Agent v1.12.0

Splunk Output Update, k8s.container.name to Pod Info Extraction, Health Check for OTLP Input, and Support for service.name in *nix Environments.

  3 minute read  

July 30, 2024

This release includes several significant updates, enhancements, and bug fixes aimed at improving the functionality and performance of Edge Delta agents. Below are the details of the changes included in this release:

Enhancements

  • Splunk Output Update: Splunk output node can now ingest signal type messages.
  • Add k8s.container.name to Pod Info Extraction: Added the ability to extract k8s.container.name using CEL from the k8s resource.
  • Add Health Check for OTLP Input: Introduced a health check service for OTLP input nodes, necessary for new cloud fleets as load balancers perform health checks at certain intervals.
  • Support for service.name in *nix Environments: Added support for the OTEL standard field resource.service.name for sources detected in *nix environments.
  • Authentication and Path Filtering for HTTP(S) Input: Added authentication (Bearer and Basic) as well as path filtering options to the HTTP input node.
  • The ED_CUSTOM_TAGS environment variable can now be used for attaching attributes statically. The format should be in form: <key 1>:<value 1>|<key 2>:<value 2>
  • Unroll JSON from a Field Path: Added functionality to process JSON data from non-body locations using json_field_path.
  • The Grok node has been updated with patterns for AWS VPC Flow as well as MYSQL Slow Query and Error logs.

Bug Fixes

  • Leader Election in Non-Processor Agents: Rollups, aggregators, and compactor agents will no longer participate in leader elections. Only processor agents will now have leader election.
  • Resource Transform Fields Update: Aligned the Resource Transform node configuration to match log transform nodes, replacing source_field_overrides with transformations and ensuring backward compatibility for older configurations.
  • Missing Validation in Resource Transform Node: Added missing validation checks after the deprecation of source field overrides.
  • Improve Error Message for k8s Event Tailer: Improved the error message to help diagnose potential issues with Kubernetes event tailers in customer environments.
  • Track Errors in Gzip Decompressor: Errors from gzip decompression will now be tracked and logged, instead of being propagated upstream, to reduce noise.
  • Error Counting in Gzip Decompressor: Errors are now counted with an errorCount counter and logged at most five times per minute.
  • Fix for Splunk Mapping: Ensured messages appear the same during migration from config v2 to config v3 by making Log-transform and Splunk-mapper compatible.
  • Prevent Push Strategy Creation Errors from Stopping Agent Execution: Added a No-Op strategy to handle push strategy creation failures, allowing the agent to continue running when some output nodes fail.
  • Use Bool Pointer for Log to Metric parameters: Changed skip_empty_intervals and only_report_nonzeros to booleans to differentiate between false values and unset variables.
  • Kubernetes Input Labels & Annotations: Switched to opt-in collection for pod labels and annotations, added support for node and namespace labels.

Miscellaneous

  • Batching Bug in Compactor: Fixed issues with batching in compactors that were causing unnecessary overhead and inefficiencies.
  • Group Anomaly Settings Using Log to Metric Top Anomaly Setting: Improved the handling of anomaly settings where group anomaly settings are missing.

These improvements and bug fixes enhance the robustness, usability, and functionality of the Edge Delta agent.