16175
• Added a new Event Definition column: Last Matched. graylog2-server#15751 graylog2-server#16195
• Fixed blocked system events index preventing node registration and leader election. graylog-plugin-enterprise#5750 graylog2-server#16407
• DNS Resolver Pool warning log message now accurately reflects configured dns_lookup_adapter_resolver_pool_size value. graylog2-server#16475
• Indexer cluster checker thread start is delayed by 5s to avoid potential deadlock. graylog2-server#16481
• Fixed failure to delete indices with time/size optimizing strategy, when write block is not present. graylog-plugin-enterprise#5722 graylog2-server#16503
• Fixed display of session timeout unit on user edit page. graylog2-server#16563
• Fixed description for the scenario that one term or value has multiple matching highlighting rules. graylog2-server#16668

 

Security

• Fixed partial path traversal vulnerability in Support Bundle feature. GHSA-2q4p-f6gf-mqr5
• Fixed stale session cache after logout. GHSA-3fqm-frhg-7c85
• Fixed insecure source port usage for DNS Lookup adapter queries. GHSA-g96c-x7rh-99r3
• Updated SnakeYAML to version 2.2. (fixes CVE-2022-1471) graylog2-server#16377
• Updated Jackson to 2.15.2. (CVE-2022-42003) graylog2-server#16377
• Updated Scala to 2.13.12 to include fix of CVE-2022-36944. graylog2-server#16456
• Updated various third-party libraries to address vulnerabilities. graylog2-server#16476

 

Let us know what you’d like to have included in our GitHub issue tracker.