Release notes
Version 4.1.6 - 2017-10-20
Lib upgrades, create/modify/view EventDefinition pages
Bugs
- Correct postfix remote delivery (relay) logdefs (by handling multiple brackets in the end)
- Correction in parsing event criteria (negations)
- Correction in parsing Cond from criteria, support multi clasuses Conds
Improvements
- [LOGALYZE-183] Create/Modify/View EventDefinition pages
- [LOGALYZE-114] Impl of line charts in reports
- Write logs position and length to the new file .ld.pos, next to the .ld files; use JVM parameter -Dl.ls.write_pos_file=true
- Improve Criteria to check tag fields to (disabled for log definitions yet)
Tasks
- Upgrade Engine dependencies Lucene, Derby, jfreechart, itextpdf, json.simple, snappy-java, ...
- Upgrade GWT and SmartGWT
- Upgrade embedded Tomcat to 8.5
- Upgrade maven plugins
- Removed DF:oldjson (let us know if you use it)
- Removed unused menu item 'Manage repository' from menu under Admin tab
- Renamed menu 'Repository' to 'Definitions' under Admin tab
- Added Report def, Stat def, Event def links into the Admin->Definitions menu
Version 4.1.5 - 2017-04-10
Bugs
- [LOGALYZE-222] - Dashboard charts: changing chart color on refresh
- [LOGALYZE-223] - Dashboard chars+grids: timer interval does not change
- [LOGALYZE-224] - New collector - created via admin gui - cannot start
- [LOGALYZE-227] - Syslog parser, timestamp ends with year parse problem
- [LOGALYZE-236] - Correction of index and raw data rolling (writing, checking) mechanizm
- [LOGALYZE-237] - Occurrence of lock obtain timed out exception (write.lock timeout)
- Do not reload chart/grid on Dashboard portlet when leaving settings by clicking on Cancel button
- Add/modify report definition pages: section tab layout correction
- Check unable-to-parse-query response at the right place
Improvements
- [LOGALYZE-221] - Filterable report definition list
- [LOGALYZE-231] - Refresh button on System Info page
- [LOGALYZE-232] - Reports: configurable section parameter 'textIsHtml' in text section (ui)
- [LOGALYZE-233] - Reports: possibility to maximize how many values should appear in charts
- [LOGALYZE-234] - Reports: escape html characters in section/param value columns, ie do not leave to interpret it by the browser
- [LOGALYZE-235] - Reports: possibility to add and remove parameter for section paramteres (ui)
- Statistic chart portlet on Dashboard: update stat name on save settings; correcting chart height
- Modified resource loading behavior when loading admin page to the browser
- Tool to read raw log (RawReadTool)
- Tool to write out fields of an index document (DocTool)
- New JVM parameter: l.ir.terms_index_divisor
Tasks
- [LOGALYZE-230] - Smartgwt theme upgrade to latest
- [LOGALYZE-238] - Update tomcat version (6.0.48->6.0.53)
- Set JAVA_HOME example to /usr in setenv.sh
Version 4.1.4 - 2016-12-30
Bugs
- [LOGALYZE-97] Add Collector - Empty parameter list if Data format has been set to Empty
- [LOGALYZE-115] Sticky summary page on search tab
- [LOGALYZE-116] New free font to support ő,ű,... in pdf reports
- [LOGALYZE-117] Wrong pdf report reendering: static text with new page, statistic, static text with new page
- [LOGALYZE-119] Reports: loss of new line charackters in static text section (pdf reports)
- [LOGALYZE-127] Report creation error when quotation mark in query definition
- [LOGALYZE-132] 'error:null' message at statistics creation
- [LOGALYZE-133] Empty CVS export
- [LOGALYZE-134] High browser CPU usage until search is in processing state
- [LOGALYZE-135] Top view last refresh missing
- [LOGALYZE-138] Too many org.apache.commons.httpclient.HttpMethodBase getResponseBody warning message
- [LOGALYZE-141] Export do not start with empty query
- [LOGALYZE-145] Row detail close error (GUI)
- [LOGALYZE-150] Refresh button in statistic page increases the stat value
- [LOGALYZE-156] Manage Index page refresh icon problem
- [LOGALYZE-160] Custom time range in reports doesn`t work
- [LOGALYZE-162] No TOP value for statistics in reports
- [LOGALYZE-163] Can`t select report clicking on caption
- [LOGALYZE-166] Chromium browser character encoding problem in POST request
- [LOGALYZE-172] Top does`t work with ProtoBuf DTP
- [LOGALYZE-193] SyslogDf, parsing year (linksys format)
- [LOGALYZE-196] When logstore rolling limit is stricter then index rolling limit, than generating bad logstore file names
- [LOGALYZE-198] Unable to stop search with TOP
- [LOGALYZE-200] Event icon refresh on enable/disable
- [LOGALYZE-202] Querry list refresh at report definition
- [LOGALYZE-210] Export current search result without starting a new one
- [LOGALYZE-211] Use embedded fonts in header of pdf reports
- [LOGALYZE-212] On Dashboard, statistic chart's top field setting has no effect
Improvements
- [LOGALYZE-83] Removing labels from statistic charts
- [LOGALYZE-86] Filterable log definition list
- [LOGALYZE-95] Review file permissions
- [LOGALYZE-99] Add Collector - Add DF: JSON
- [LOGALYZE-108] JSON DF: ability to parse nested objects
- [LOGALYZE-110] Add JDBC Collector to Admin
- [LOGALYZE-112] System info on the About page
- [LOGALYZE-118] Reports: support html format in static text section
- [LOGALYZE-123] Configurable number of processor threads
- [LOGALYZE-126] Search tab -> Fields box: 'On click action'
- [LOGALYZE-128] New page handling in reports
- [LOGALYZE-131] Set columns names (+width, align) in riports
- [LOGALYZE-165] Filterable query definition list, refresh button
- [LOGALYZE-191] Webapps servlets should log into separate log file
- [LOGALYZE-195] Make some Lucene settings configurable trough engine.xml
- Changing appearance: add/modify report sections in report defs
- SocketDtp, SyslogOverTcpDtp: tcp keep alive default on, change it with paramater 'keepalive'
- Terms of wildcard, prefix, fuzzy and range queries are NOT to be lower-cased
- Variables can be use in event generated mail subject
- Improved ToptermStatTask
- [LOGALYZE-204] Fix color palette for charts
- [LOGALYZE-218] Add ForceGC function to the Manage Engine page
New features
- New DTP: Protobuf DTP
- [LOGALYZE-136] Stop button on search page
- [LOGALYZE-137] Confirm window on "Fields" refresh
- [LOGALYZE-149] Chart data optimisation
- New DTP: SyslogOverTcp DTP
- [LOGALYZE-158] Host grouping on Search tab
- [LOGALYZE-174] Base view in Search tab
- [LOGALYZE-175] Store ProtoBuf fields in index
- [LOGALYZE-176] Rename ProtoBuf fields according to syslog fields
- [LOGALYZE-192] Show engine's default charset in admin's About page
- New DF: CEF DF
Tasks
- [LOGALYZE-79] Fixing internationalization
- [LOGALYZE-113] Remove the 'simpleSearch' web service
- Remove unused dependencies
- Upgrade Gwt and SmartGwt
- Search/query: 'top' max value is 25 (default 10)
- [LOGALYZE-125] Improve log entry: "ReportDefinition is null"
- [LOGALYZE-177] Own audit messages: raw as message field
- [LOGALYZE-178] Default behavior: lowecase all incoming fields
- [LOGALYZE-179] ProtobufDtp: convert facility number to text
- [LOGALYZE-181] Smooth first start
- [LOGALYZE-182] Manage config (and xsd) changes over releases
- [LOGALYZE-206] Hide 'Active' column on statistic tab
- [LOGALYZE-207] Optimize engine logging config
- [LOGALYZE-208] Removing copyright footer from main window
- [LOGALYZE-215] Move system infos page for Admin->Help to Admin->System
- [LOGALYZE-216] Upgrade embedded tomcat (6.0.35->6.0.48)
- [LOGALYZE-217] Move the Help menu from Admin tab to main screen menu (next to user menu)
- [LOGALYZE-219] Remove shutdown engine functionality from soap api and web ui
- [LOGALYZE-220] Put back shutdown engine functionality to soap api, it is in use by logalyze-cli
Version 4.1.3 - 2013-05-29
Bugs
- [LOGALYZE-100] Windows startup script: LOGALYZE_HOME can contain space now
- [LOGALYZE-96] Dashboard - Tag cloud: Fix search field name from tag to _tag
Improvements
- [LOGALYZE-102] Startup, Shutdown process notifications
- [LOGALYZE-103] Internal database configuration has been moved to engine.xml
- API: Common error handling improvements
- [LOGALYZE-105] Show Roles without any permission
- [LOGALYZE-107] 'TOP' search result can be sorted by column 'Count'
- Newer version of SmartGWT
- [LOGALYZE-109] List user permissions on user profile page
- New Maven plugin versions and put SVN Revision into Engine Jar Manifest file
New features
- Roles
- LOGalyze Engine code format hints
- New unit tests
Version 4.1.2 - 2012-03-18
Bugs
- Log Definition with unknown function 'ncsa' was released in 4.1.1
Version 4.1.1 - 2013-03-13
Bugs
- LOGALYZE-71: Remove progress indicator if log in fails
- LOGALYZE-69: Display all value of field _tag in Search result
- Some CSS and layout fixes
- LOGALYZE-94: Fix error during Definition file saving
- LOGALYZE-66: Create new Statistic Definition: sometime store table was not created
- Updated Time zone list
- Fixed chart labels in PDF reports
- Some minor modifications and fixes
Improvements
- API: New server side input validations
- Updated inline documentation for main configuration file
- Updated inline Collector Schema Documentation
- LOGALYZE-87: Reorderable Report sections
- Fix startup files on Windows
- Improved data aggregation
New features
- New Index rolling frequency (half-day)
- New JVM parameters (rolling policy) in startup script
- LOGalyze Repository content is in the release package
Known bugs
Log Definition with missing NCSA parser
Symptoms
LOGalyze Engine does not start. Error message:
ERROR LOGalyzeEngine Error occured during initialization of LOGalyze Engine. Startup aborted. com.logalyze.engine.config.ConfigException: Unknown function: ncsa
Cause
There is a wrong Log Definition file in conf/repository/ folder called ddb67bfe-ae5a-11e1-88ed-0018de9d2512.xml. This file contains a parser (ncsa) which is missing from 4.1.1
Resolution
Simply remove this file or rename it to ddb67bfe-ae5a-11e1-88ed-0018de9d2512.xml.disabled
Version 4.1.0 - 2012-10-25 - Open Source Release
This version is the first Open Source Release of LOGalyze released under LGPL v3.
Version 4.0.3 - 2012-07-25
Bugs
- Collectors: Identity type collector is added
- Dashboard: Fix layout bug in ChartPortlet
- Statistics: dimension value is truncated to 128 chars
- Statistics: line chart margin is fixed
- Statistics: ability to select dimension to display
- Statistics: SUM function was missing on New Statistics Definition page
Improvements
- Common colors: charts will use the same color for a given series every time
- New caching method for Grid components
- Charts: disable animation
- Index: loghostname field is cenverted to lowercase
- Search: new generated field: Format = DTP+DF
- Search: fetch result as soon as number of collected rows reaches the pagesize
New features
- Search: TOP modifier. TOP search modifier is similar to COUNT(*) GROUP BY sql clause
- Manage Indexes directories: ability to attach and detach an Index directory online
- Linux Audit Subsystem log parser
Notes on upgrade: After upgrading logalyze-engine package you should manually delete lib/logalyze-engine-4.0.2.jar or older jar.
Version 4.0.2 - 2012-03-29
Bugs
- Engine: Fixed reading logs from logstore files if daily log count is bigger than 2,147,483,647
- Admin: remove double click handler from Report History grid
- Admin: handle NOT_LOGGED_IN response globally
Improvements
- Admin - Search: display name of Query Definition if entered query is already saved
- Search: new search modifier '| postfix_accounting'
- Search: TimeRangePicker 'All time' starts from 1970-01-01
- Admin: upgrade dependencies. GWT 2.4, SmartGWT 3.0
- Admin - Stat: Top N filter for Pie chart
- Admin: minor improvements on GUI
- Reports: add time zone to Report Job
- Collectors: CSV parser supports multi-character delimiter string
- Engine: Windows startup script
- Statistics: 10 times faster statistics collection
Notes on upgrade
After upgrading logalyze-engine package you should manually delete lib/logalyze-engine-4.0.0.jar or lib/logalyze-engine-4.0.1.jar.
Version 4.0.1 - 2012-01-24
Bugs
- Search criteria coming from chart was not added to Search History
- Search results grid - Field _tag: only the first value was shown
- Statistics: Stacked bar legend: dimension value was not shown
- Dashboard - Index date range: timestamps were in GMT
- Collector did not stop to the STOP ws
- Search: click to add feature did not work on field: severity
- Click-through search from Dashboard did not refresh the time interval
- Password field value is erased after success login
Improvements
- If there is no data for a report section it is completely missing
- Export search result as CSV
- Default sort of Report History: name, asc
- Default sort of Add Query Definition to Report: name, asc
Notes on upgrade
After upgrading logalyze-engine package you should manually delete lib/logalyze-engine-4.0.0.jar.