Agent v1.23.0

Consolidated Edge Delta Destination Node, Log Deduplication Processor, Google Pub/Sub Input Support, and OpenSSL and Golang Crypto/TLS Decryption.

  2 minute read  

November 19, 2024

New Features

  • Consolidated Edge Delta Destination Node: Introduced a new consolidated Edge Delta Destination node that ingests logs, metrics, traces, and other data items for the Edge Delta back end.
  • Log Deduplication Processor: A new deduplication node has been implemented to aggregate identical logs over a configured interval and emit a single log with the count of deduplicated logs.
  • Google Pub/Sub Input Support: Added Google Pub/Sub input implementation for v3, providing seamless transition from v2 to v3.

Security

  • OpenSSL and Golang Crypto/TLS Decryption: Enhanced Kubernetes trace and traffic by adding support for OpenSSL and Golang Crypto/TLS decryption using eBPF.

Enhancements

  • Granular Metric Controls: Introduced kill-switch controls for critical pipeline nodes, allowing selective granularity in metric ingestion.
  • Event Type Alignment: Aligned event type and subtype for Kubernetes traffic and trace data with OTLP standards.
  • Custom Editor Functions: Introduced new custom editor functions (edx_delete_keys, edx_delete_matching_keys, edx_keep_keys, edx_matching_keys) to the OTTL library for enhanced key and pattern handling.
  • Source Attribution in Metrics: Added ed.source.name and ed.source.type to enhance agent metric insights.

Bug Fixes

  • Log to Metric Avg Option: Added an avg option to the Log To Metric node to support averaging of log metrics.
  • Domain Fix for Pipeline Metrics: Corrected the ed.domain value for pipeline metrics to ensure accurate categorization across all entries.
  • External Pusher Features Removed: Removed features parameter from all output nodes to streamline data handling.
  • Cloud Fleet Validation: Enhanced configuration validation for cloud fleets and backend scenarios to prevent invalid customizations.
  • Grok Library Consistency: Standardized grok library usage across OTTL and pipeline for consistent processing.
  • Tracer/Connection Monitor Logging: Reduced excessive logging.

Miscellaneous

  • Kill-Switch Optimization: Extended agent metrics kill-switch controls for new granular metric naming conventions. Added new Kubernetes metrics with granular naming controlled via kill-switches.
  • eBPF Process Inclusion: Incorporated eBPF process support for OpenSSL parsing.