Agent v0.1.102

Changed the release status of compound nodes from, Loki and NewRelic Output Nodes, Self-Logs Metadata, and extraction of timestamps from messages, ensuring timely logging.

  2 minute read  

May 20, 2024

The following changes been implemented in this agent release:

Product

  • Changed the release status of compound nodes (now called Packs) from Beta to Released, reflecting their stable release state.

Enhancements

  • Loki and NewRelic Output Nodes: Added support for custom items to be processed, enhancing the data modification capabilities before sending to these destinations. Enhanced Loki integration to allow custom labeling, giving users more control over their data attributes.
  • Self-Logs Metadata: Added extra metadata (package and file plus line number) to self-logs to ease troubleshooting and investigations.

Bugfixes

  • Fixed the extraction of timestamps from messages, ensuring timely logging and improved search accuracy.
  • Route Path Processing: Fixed the issue where the “Exit if Matched” field radio button wasn’t correctly set.
  • Updated the Event Schema to include event.type and event.domain fields at the top level in the AVRO schema to ensure complete event representation.
  • Agent panic when testing: Testing uses the proper schema abstraction while accessing data, preventing agent panics.
  • Removed legacy Prometheus Metrics settings such as rule_metrics_prom_stats_enabled, internal_prom_stats_enabled, and enable_reporting_in_prometheus to eliminate conflicts with the Prometheus metrics exporter output node.
  • Fixed an issue with the UDP input node handling read timeouts, ensuring it gracefully restarts listening.
  • Fixed handling of number values when applying math functions.

Security

  • Updated dependencies to mitigate a high severity vulnerability CVE-2022-29583 [OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities].
  • Fixed medium severity vulnerabilities including:
    • CVE-2023-45288 [Uncontrolled Resource Consumption]
    • CVE-2024-24786 [Loop with Unreachable Exit Condition]
    • CVE-2024-24557 [Insufficient Verification of Data Authenticity]
    • CVE-2024-29018 [Incorrect Resource Transfer Between Spheres]

Upgrade Instructions

Note: this version removes the default use of Persistent Volume Claims (PVC) for the Compactor in Kubernetes installations. Therefore, to upgrade to this version a clean install is required. To enable PVC, use the compactorProps.usePVC=true helm value. For kubectl installations, update the manifest with a persistent volume .