Announcing Graylog 6.1 Beta.4

This is a beta for the upcoming release of Graylog v6.1. Please read on for detailed descriptions of everything that is included.

 

Download Links

• DEB and RPM packages are available in our repositories
• Docker Compose
• Container Images
  • Graylog Open
  • Graylog Enterprise
  • Graylog Data Node
• Tarballs (manual installation):
  • Graylog Server
  • Graylog Server (bundled JVM, linux-x64)
  • Graylog Server (bundled JVM, linux-aarch64)
  • Graylog Enterprise Server
  • Graylog Enterprise Server (bundled JVM, linux-x64)
  • Graylog Enterprise Server (bundled JVM, linux-aarch64)
  • Graylog Data Node (bundled JVM, linux-x64)
  • Graylog Data Node (bundled JVM, linux-aarch64)

 

GRAYLOG FORWARDER

• Tarball (manual installation)
  • Graylog Forwarder
• OS Packages
  • DEB Package
  • RPM Package
• Docker Compose
• Docker image
  • Docker Hub
  • docker pull graylog/graylog-forwarder:6.1-beta.4-1

 

Please report bugs and any other issues in our GitHub issue tracker. Thank you!

 

GRAYLOG ENTERPRISE 6.1 BETA.4

Released: 2024-09-30

Added

• Added the ability to export saved search filters in content packs.
• Also adds handling of saved search filter dependencies for all content pack entities that can contain search filters.
• graylog-plugin-enterprise#6607 graylog-plugin-enterprise#7111 graylog2-server#19130 graylog2-server#20372
• Adds assign to myself option to investigations graylog-plugin-enterprise#6687 graylog-plugin-enterprise#6967
• Auto-select the investigation created when adding evidende graylog-plugin-enterprise#6915 graylog-plugin-enterprise#7122
• Add vulnerabilities modal view to machine assets graylog-plugin-enterprise#6946 graylog-plugin-enterprise#7443
• Add export widget feature to enterprise graylog2-server#19339 graylog-plugin-enterprise#7272 graylog2-server#19340 graylog-plugin-enterprise#7273
• Highlight which investigation evidence in timeline chart is visible as card in carousel below. graylog-plugin-enterprise#7335 graylog-plugin-enterprise#7541
• Display message permalink button for message evidence cards in investigation timeline. graylog-plugin-enterprise#7336 graylog-plugin-enterprise#7445
• Add XLSX file format widget export feature graylog-plugin-enterprise#7362 graylog-plugin-enterprise#7355
• Added new pipeline functions to add and remove a categories from an asset. graylog-plugin-enterprise#7388 graylog-plugin-enterprise#7665
• Added a new drawer to view the assets details and vulnerabilities. graylog-plugin-enterprise#7411 graylog-plugin-enterprise#7631
• Add PDF file format widget export feature graylog-plugin-enterprise#7579 graylog-plugin-enterprise#7528
• Add option in System/Configurations to enable or disable the AI report feature graylog-plugin-enterprise#7934 graylog-plugin-enterprise#8502
• Added Microsoft Defender as an Asset vulnerability import source. graylog-plugin-enterprise#7944 graylog-plugin-enterprise#8232
• Added Microsoft 365 as an Asset source. graylog-plugin-enterprise#7946 graylog-plugin-enterprise#8102 graylog-plugin-enterprise#8117 graylog-plugin-enterprise#8149 graylog-plugin-enterprise#8184 graylog-plugin-enterprise#8293 graylog-plugin-enterprise#8435
• New Asset source connection form for Entra ID graylog-plugin-enterprise#7999 graylog-plugin-enterprise#8193
• Added configuration setting license_manager_url for new License Manager component. graylog-plugin-enterprise#8053 graylog-plugin-enterprise#8100
• Add support for deleting failed snapshots in warm tier. graylog-plugin-enterprise#8233 graylog2-server#20327 graylog-plugin-enterprise#8390
• Update icon for the AI Report graylog-plugin-enterprise#8395 graylog-plugin-enterprise#8434
• Add new disclaimer to the AI report graylog-plugin-enterprise#8396 graylog-plugin-enterprise#8429
• Added new Assets widget to Security Welcome page. graylog-plugin-enterprise#8417 graylog-plugin-enterprise#8462
• Added ability to schedule asset imports at a user defined intervals. graylog-plugin-enterprise#6958
• Added ability to ingest vulnerability scan results from Nessus and update asset database. graylog-plugin-enterprise#6924 graylog-plugin-enterprise#6948 graylog-plugin-enterprise#6942 graylog-plugin-enterprise#6977 graylog-plugin-enterprise#6986 graylog-plugin-enterprise#7077 graylog-plugin-enterprise#7124 graylog-plugin-enterprise#7173 graylog-plugin-enterprise#7185 graylog-plugin-enterprise#7153 graylog-plugin-enterprise#7194 graylog-plugin-enterprise#7232 graylog-plugin-enterprise#7245 graylog-plugin-enterprise#7153 graylog-plugin-enterprise#7194 graylog-plugin-enterprise#7281 graylog-plugin-enterprise#7310 graylog-plugin-enterprise#7307 graylog-plugin-enterprise#7323 graylog-plugin-enterprise#7341 graylog-plugin-enterprise#7349 graylog-plugin-enterprise#7789 graylog-plugin-enterprise#7962
• Display reports overview as a table to improve usability. graylog-plugin-enterprise#7060
• Added new AWS S3 log message input. graylog-plugin-enterprise#7766 graylog-plugin-enterprise#7793 graylog-plugin-enterprise#7063 graylog-plugin-enterprise#7292 graylog-plugin-enterprise#7309 graylog-plugin-enterprise#7787 graylog-plugin-enterprise#7928
• Added additional export formats to reports: csv, xlsx, xml, json, yml. graylog-plugin-enterprise#7131
• Added evidence timeline view for investigation details page. graylog-plugin-enterprise#7133
• Added TLS and mTLS support to Raw/Plaintext and Syslog TCP outputs graylog-plugin-enterprise#7193 graylog-plugin-enterprise#7220
• Add Data Warehouse feature. graylog-plugin-enterprise#7208 graylog2-server#19490
• Added ability to syncronize asset sources on a scheduled interval. graylog-plugin-enterprise#6952 graylog-plugin-enterprise#7233
• Added GELF Outbound Payload Formatter to Enterprise Output Framework outputs graylog-plugin-enterprise#7263
• Added ability to set and modify asset source syncing schedule. graylog-plugin-enterprise#6954 graylog-plugin-enterprise#7276
• Added risk scoring capability for Assets. graylog-plugin-enterprise#7442 graylog-plugin-enterprise#7476 graylog-plugin-enterprise#7505 graylog-plugin-enterprise#7603 graylog-plugin-enterprise#7633 graylog-plugin-enterprise#7666 graylog-plugin-enterprise#7726 graylog-plugin-enterprise#7764 graylog-plugin-enterprise#7846 graylog-plugin-enterprise#8080 graylog-plugin-enterprise#8494
• Add ability to calculate risk score for Security Anomaly Detection events. graylog-plugin-enterprise#7463
• Added Asset Source Mapping cards display for security perspective. graylog-plugin-enterprise#7494
• Added toggle for turning scheduled sync on/off for vulnerability scanners. graylog-plugin-enterprise#7516
• Add export to events and investigations overview widgets. Add PDF export option for messages widget. graylog2-server#19580 graylog-plugin-enterprise#7587
• Added links to associated investigations in security events. graylog-plugin-enterprise#7615
• Added new Google Workspace input. graylog-plugin-enterprise#7438 graylog-plugin-enterprise#8098 graylog-plugin-enterprise#7642 graylog-plugin-enterprise#7960 graylog-plugin-enterprise#8282 graylog-plugin-enterprise#8304 graylog-plugin-enterprise#8415 graylog-plugin-enterprise#8511 graylog-plugin-enterprise#8519
• Showing owner, creation and update dates of reports in frontend. graylog-plugin-enterprise#7659
• Render report with owner permissions if an owner exists. Every user can create his own reports. graylog-plugin-enterprise#7661
• Introducing support for draw-down licenses, in conjunction with a new License Manager component. graylog-plugin-enterprise#7857 graylog-plugin-enterprise#7741 graylog2-server#19885 graylog-plugin-enterprise#8100 graylog-plugin-enterprise#8109
• Adds display of associated assets in security event details. graylog-plugin-enterprise#8074
• Added support for an Open Illuminate bundle type. graylog-plugin-enterprise#8104
• Adds display of associated security events in asset details drawer. graylog-plugin-enterprise#8203
• Added immediate rollover retry for failed data tiering snapshots. graylog-plugin-enterprise#7390 graylog-plugin-enterprise#8216 graylog2-server#20171
• Adds display of risk score for user assets. graylog-plugin-enterprise#8234
• Add link to documentation in license traffic violation notification. graylog-plugin-enterprise#6054 graylog-plugin-enterprise#8288
• Using CDP on low-level to render PDF graylog-plugin-enterprise#8298
• Calculate and display normalized risk score instead of raw score. graylog-plugin-enterprise#6580 graylog-plugin-enterprise#8318 graylog-plugin-enterprise#8387
• Adds import forms for MS365 machine and user assets. graylog-plugin-enterprise#8414
• Refreshed report creation/editing UI to streamline user flow.. graylog-plugin-enterprise#8446 graylog2-server#20355

 

Changed

• Indicate in report that referenced widget was removed from dashboard. graylog-plugin-enterprise#1435 graylog-plugin-enterprise#8730
• Added identification and handling of search filter usages for event definitions and sigma rules. graylog-plugin-enterprise#7175 graylog-plugin-enterprise#7200 graylog-plugin-enterprise#7340
• Updated machine Asset IP configuration to allow IPv6 addresses. graylog-plugin-enterprise#7250 graylog-plugin-enterprise#7468
• Support draw-down licenses in telemetry license status response. graylog-plugin-enterprise#7454 graylog-plugin-enterprise#8179
• Highlight target card on investigation timeline page when clicking on ‘Show similar’ button graylog-plugin-enterprise#7551 graylog-plugin-enterprise#7559
• Enabled turning on debug metrics for Illuminate Pipelines. graylog-plugin-enterprise#7743 graylog-plugin-enterprise#7847
• Added optional Illuminate pack search query paramter to return pack dependencies with returned packs. graylog-plugin-enterprise#7954 graylog-plugin-enterprise#7955
• Omit system events in the Security Events list graylog-plugin-enterprise#7138
• Display license related graph and metrics on system overview page. graylog-plugin-enterprise#8062 graylog-plugin-enterprise#8137 graylog2-server#20087

 

Fixed

• Fixing confirmation when canceling report editing. graylog-plugin-enterprise#4266 graylog-plugin-enterprise#7238
• Restore index with index mappings from archive metadata graylog-plugin-enterprise#6639 graylog-plugin-enterprise#7338 graylog2-server#19406
• Fixes replay search action for edited events in search events widget. graylog-plugin-enterprise#6868 graylog-plugin-enterprise#6972
• Fixes issue where Illuminate Spotlight Packs would silently fail to install. graylog-plugin-enterprise#6882 graylog-plugin-enterprise#7280 graylog-plugin-enterprise#8438
• Fixes navigation error when a user with only the Reader role tries to access system/forwarders. graylog-plugin-enterprise#6932 graylog2-server#18689 graylog-plugin-enterprise#6960
• Do not require security events permissions for plain events widget. graylog-plugin-enterprise#6973 graylog-plugin-enterprise#6993
• Do not use all time range for investigations widget. graylog-plugin-enterprise#6974 graylog-plugin-enterprise#7002
• Reset investigations widget pagination when executing search. graylog-plugin-enterprise#6975 graylog-plugin-enterprise#6989
• Fixes inability to remove older log and event evidence from investigations. graylog-plugin-enterprise#7114 graylog-plugin-enterprise#7189
• Avoid fetching report history constantly. graylog-plugin-enterprise#7115 graylog-plugin-enterprise#7116
• Display message summary for message titles on investigation timeline page. graylog-plugin-enterprise#7167 graylog-plugin-enterprise#7521
• Fix warm tier rollover for indices with closing date older than 1 month. graylog-plugin-enterprise#7286 graylog-plugin-enterprise#7305
• Consider field types when rendering message fields in investigation timeline evidence cards. graylog-plugin-enterprise#7303 graylog-plugin-enterprise#7507
• Fixing report scheduling to consider the timezone set in the frequency configuration. graylog-plugin-enterprise#7315 graylog-plugin-enterprise#7351
• Removing warm infix keyword when archiving indices. graylog-plugin-enterprise#7364 graylog-plugin-enterprise#8112 graylog2-server#20059
• Removed security side nav and updated assets list on security UI perspective graylog-plugin-enterprise#7409 graylog-plugin-enterprise#7514
• Prefix links in Security product consistently when path prefix is present. graylog-plugin-enterprise#7430 graylog-plugin-enterprise#7429
• Fixed incomplete GCP Log Events input header description. graylog-plugin-enterprise#7512 graylog-plugin-enterprise#8528
• Fixing error in report widget preview for message table widget. graylog-plugin-enterprise#7543 graylog-plugin-enterprise#8033
• Fixed issue where investigations fail to retrieve messages from rotated/archived indices. graylog-plugin-enterprise#7630 graylog-plugin-enterprise#7646 graylog-plugin-enterprise#7653
• Prevents widgets in reports overlapping by fixing height of widgets with uncontrolled height. graylog-plugin-enterprise#7892 graylog-plugin-enterprise#7224 graylog-plugin-enterprise#8407
• Improve handling of multiple parameters with the same name in report configuration form. graylog-plugin-enterprise#7900 graylog-plugin-enterprise#8614
• AI report new GET endpoint graylog-plugin-enterprise#7923 graylog-plugin-enterprise#8525
• Fixed issue with Replay Search button on event definitions. graylog-plugin-enterprise#8075 graylog2-server#20049 graylog-plugin-enterprise#8103
• Fixed issue where empty values were not properly being handled in event associated_assets field. graylog-plugin-enterprise#8167 graylog-plugin-enterprise#8328
• Preventing charts in reports being cut off. graylog-plugin-enterprise#8248 graylog2-server#20438 graylog-plugin-enterprise#8605
• Fix excessively large Event risk score when multiple assets are associated with event. graylog-plugin-enterprise#8569 graylog-plugin-enterprise#8572
• Using incognito mode for report rendering to avoid race conditions. graylog-plugin-enterprise#8669 graylog-plugin-enterprise#8706
• Fixed Symantec EDR Events input issue causing invalid Content Types options on edit. graylog-plugin-enterprise#7094
• Eliminates meaningless error log message when creating a Salesforce Input. graylog2-server#18645 graylog-plugin-enterprise#7157
• Fixing up tooltips in public notification creation dialog. graylog-plugin-enterprise#7283
• Removed extraneous Sigma Events event definition condition type option. graylog-plugin-enterprise#7332
• Fix issue where Graylog Security specific migration fails to run on Elasticsearch graylog2-server#19411 graylog-plugin-enterprise#7343
• Using the user’s timezone as the default for the report frequency configuration graylog-plugin-enterprise#7353
• Fix darkmode text color for lookup table name in search bar paramter preview. graylog-plugin-enterprise#7395
• Adding a link to the install documentation, if we show errors instead of a report. graylog-plugin-enterprise#6686 graylog-plugin-enterprise#7431
• Removing error boundary around widgets in reports so that errors in a widget propagate to the logs. graylog-plugin-enterprise#6462 graylog-plugin-enterprise#7433
• Fixing up tooltip styling on reports, forwarder and search filter page. graylog-plugin-enterprise#7540
• Fixed index collision issues with Investigation Log Evidence. graylog-plugin-enterprise#7465 graylog-plugin-enterprise#7567
• Fixed issue where event risk scores would calculate incorrectly if any associated assets no longer existed. graylog-plugin-enterprise#7649 graylog-plugin-enterprise#7700
• Fixed issue where Illuminate lookup tables caused heavy stress on MongoDB due to customization lookups graylog-plugin-enterprise#7762 graylog-plugin-enterprise#7763
• Fixed issue where on exported PDF widget stream ids were shown instead of stream names graylog-plugin-enterprise#7783
• Fix license validation of license audiences without email and name. graylog-plugin-enterprise#7866 graylog-plugin-enterprise#8087
• Reporting trigger self-removes if the linked report is no longer available. (Probable cause: race condition, trigger is running while report is deleted) graylog-plugin-enterprise#8243
• Fixed issue where Sigma rules imported from Git would fail to export to content packs. graylog-plugin-enterprise#8423
• fixed AI report disclaimer graylog-plugin-enterprise#8450
• Fixed issue where Illuminate bundle dropdown would display deleted bundle version after deletion. graylog-plugin-enterprise#8506
• Fixed issue where updating an Investigaion would silently fail validation without a UI error message. graylog-plugin-enterprise#8510
• Fixed issue where investigations being undefined would throw an error in the ListHeader in Investigations page. graylog-plugin-enterprise#8581
• Fixed issue where assets and rules being undefined would throw an error in the ListHeader in Assets and SigmaRules page. graylog-plugin-enterprise#8586
• Fixed issue where clicking on an event from the welcome page would lead to events page showing no events. graylog-plugin-enterprise#8606
• Fixed styling of displaying a long list of associated assets in security event details. graylog-plugin-enterprise#8607

 

GRAYLOG OPEN 6.1 BETA.4

Released: 2024-09-30

Added

• Introduce new pipeline functions remove_single_field and remove_multiple_fields to (eventually) replace remove_field. graylog2-server#19098 graylog2-server#19268
• Change placement of message widget export action graylog2-server#19139 graylog2-server#19140
• Added remediation steps to general events view. graylog2-server#19354 graylog2-server#19853
• Add export feature to events and investigations widget graylog2-server#19580 graylog2-server#19597 graylog-plugin-enterprise#7587
• Datanode migration telemetry graylog2-server#20086 graylog2-server#20225
• Added new Palo Alto Networks TCP (PAN-OS v11+) input. graylog2-server#20223 graylog2-server#20236
• Add unit formatting functionality for widgets graylog2-server#20241 graylog2-server#19109
• Added new Beats Kafka input to ingest system logs from Kafka topic using Filebeat. graylog2-server#5254 graylog2-server#20067
• Display progress indicator for search auto refresh controls. graylog2-server#16894
• Adds support for user-configurable index set templates. graylog2-server#18956
• Conversion of MessageList into a tabular representation for exports. Added XLSXWriter graylog2-server#19162
• Show maximum available time for restarting Graylog during in-place migration. graylog2-server#19270 graylog2-server#19271
• Add possibility to select an index set template when creating an index set. graylog2-server#19075 graylog2-server#19381 graylog-plugin-enterprise#7363
• Add option to select all fields for messages export widget graylog-plugin-enterprise#5616 graylog2-server#19463
• Added support for scheduling Event Definitions using cron expressions. graylog-plugin-enterprise#6598 graylog2-server#19563 graylog-plugin-enterprise#7526
• Add pipeline connections management to stream details page. graylog2-server#19587
• Show tasks progress in Remote Reindex Migration graylog2-server#19657
• Add FilteredMessageOutput and OutputFilter Java interfaces. graylog2-server#19672
• Display datanode version in datanodes overview under System / Data Nodes graylog2-server#19680 graylog2-server#18783 graylog2-server#19691
• Add filters for filterable stream destinations. graylog-plugin-enterprise#7210 graylog2-server#19739
• Add archive, outputs, pipelines, dataWarehouse column to stream overview. graylog2-server#19763
• Add guard for matching graylog/datanode version in data node migration. graylog2-server#19828
• Adding a Last Updated attribute to views/dashboard that is updated on save and initially initialised from the associated search for existing views. graylog2-server#19830
• Add Stream destination output filters UI. graylog2-server#7427 graylog2-server#19846
• Add optional ignoreExtraFieldNames parameter to csv_to_map pipeline function graylog2-server#19865
• Indices not managed by Graylog are now marked and not selected by default in data node’s remote reindex migration. graylog2-server#19974 graylog2-server#19976
• Support configuration of output_batch_size by bytes. graylog2-server#19982
• Added Microsoft Teams Notification V2 which is compatible with Microsoft Workflows. graylog-plugin-enterprise#7794 graylog2-server#19983
• Add data node information to support bundle. graylog-plugin-enterprise#7966 graylog2-server#20090
• bumping the OpenSearch (client, server in DataNode) to 2.15 graylog2-server#20097
• Add data node logs and migration logs to support bundle. graylog-plugin-enterprise#7964 graylog2-server#20103
• Added categories to Streams to allow Illuminate content to be scoped to multiple products. graylog-plugin-enterprise#7945 graylog2-server#20110 graylog2-server#20160 graylog2-server#20199 graylog2-server#20371 graylog2-server#20373 graylog2-server#20380 graylog-plugin-enterprise#8295 graylog-plugin-enterprise#8418 graylog-plugin-enterprise#8437 graylog-plugin-enterprise#8452 graylog-plugin-enterprise#8454
• Add certificates used by data nodes and Graylog to support bundle. graylog-plugin-enterprise#7968 graylog-plugin-enterprise#7969 graylog-plugin-enterprise#7970 graylog2-server#20120
• Show system notification while remote reindexing during the data node migration. graylog2-server#20123
• Remote Reindex UI improvements graylog2-server#20237
• Fix error when installing content pack with stream_title parameter. graylog2-server#20244
• Display index overview by tier type. graylog-plugin-enterprise#8400 graylog2-server#20352
• Added new Raw HTTP input. Also added support for custom authorization config option for HTTP Gelf and new HTTP Raw inputs. graylog2-server#20370
• Remove Data Node beta banner graylog2-server#20388

 

Changed

• Lazy configuration processing for datanode, collecting all errors in one go. graylog2-server#19207 graylog2-server#19801
• Changed default setting for Kafka transports to non-legacy mode. graylog2-server#19693
• Always display input for widget title in widget edit mode. graylog2-server#7396 graylog2-server#19737
• Improving API error responses for JSON parsing failures. graylog2-server#19367
• Introduced DatanodeKeystore for unified handling of PKI inside data node graylog2-server#19536
• Migrate graylog CA to cluster config storage. graylog2-server#19747
• Run remote reindex connection checks from datanodes, aggregate results. graylog2-server#19879
• Implement table rows border color with more contrast. graylog2-server#20001
• Display Warm Tier Search warning as streams with timestamp. graylog-plugin-enterprise#8402 graylog2-server#20427
• API endpoint for listing users will not return an error anymore when user is lacking permission, but return current user only instead. graylog2-server#20558

 

Removed

• Removed deprecated GreyNoise Community Data Adapter. graylog2-server#19914 graylog2-server#19927
• Removed default Content Pack for defunct abuse.ch ransomware tracker. graylog-plugin-integrations#945 graylog2-server#19519

 

Fixed

• Fix link target for search query error documentation links. graylog2-server#13822 graylog2-server#20563
• Display Data Node Logs graylog2-server#17730 graylog2-server#19352
• Fix zstd library loading issue on noexec-mounted /tmp directories. graylog2-server#17837 graylog2-server#19971
• Display field value suggestions when field name is in the middle of the search query. graylog2-server#18288 graylog2-server#18952
• Clarify rule simulation processing graylog2-server#18359 graylog2-server#19261
• Avoid double-qualifying navigation links when path prefix is configured. graylog2-server#18463 graylog2-server#19511
• Fixing several smaller bugs with keyword time range tab. graylog2-server#18809 graylog2-server#18879
• Datanode remote reindex migration UI features graylog2-server#18876 graylog2-server#19100
• Fix Grok field extraction for patterns with converters. graylog2-server#18883 graylog2-server#18898
• Reset events widget pagination when executing search. graylog2-server#18915 graylog2-server#18945
• Fix selecting option in more results select on pipeline simulator page. graylog2-server#18932 graylog2-server#19413
• Fix permissions handling in events widget. graylog2-server#18949 graylog2-server#18953
• Fixing stream filtering in events search type. graylog2-server#18971 graylog2-server#18972
• Fixing text color for unqualified fields in field select. graylog2-server#18975 graylog2-server#18976
• Fix log4j memory appender buffer size configuration. graylog2-server#19003 graylog2-server#19208
• Fixed user permission-based filtering on Event Definitions. graylog2-server#19007 graylog2-server#19262
• Fix Alerts & events search input is removing input values while typing. graylog2-server#19009 graylog2-server#20516
• Fixing ‘unknown format’ error on sidecar overview page. graylog2-server#19012 graylog2-server#19128
• Do not show confirm dialog when saving event notification. graylog2-server#19014 graylog2-server#19073
• Fix display tooltip for help icons in disabled menu items. graylog2-server#19092 graylog2-server#19093
• Fixes handling of error results in the lookup cache. graylog2-server#19159 graylog2-server#19670
• Add sidecar filebeat collector for windows again. graylog2-server#19195 graylog2-server#19325
• Data Node Migration: remove unnecessary steps/big texts/unavailable paths graylog2-server#19229 graylog2-server#19312
• Removed basic auth for datanode rest api. Only JWT supported now. graylog2-server#19243 graylog2-server#19244
• Datanode: Maximum downtime estimate during migration graylog2-server#19270 graylog2-server#19293
• Reuse http client for datanode connection checks during preflight configuration. graylog2-server#19272 graylog2-server#19273
• Fixes Recent Activity pagination, so that it does not ignore entries for deleted items. graylog2-server#19313 graylog2-server#19394
• Fix issue with scroll position which could occur in news section on the startpage when scrolling by dragging cards. graylog2-server#19337 graylog2-server#19341
• Make allowlist for datanode remote reindex migration optional, automatically remove protocols. graylog2-server#19402 graylog2-server#19682
• Fix issue with widget timerange, query and streams filter for events widget on dashboards. graylog2-server#19486 graylog2-server#19537
• fix sidecar failure tracking page error graylog2-server#19562 graylog2-server#19570
• Fixing copying to clipboard in non-secure contexts. graylog2-server#19643 graylog2-server#19654
• Sorting custom field mappings has been fixed, it does not fail on null values anymore. graylog2-server#19694 graylog2-server#19960
• Disable automatic datanode cert renewal during preflight mode graylog2-server#19706 graylog2-server#19709
• Add support for unknown certificate authorities during the remote reindex migration to the datanode graylog2-server#19759 graylog2-server#19775
• Fix CA upload delete icon XMARK not found graylog2-server#19790 graylog2-server#19791
• Make migration thread count counfigurable graylog2-server#19792 graylog2-server#19794
• See previous migration steps content by making them expendable but not editable graylog2-server#19803 graylog2-server#19825
• Fix invalid link for OpenSeach documentation graylog2-server#19845 graylog2-server#20025
• Disable data node migration wizard on installations using data node graylog2-server#19871 graylog2-server#20035
• Display timestamp in datanode migration logs graylog2-server#19977 graylog2-server#19993
• Show previous values in remote reindex migration form graylog2-server#19997 graylog2-server#20008
• Reopen target index for remote reindex migration if this is closed. graylog2-server#20208 graylog2-server#20220
• Fix search bar query validation error showing double icons. graylog2-server#20409 graylog2-server#20502
• Use name instead of originName in hover labels templates to fix that advanced field types not resolved in label texts for charts with custom units graylog2-server#20434 graylog2-server#20453
• Use the correct Data Node configuration file server.conf instead of graylog.conf graylog2-server#20448 graylog2-server#20450
• In cloud env display only node name instead of name with link in message details on the search page. graylog2-server#20464 graylog2-server#20505
• Fix new Datanode EntityDataTable issues graylog2-server#20481 graylog2-server#20495
• Fix streams page always shows horizontal scroll bar. graylog2-server#20515 graylog2-server#20522
• Fix scratchpad copy button graylog2-server#18788 graylog2-server#18874
• Fix unknown field caused_by in remote reindex migration task class graylog2-server#18907
• Fix index set deletion issues. graylog2-server#18994 graylog2-server#19030
• Add beta info to data node preflight and overview page graylog2-server#19038 graylog2-server#19039
• Actively wait for opensearch process termination in the datanode. graylog2-server#19056
• Fix rules editor showing warning when saving. graylog2-server#19008 graylog2-server#19059
• Remove datanode leader flag. It’s neither needed nor used. graylog2-server#18861 graylog2-server#19170
• Fixing full page refreshes for menu items with href. graylog2-server#19225
• remove preflight resume startup graylog-plugin-enterprise#7009 graylog2-server#19228
• Fix data stream replicas and creation on single/multi-node data node setups. graylog2-server#18830 graylog2-server#19010 graylog2-server#19241
• Fix manage extractors link for local input graylog2-server#19111 graylog2-server#19260
• Fixing full page refreshes for buttons with href. graylog2-server#19267
• Removed Delete and Duplicate options for Sigma event definitions. graylog2-server#19404
• Fixed error when the string_array_add function is supplied a null value. graylog-plugin-enterprise#7262 graylog2-server#19439
• Fix upload CA tab not clickable graylog2-server#19485 graylog2-server#19478
• Fix sidecar undefined error graylog2-server#19487
• Datanode UI fixes graylog2-server#19467 graylog2-server#19477 graylog2-server#19539
• Propagate search errors in legacy search REST API endpoint. graylog2-server#14646 graylog2-server#19598
• Data Node Migration Linkable Logs View graylog2-server#19599
• Fix problem with missing field types on message details page. graylog2-server#19600
• Update URLs in DocHelper class to point to go2docs graylog2-server#19630
• Preflight UI fixes graylog2-server#19285 graylog2-server#19286 graylog2-server#19667
• Fixed routing of home nav icon to open the active perspective welcome page. graylog-plugin-enterprise#7370 graylog2-server#19673
• Fix processing failures due to lookup failures in the IPInfo geolocation database. graylog-plugin-enterprise#7602 graylog2-server#19750
• Fix indexer cluster health box on indices page to use correct distribution name. graylog2-server#19805 graylog2-server#19824
• Disabling interactive functionality in widgets when in non-interactive context. graylog2-server#19857
• Dropping legacy dashboards collection in migration. graylog2-server#19912 graylog2-server#19921
• Fix concurrency problem with datanode migration context injection graylog2-server#19926
• Add /connection-check endpoint to datanode rest api proxy allowlist. graylog2-server#19932
• Fix parsing of opensearch allowlist during remote reindex migration graylog2-server#19947
• Fixed issue where unescaped quotes in Custom HTTP notification JSON payloads breaks the notifications. graylog2-server#19951 graylog2-server#20318
• Remove last data node from list if no more data nodes are running. graylog2-server#19980 graylog2-server#19981
• Fix duplicated index entries in remote reindex migration. graylog2-server#19990
• Disable world map interactions in non-interactive mode. graylog2-server#20004
• only hide DatanodeMigration if state ‘FINISHED’ and datanode is configured graylog2-server#19871 graylog2-server#20042
• Stop existing running datanodes during in-place migration. graylog2-server#19833 graylog2-server#20058
• Properly parse trailing padding bytes in IPFIX data sets. graylog-plugin-integrations#395 graylog2-server#20073
• Add support for remote-reindex migration of closed indices graylog2-server#20068 graylog2-server#20081
• Fix list of dashboards in widget’s ‘copy to dashboard’ dialog to only contain allowed dashboards. graylog2-server#7331 graylog2-server#20089
• fixed check for missing required int in legacy search api graylog2-server#7395 graylog2-server#20094
• Stop index retention during remote reindex migration graylog-plugin-enterprise#8097 graylog2-server#20121
• Pause index set rotation during remote reindex migration. graylog-plugin-enterprise#8281 graylog2-server#20222
• Fixed issue where grok_exists pipeline rule would return true for substrings of pattern names. graylog2-server#20264 graylog2-server#20263
• Fix issue where content pack stream dependencies were not properly resolved for some dashboards. graylog2-server#20265 graylog2-server#20288
• Fix tooltips not being visible in modals. graylog2-server#20272
• Reset is_cancelled flag on job trigger release. graylog2-server#20287
• Automatically remove index write blocks during remote reindex migration graylog-plugin-enterprise#8374 graylog2-server#20313
• Use external URI for base URL of API browser. graylog2-server#20379
• Fixed issue where invalid JSON characters being unescaped broke TeamsNotificationV2 notifications. graylog2-server#20389
• Fixing plot legend for larger label sets. graylog2-server#20426
• Tying events widget to configured time range. graylog2-server#18914 graylog2-server#18954

 

Let us know what you’d like to have included in our GitHub issue tracker.