Announcing Graylog 7.1.1

This is a bug-fix release that improves Graylog’s functionality. Please read on for information on what has changed.

Download Links

Release date: 2026-05-04

• Upgrade notes
• DEB and RPM packages are available in our repositories
• Docker Compose
• Container images:
  • Graylog Open
  • Graylog Enterprise
  • Graylog Data Node
• Tarballs for manual installation:
  • Graylog Server
  • Graylog Server (bundled JVM, linux-x64)
  • Graylog Server (bundled JVM, linux-aarch64)
  • Graylog Enterprise Server
  • Graylog Enterprise Server (bundled JVM, linux-x64)
  • Graylog Enterprise Server (bundled JVM, linux-aarch64)
  • Graylog Data Node (bundled JVM, linux-x64)
  • Graylog Data Node (bundled JVM, linux-aarch64)

Graylog Server Changelogs 7.1.1

Released: 2026-05-08

Fixed

• Fix overlapping content in pinned columns of aggregation table widgets. graylog2-server#23712 graylog2-server#25656
• Fix issue when inline search bound in Query Input. graylog2-server#25570 graylog2-server#25686
• Fixed a ClassCastException in inputs service that caused cluster_stats to appear as an error string in the support bundle’s cluster.json. graylog2-server#25781
• Surface partial shard failures from searches instead of silently returning incomplete results. graylog2-server#25797
• Encrypt secret fields for AWS Kinesis/Cloudwatch and TCP-based inputs. graylog2-server#25800
• Fix serializing message body for details in error processing stream. graylog2-server#25906
• Fix broken Manage extractors link for local inputs on the Inputs overview page. graylog2-server#25907
• Fix missing X-Requested-By header on API browser try-it-out requests, which caused CSRF rejections. graylog2-server#25931 graylog2-server#25933

Graylog Enterprise Changelogs 7.1.1

Released: 2026-05-08

Added

• Add optional full_message field to Mimecast V2 Input. graylog-plugin-enterprise#14082 graylog-plugin-enterprise#14083

Fixed

• Appled proper start/end date filters for Mimecast V2 input Archive Search requests. graylog-plugin-enterprise#12352 graylog-plugin-enterprise#14083
• Fix permission handling for Investigation event bulk status updates. graylog-plugin-enterprise#13859 graylog-plugin-enterprise#13969
• Fixed issue causing aggregation security event risk scores to be reported as zero when source log messages did not include an alert_severity_level field. graylog-plugin-enterprise#14103 graylog-plugin-enterprise#14146
• Feeds configuration for welcome page can not be saved on clean installs. graylog-plugin-enterprise#13964 graylog-plugin-enterprise#13984
• Fixed slow loading of the Illuminate > Customization page. graylog-plugin-enterprise#14014
• Encrypt the Forwarder Service input’s TLS private key password. graylog-plugin-enterprise#14017
• In slice-by, only show asset slices where the asset still exists in the asset database instead of the raw data. graylog-plugin-enterprise#14022 graylog-plugin-enterprise#14025
• Ensure general AI services (e.g. widget summaries) remain available when investigation summaries are disabled. graylog-plugin-enterprise#14140
• Fixes NPE in error creation when Watchlist lookup table does not exist. graylog-plugin-enterprise#14168

Please report bugs and any other issues in our GitHub issue tracker. Thank you!