Release Notes

LogZilla documentation for Release Notes

Release Notes

This page lists the last three releases. Older notes are available in source control.

Version v6.37

API Updates

  • LZ-3089 – Update CDR loader docs with CDR/CMR same dir and docker-compose pull_policy – Expanded documentation now shows how CDR and CMR can share a directory, with an updated docker-compose.yaml for a smoother pull process.
  • LZ-3088 – Bump cisco_cdr appstore app meta.yaml – Refreshed app metadata ensures the Cisco CDR dashboard upgrades cleanly when added.
  • LZ-3065 – Storage module: use individual data-retention setting – Preliminary work paves the way for per-module retention controls instead of one global setting.
  • LZ-3062 – Remove front-container REQUIREMENTS – The front container can now start independently of others, reflecting recent Nginx updates.
  • LZ-3019 – Integrate AI chat with LogZilla – Foundation laid for in-product AI chat via a single hostname proxy and unified authentication.
  • LZ-3091 – Set app dashboards/widgets public by default – App-delivered dashboards and widgets are now visible to all users out of the box.
  • LZ-3092 – CDR Loader HTTPS connection – Resolved SSL-verification issues to improve CDR loader reliability.
  • LZ-3080 – WinAgent memory usage – Adjusted WinAgent to reduce observed memory spikes.
  • LZ-3076 – No events incoming with HTTPS + force-HTTPS – Fixed a condition that intermittently blocked event flow when HTTPS was enforced.
  • LZ-3073 – Upgrade error: deleting old containers – Streamlined the upgrade routine to silence non-critical log warnings.
  • LZ-3068 – Timeout warnings during restart – Improved messaging so brief startup delays are not mistaken for failures.
  • LZ-3038 – Basic response validators – Added safeguards to make API calls more predictable.
  • LZ-3077 – Duplicate triggers disruption – Duplicate triggers are now ignored rather than causing disruptions.
  • LZ-2724 – EPD warning accuracy – Email template correctly reflects days remaining before the EPD limit.
  • LZ-2568 – Separate docker-based code – Repository re-organization improves long-term maintainability.
  • LZ-2984 – Trigger edit bugs – Fixed issues with custom filters and console errors.
  • LZ-2969 – Refactor UI2 button component – Consolidated multiple button variants into one consistent component.

UI Updates

  • LZ-3043 – New Version Notification – The UI now indicates when an upgrade is available.
  • LZ-3022 – Unified UI Shadows – Consistent shadows across the interface.
  • LZ-3006 – Firefox graph display – Graphs render correctly in Firefox once again.
  • LZ-3075 – Clean up subscription (router) – UI cleanup around router-linked subscriptions.
  • LZ-3071 – UI2: URL length & tab hangs – Tidier URLs prevent rare tab freezes.
  • LZ-3070 – UI2: Style badge widgets – Badges now scale gracefully, even with large numbers in narrow widgets.
  • LZ-3067 – UI2: Groups in settings not loaded – Groups load reliably, plus assorted UI fixes.
  • LZ-3053 – Editing trigger error – Smoother interaction while editing triggers.
  • LZ-3045 – UI2 bug fixes – Numerous minor issues resolved for a better day-to-day experience.
  • LZ-3031 – Duplicate Loader IDs in Dashboard – Loader IDs now display uniquely to avoid confusion.

Version v6.36

API Updates

  • LZ-3058 – High CPU usage – Investigated to improve stability.
  • LZ-3049 – Query export returns 500 – Resolved export errors.
  • LZ-3040 – TLS settings description – Corrected terminology.
  • LZ-3025 – Divide by zero in Queryevents – Resolved runtime error.
  • LZ-3035 – Dashboard import – Fixed import failures.
  • LZ-3031 – Duplicate loader IDs – Unique IDs enforced in dashboards.
  • LZ-2984 – Trigger edit fixes – Corrected multiple issues in the trigger editing process.
  • LZ-3050 – Event rate query CSV export – Guidance for extracting weekly event rates to CSV.
  • LZ-3028 – CDR Loader docs – Updates to improve operational clarity.
  • LZ-3018 – Ingest-only authtoken docs – Clarifications for ingestion scenarios.
  • LZ-3001 – HTTPS forwarding with user tags – syslog-ng forwarder example with user tag propagation.
  • LZ-2911 – Upgrading LogZilla – Clarified that upgrades can skip intermediate versions.
  • LZ-2907 – tcpdump command update – Updated parameters for accurate packet capture.
  • LZ-2894 – Subquery example – Simplified example for accessibility.
  • LZ-3025 – Query Events divide by zero – Stabilized query execution.
  • LZ-2991 – SEC & Script-Server – Fixed logging and escaping.
  • LZ-2987 – syslog-ng persistent disk buffer – Prevented data loss on container deletion.
  • LZ-2981 – Cardinality timeouts – Increased timeouts for large datasets.
  • LZ-2965 – Sphinx filter argument – Corrected an argument error.
  • LZ-2946 – EULA acceptance – Added an option to bypass EULA acceptance during installation.
  • LZ-2901 – Docker syslog entries – Reduced verbosity for clarity.
  • LZ-2892 – Special character handling – Improved handling of user tags with special characters.
  • LZ-2890 – Estreamer container – Applied security updates.
  • LZ-2948 – Stacked bar chart – Resolved dropdown and limit display issues.
  • LZ-2945 – Email trigger – Fixed issue with external recipient handling.
  • LZ-2942 – Widget order from search – Corrected placement order.
  • LZ-2939 – Autofocus input – Fixed autofocus issues in inputs.
  • LZ-2938 – New dashboard widget placement – Corrected placement behavior.
  • LZ-2928 – Pagination – Fixed pagination reset to page 1.

UI Updates

  • AI assistant integration – Natural language interaction with log data. Open Copilot in the UI to start. Key capabilities: queries, troubleshooting suggestions, pattern recognition, rules assistance, and in-product documentation access.
  • LZ-3022 – Unified shadow effects – Standardized shadow styling for consistency.
  • LZ-3027 – Quick access popup – Added ctrl-k/cmd-k shortcut for faster search.
  • LZ-3034 – Disk space indicator – Improved color coding for low disk alerts.
  • LZ-3033 – Compact filter placeholder – Added placeholder text to guide users.
  • LZ-3030 – Styled widget badges – Adjusted design for clarity.
  • LZ-3006 – Firefox graph display – Fixed graph rendering in Firefox.

Version v6.35

API Updates

  • LZ-3004 – PaloAlto app – Process system and configuration events.
  • LZ-2996 – Cisco Meraki – Add URL user tags for URL-type logs.
  • LZ-2973 – Multi-server LDAP – Authenticate across multiple LDAP servers.
  • LZ-2943 – Multi-AD domains – Use multiple search domains.
  • LZ-2805 – SaaS – Ongoing work on SaaS version of LogZilla v6.
  • LZ-2687 – Cisco Call Manager records – Parse and import CDR and CMR.
  • LZ-2712 – Selective EventID – Allow WinAgent to send only selected event IDs.
  • LZ-2940 – ag-Grid – Update to improve performance and compatibility.
  • LZ-2889 – Remove unnecessary files – Clean up SCSS and other files.
  • LZ-2888 – Dependency cleanup – Improve stability.
  • LZ-2887 – Trigger form – Refine form, time-range, and HTML template syntax.
  • LZ-2885 – Chart service – Reduce service file size.
  • LZ-2883 – Translation check – Remove hardcoded translations.
  • LZ-2882 – UI refactor – Improve performance and maintainability.
  • LZ-2989 – Trigger actions scalability – Scalable mechanism for triggers in Kubernetes.
  • LZ-2970 – Sphinx search replacement – Evaluate replacements for Ubuntu compatibility.
  • LZ-2765 – DOS protection – Enable authentication for internal and external communication.
  • LZ-3028 – CDR Loader – Updated for clarity and accuracy.
  • LZ-2934 – Trigger script example – Switch example from Perl to Python.
  • LZ-2910 – Meraki raw port – Added details on using the raw port.
  • LZ-2909 – Subquery typo – Correct API key notation.
  • LZ-2907 – tcpdump – Updated command options.
  • LZ-2894 – Subquery example – Enhanced examples.
  • LZ-2876 – UI docs link – Fixed broken link in Forwarding Module docs.
  • LZ-2977 – Setting name – Rename "Offline" to "Air Gapped".
  • LZ-2947 – API invalid path – Improve response handling for invalid paths.

Note: Some issues below are a result of an architecture change in v6.35 to support the upcoming Kubernetes-based release. Any UI-related bugs refer to the new UI, not the legacy UI.

  • LZ-3025 – Query Events – Resolve divide by zero.
  • LZ-2991 – SEC & Script-Server – Fix logging for execution scripts and escaping for SEC forwarder.
  • LZ-2987 – syslog-ng buffer – Fix persistent disk buffer behavior.
  • LZ-2981 – Cardinality timeouts – Increase timeouts for large datasets.
  • LZ-2965 – Sphinx filter – Correct argument handling.
  • LZ-2946 – EULA – Allow bypass during installation.
  • LZ-2901 – Docker syslog – Reduce excessive entries.
  • LZ-2892 – Special characters – Improve user tag handling.
  • LZ-2890 – Estreamer security – Apply security updates.
  • LZ-2948 – Stacked bar chart – Fix dropdown and limit display.
  • LZ-2945 – Email trigger – Fix external email handling.
  • LZ-2942 – Widget order – Correct add-from-search ordering.
  • LZ-2939 – Autofocus – Fix input autofocus.
  • LZ-2938 – Widget placement – Correct initial placement.
  • LZ-2928 – Pagination – Fix reset to first page.

UI Updates

  • New user interface (UI) – Updated, intuitive layout. To enable UI2, navigate to Settings → Front and set a port for the "UI2" setting. Optionally switch default ports 80/443 to UI2 and move the classic UI to alternative ports such as 8888/8443.
  • Cisco Call Manager app – Adds dashboards, rules, and triggers. Enable the app from Settings → App Store.
  • LZ-2782 – Query bar selections – Clear individual selections in dropdowns.
  • LZ-2899 – UI2 system settings – New schema API for system settings.
  • LZ-3027 – Quick access searching – Add ctrl-k/cmd-k popup.
  • LZ-3022 – Unified shadows – Standardized shadows across the new UI.
  • LZ-3015 – Event count – Adjust display for accuracy.
  • LZ-3010 – Calendar – Resolve issues with improved usability.
  • LZ-3003 – UI research and testing – Ongoing improvements.
  • LZ-2995 – ag-Grid update – Upgrade to latest version.
  • LZ-2994 – Styling review – Unify shadows and popups styling.
  • LZ-2982 – Trigger editing stability – Stabilize editing when connected to development environments.
  • LZ-2963 – Table widget time range – Persist time range when interacting.
  • LZ-2954 – Light theme – Continue development.
  • LZ-2949 – Filter component refactor – Refactor filter components.
Release Notes | LogZilla Documentation