Merge pull request #1080 from gravwell/main

Release Prep: Merge main to dev

_static/versions.json

@@ -1,10 +1,14 @@
 [
   {
-    "name": "v5.4.10 (latest)",
-    "version": "v5.4.10",
+    "name": "v5.4.11 (latest)",
+    "version": "v5.4.11",
     "url": "https://docs.gravwell.io/",
     "preferred": true
   },
+  {
+    "version": "v5.4.10",
+    "url": "https://docs.gravwell.io/v5.4.10/"
+  },
   {
     "version": "v5.4.9",
     "url": "https://docs.gravwell.io/v5.4.9/"

changelog/5.4.11.md

@@ -0,0 +1,34 @@
+# Changelog for version 5.4.11
+
+## Released 30 July 2024
+
+## Gravwell
+
+```{note}
+This release contains high priority bug fixes for ingesters and search modules.
+Gravwell highly recommends that all users upgrade to 5.4.11 or above.
+```
+
+### Additions
+
+* Added debug interfaces to most components to get stack traces and CPU/Memory profiles using the SIGUSR1 signal.
+* Added additional log on query completion that shows local disk usage which helps identify excessively expensive queries.
+* Added `-maxtracked` and `-maxsize` flags to the `first`, `last`, and `unique` modules to prevent unexpected resource exhaustion.
+* Improved internal logging around shard management.
+
+### Bug Fixes
+
+* Fixed an issue where an indexer could drop a file lock when repairing many shards.
+* Fixed an issue where multiple overlapping AX modules targeting multiple tags could provide incorrect acceleration hints.
+* Fixed an issue where the kits interface could sometimes show resources from other kits.
+
+## Ingester Changes
+
+### Additions
+
+* Improved health check API on HTTP ingester to indicate if the ingester would block on a request.
+* Improved resource utilization on the Federator and Indexer when servicing many clients.
+
+### Bug Fixes
+
+* Fixed an issue in the ingest library that can cause resource starvation when under extremely high load with many concurrent data flows.

changelog/list.md

@@ -7,7 +7,7 @@
 maxdepth: 1
 caption: Current Release
 ---
-5.4.10 <5.4.10>
+5.4.11 <5.4.11>
 ```
 
 ## Previous Versions
@@ -18,6 +18,7 @@ maxdepth: 1
 caption: Previous Releases
 ---
 
+5.4.10 <5.4.10>
 5.4.9 <5.4.9>
 5.4.8 <5.4.8>
 5.4.7 <5.4.7>

conf.py

@@ -21,7 +21,7 @@
 project = "Gravwell"
 copyright = f"Gravwell, Inc. {date.today().year}"
 author = "Gravwell, Inc."
-release = "v5.4.10"
+release = "v5.4.11"
 
 # -- General configuration ---------------------------------------------------
 # https://www.sphinx-doc.org/en/master/usage/configuration.html#general-configuration

ingesters/win_file_follow.md

@@ -14,7 +14,7 @@ Download the Gravwell Windows File Follower installer:
 
 | Ingester Name | Installer    | More Info |
 | :------------ | :----------- | :-------- |
-| Windows File Follower | <a data-bs-custom-class="hash-popover" href="https://update.gravwell.io/archive/5.4.10/installers/gravwell_file_follow_5.4.10.3.msi">Download <i class="fa-solid fa-download"></i></a>&nbsp;&nbsp;&nbsp;<a data-bs-custom-class="hash-popover" href="javascript:void(0);" data-bs-toggle="popover" data-bs-placement="bottom" data-bs-html="true" data-bs-content='<code class="docutils literal notranslate"><span class="pre">864afccaa583ebefb7c9cbc0310159e83f4c305255c54f395f14f67c85145c7f</span></code>'>(SHA256)</a> | [Documentation](/ingesters/win_file_follow) |
+| Windows File Follower | <a data-bs-custom-class="hash-popover" href="https://update.gravwell.io/archive/5.4.11/installers/gravwell_file_follow_5.4.11.2.msi">Download <i class="fa-solid fa-download"></i></a>&nbsp;&nbsp;&nbsp;<a data-bs-custom-class="hash-popover" href="javascript:void(0);" data-bs-toggle="popover" data-bs-placement="bottom" data-bs-html="true" data-bs-content='<code class="docutils literal notranslate"><span class="pre">5f2d9253f140a9ab1c9d0f72c7345f396c9ebc592e1f8574289ed8433d2f4301</span></code>'>(SHA256)</a> | [Documentation](/ingesters/win_file_follow) |
 
 The Gravwell Windows file follower is installed using a signed MSI package.  Gravwell signs both the Windows executable and MSI installer with our private key pairs, but depending on download volumes, you may see a warning about the MSI being untrusted.  This is due to the way Microsoft "weighs" files.   Basically, as they see more people download and install a given package, it becomes more trustworthy.  Don't worry though, we have a well audited build pipeline and we sign every package.
 

ingesters/winevent.md

@@ -49,7 +49,7 @@ Download the Gravwell Windows Events installer:
 
 | Ingester Name | Installer    | More Info |
 | :------------ | :----------- | :-------- |
-| Windows Events | <a data-bs-custom-class="hash-popover" href="https://update.gravwell.io/archive/5.4.10/installers/gravwell_win_events_5.4.10.3.msi">Download <i class="fa-solid fa-download"></i></a>&nbsp;&nbsp;&nbsp;<a data-bs-custom-class="hash-popover" href="javascript:void(0);" data-bs-toggle="popover" data-bs-placement="bottom" data-bs-html="true" data-bs-content='<code class="docutils literal notranslate"><span class="pre">dc875345b58957d630933e3009a0fd13873764f9e6ecb353381ce6cf835be89d</span></code>'>(SHA256)</a> | [Documentation](/ingesters/winevent) |
+| Windows Events | <a data-bs-custom-class="hash-popover" href="https://update.gravwell.io/archive/5.4.11/installers/gravwell_win_events_5.4.11.2.msi">Download <i class="fa-solid fa-download"></i></a>&nbsp;&nbsp;&nbsp;<a data-bs-custom-class="hash-popover" href="javascript:void(0);" data-bs-toggle="popover" data-bs-placement="bottom" data-bs-html="true" data-bs-content='<code class="docutils literal notranslate"><span class="pre">bead495a570a201e8d5d8dbce06146c441442796ec78b276e13ec0c1c5c4dde6</span></code>'>(SHA256)</a> | [Documentation](/ingesters/winevent) |
 
 Run the .msi installation wizard to install the Gravwell events service.  On first installation the installation wizard will prompt to configure the indexer endpoint and ingest secret.  Subsequent installations and/or upgrades will identify a resident configuration file and will not prompt.