Agent v2.27.0

October 26, 2026

Breaking Changes

nodes:
  - name: my_dedup
    type: dedup
    interval: 1m
    excluded_field_paths:
      - attributes["foo"]          # Was: item.attributes.foo
    count_field_path: attributes["ed_log_count"]   # Was: item.attributes.ed_log_count

New Features

• Aggregate Metric: Added sumsq, stdev, and the p10, p20, p25, p30, p40, p50, p60, p70, p75, p80, p999, and p9999 percentiles to aggregation_type, alongside the existing sum, mean, min, max, count, median, distinct_count, last, p90, p95, and p99.

  - type: aggregate_metric
    aggregate_metric_rules:
      - aggregation_type: p999   # Also accepts sumsq, stdev, p10, p20, p25, p30, p40, p50, p60, p70, p75, p80, p9999.
  

• S3 Source and GCS Source: Each log can now carry the bucket and object path it came from. They are off by default; enable them by selecting them in the node’s source_metadata. The S3 source uses aws.s3.bucket and aws.s3.key; the GCS source uses gcp.gcs.bucket and gcp.gcs.object.

  nodes:
    - name: my_s3_input
      type: s3_input
      ...
      source_metadata:
        attributes:
          aws.s3.bucket: true   # Default: not set.
          aws.s3.key: true      # Default: not set.
  

Improvements

• OTLP Source and Prometheus Source: A summary metric is now stored as the series Prometheus uses for it: <name>_sum and <name>_count as cumulative sums, plus one gauge per quantile under <name> carrying a quantile attribute. Queries and dashboards that read summary metrics from these sources may need updating.
• OTLP Destination: Roughly halved the cost of serializing a batch by hashing resources without reflection.
• OTLP Source: A gRPC request is now rejected before its body is decoded when the node is full, rather than after.
• Extract Metric: Attributes are copied once per item instead of once per metric.
• Metric Rollup: Bounded the fan-out of rollup server requests, which previously had no limit on the memory it could consume.
• Log to Pattern: Counts for a group that is evicted are now carried forward rather than dropped, and each group uses one pass rate per flush instead of recomputing it per item.

Bug Fixes

• Aggregate Metric: stdev no longer collapses to zero for values of large magnitude, and the exact-rank percentiles no longer pick the neighboring value because of floating-point rounding.
• GCS Destination: An error committing an upload is now returned rather than discarded, and an object is streamed through a sized buffer instead of being held whole.

Security

• Go Runtime Upgrade: Upgraded the Go runtime to 1.27.3, which includes the fix for CVE-2026-111943 in the Go toolchain.
• Dependency Upgrades: Upgraded golang.org/x/net to v0.60.0 to address known CVEs.