Logmanager documentation
Toggle Dark/Light/Auto mode Toggle Dark/Light/Auto mode Toggle Dark/Light/Auto mode Back to homepage

3.12.0

Starting from this version, Rsyslog support for TLS < 1.2 has been disabled. Log sources connecting to TLS enabled ports 6514 (Syslog) and 20515 (RELP) have to use TLS version 1.2 or newer.

New features

  • Improved parsing of filebeat logs. In particular, previously unparsed source file path will now be indexed in field msg.filepath which will help distinguish between source files from which you are pulling logs using filebeat.
  • The limit for maximum count of allowed TCP sessions for TLS Syslog (port 6514) has been raised.
  • Added an option to disable Filebeat/Winlogbeat config updates via registry setting. More here

BC breaks

  • Dropped support of Rsyslog TLS < 1.2

Parsing

  • Deleted IP prefix list Kerio Connect.

Bug fixes

  • For Beats agents, the bulk delete action now respects filtered records
  1. filter beat agents
  2. select all filtered agents
  3. delete filtered agents
Bulk delete fix