v19.338-5

• Bundled JRE version upgraded to 8.282.08.1.
• Bundled Jackson version upgraded to 2.11.2.
• Beta release: Windows Event Sources can now collect forwarded events from a Windows Event Collector.
• Bug Fix: Fixed Docker metrics ingestion with host network mode.
• Bug Fix: Fixed Docker Sources malformed chunk errors for docker-java dependency where Jersey version was upgraded from 2.23 to 2.30.
• Bug Fix: Fixed a permission issue encountered in redacted version 19.338-3 when using the runAs parameter during installation or an upgrade.
• Bug Fix: Fixed a Windows Events Log Source data duplication issue encountered in redacted version 19.338-4 when upgrading/downgrading the collector version.

v19.319-111

• Bug fix: upgraded docker-java dependency for installed collector, where jersey version has been upgraded from 2.23 to 2.30
• Add SUMO_ENABLE_SCRIPTS option

v19.361-16

Update - Log4j upgraded to 2.16.0 to fix the zero-day exploit affecting the popular Apache Log4j utility (CVE-2021-45046). (Bug fix SUMO-181487)

v19.319-4

• Bundled JRE version upgraded to 8.275.01.1.
• Bug Fix: Health Events for Windows Event Log Sources were not updating properly.
• Bug Fix: Windows Event Log collection in JSON format was incorrectly parsing boolean fields as null.
• Bug Fix: Unnecessary character escaping in SNI command line arguments.
• Bug Fix: The vSkipRegistration parameter was not supported with the command line installer when using Installation Tokens.
• Bug Fix: Collector uninstallation issue on MacOS.
• Bug Fix: Fixed vulnerabilities in Docker collection images from Docker Hub.

v19.319-2

• Bundled JRE version upgraded to 8.265.01.1

v19.308-2

• Archive has the option to specify a S3 “prefix” when forwarding data to S3 Archive with the processing rule “Archive messages that match”. You can use this feature to segment your data when sending data to your Archive.
• Installed Collectors now send health events to a health events framework. Health events for Installed Collectors cover key collection issues that can occur across various Sources such as Windows events, Docker, or Local and Remote File Sources.
• Added “AccountID” to the list of AWS instance metadata that the Installed Collector extracts from instance identity documents (IMDSv2) in AWS.
• Docker bug fixes: Collection issues when there was a pause in the generation of data and for short-lived containers.
• Bug fix: The Collector could stop ingesting if it’s unable to connect to servers and too many logs are backed-up on disk.

v19.308-12

• Bundled JRE version upgraded to 8.265.01.1.

v19.288-3

• Syslog forwarding supports the option to forward syslog messages without prepending the Collector hostname and timestamp on messages.

• Installed Collectors on AWS EC2 instances automatically get the availabilityZone from AWS instance identity documents.

• Host Metrics Sources collect total CPU usage.

• Bundled JRE version upgraded to 8.242.08.1.

• Beta release: For our new Archive feature, we’ve added a new Processing Rule type named Archive messages that match that allows you to archive log data at the source level on Installed Collectors. To participate contact your Sumo account executive or sign up for an enterprise trial account. Existing Beta customers should upgrade to this version for our latest security library updates.

• Beta release: Collectors send health event data to Sumo Logic such as file path issues, missing heartbeats, throttling events, and when Ingest Budget capacities are reached. Check out our Service Release Note that provides further details. To participate contact your Sumo Logic account executive or sign up for an enterprise trial account.

• Bug Fix: Docker Log Sources could duplicate logs on container restart.

v19.288-10

• Bundled JRE version upgraded to 8.252.09.1.
• Installed Collectors now use IMDSv2 to collect AWS instance metadata.
• Bug Fix: Docker Stats Sources for metrics were misconfigured when edited.

v19.253-26

• Bundled JRE version upgraded to 8.232.09.1.
• Bug Fix: Docker Logs and Stats Sources were not running properly on FIPS enabled Collectors.
• Bug Fix: Remote File Sources caused a connection leak due to the Collector not closing SFTP connections after hitting the retry limit.
• Bug Fix: Wrapper configuration properties could not be set with the Command Line Installer.
• Bug Fix: Addresses a potential security vulnerability where the Run As user information was preserved in the collector.properties file after installation on Windows systems. This fix applies to all prior Collector versions on Windows. You will need to remove the credentials from the collector.properties file manually on existing affected Collectors.
• Bug Fix: A warning message was not provided when the installer was run with an invalid Run As user.