Agent v0.1.25

Enhancements and bug fixes; review the noteworthy updates.

  2 minute read  

June 6, 2022

This agent release contains many enhancements and bug fixes, review the following noteworthy updates:

Updates Agent Installation The logging directory for the Edge Delta agent has been updated.

Specifically, if you install the agent via the installation script, then:

For Windows agents, logs can be found under %AppData%/edgedelta.

For all other operating systems, logs can be found under /var/logs/edgedelta.

Updated Input Enrichment In the Edge Delta App, input enrichment has been updated. Specifically, the field_name parameter under dynamic enrichment can be applied to a template.

      enrichments:
        dynamic:
          field_mappings:
            * field_name: `{{if eq .controllerKind "replicaSet"}}kube_deployment{{else}}kube_{{.controllerKind}}{{end}}`
              value: "{{.controllerName}}"

For more complicated templates that include if / else statements or range statements, you must use bracket as a delimiter.

Updated source_detection Parameter The source_detection parameter for inputs has been updated.

Specifically, source_detection now supports custom as a source_type. When you enter custom , you must configure the field_mappings parameter with a key-value pair.

    * labels: "my-kafka-events"
      endpoint: "something"
      topic: "topic"
      group_id: "my-group"
      sasl:
        username: kafka_username
        password: p@ssword123
        mechanism: PLAIN
      source_detection:
        source_type: "Custom"
        optional: false
        field_mappings:
          namespace: "kubernetes.namespace"
          serviceName: "service"
          roleName: "user.role"
          systemType: "system"

Additionally, source_detection now supports regex as a processing_mode.

    * labels: "my-kafka-events"
      endpoint: "something"
      topic: "topic"
      group_id: "my-group"
      sasl:
        username: kafka_username
        password: p@ssword123
        mechanism: PLAIN
      source_detection:
        source_type: "Custom"
        optional: false
        processing_mode: regex
        field_mappings:
          namespace: namespace (?P<field>\w+)
          serviceName: service (?P<field>\w+)
          roleName: user_role (?P<field>\w+)
          systemType: system (?P<field>\w+)