v19.392-4

• Bug Fix: Source configuration requests were not sent to the correct deployment. SUMO-188764
• Bug Fix: Duplicate Windows events ingested after upgrading to version 19.386-16 and the Windows API returned an incorrect order of events. SUMO-188328
• Bug Fix: The Docker Log Source does not retain the indentation of log messages. SUMO-186127
• Bug Fix: Nullpointerexception resulted in duplication of events SUMO-186098
• Bug Fix: Writable zero byte file is included in sumocollector Debian and RPM installers. SUMO-185827
• Bug Fix: Log4j vulnerability found during Collector installation via RPM method and Docker image. SUMO-185013
• Bug Fix: Local File Source multiline boundary regex idle timeout issue. SUMO-182739
• Bug Fix: Better handling of Active Directory Inventory in Installed Collector. SUMO-181018

v19.386-16

• Bundled JRE version upgraded to 8.322.06.2. SUMO-184631
• Bug Fix: Memory leak in Windows Events, record number logic for standard event channels. SUMO-181448
• Bug Fix: Local Windows Event Log Source ingested in legacy format during upgrade when JSON format selected.
  SUMO-176205
• Bug Fix: Collector upgrade failure resulting in collector service stopping. SUMO-184405
• Bug Fix: Log4j vulnerability in RPM and Debian packages. SUMO-185013
• Bug Fix: Windows Active Directory Source has more default attributes. SUMO-181629
• Bug Fix: Security fix for Script Source. SUMO-182703

v19.361-18

Update - Log4j upgraded to 2.17.0 to fix the zero-day exploit affecting the popular Apache Log4j utility (CVE-2021-45105). (Bug fix SUMO-181487)

v19.375-4

• Bundled JRE version upgraded to 8.312.07.1. SUMO-178114
• Log4j upgraded to 2.17.1.
• Bug Fix: Windows events were duplicated due to an issue with bookmarking logic. SUMO-178420
• Beta Release: Added support for an upcoming feature that allows you to restart your Installed Collector from the collection management
  page in the Sumo Logic web interface. SUMO-171963

v19.361-8

• The installer is now a trusted vendor of the macOS.
• The Remote Windows Performance Monitor Log Source is removed and no longer supported.

v19.361-4

• Bug Fix: Windows Event Log Sources using Allowlist or Denylist filters could filter more data than expected.

v19.361-3

• Bundled JRE upgraded to 8.302.08.1.1.
• Remote Windows Event Log Sources now support autodiscovery of domain controllers and event collection.
• AWS S3 Archive Sources now support ingestion from your Archive with five-minute granularity.
• Bug Fix: Registration warnings are logged as WARN types.
• Bug Fix: No error message was thrown when creating a Source with an empty logName.
• Bug Fix: Fixed deadlock that caused remote configuration failure.
• Bug Fix: High thread usage.
• Bug Fix: Single backslashes were making Active Directory JSON objects invalid in some scenarios.
• Bug Fix: Failure to uninstall on macOS.

v19.351-4

• You can collect inventory data from Active Directory Database with a Windows Active Directory Source.
• Windows Event Log Sources now have filters to allow or deny specific Windows Event IDs.
• Bundled JRE version upgraded to 8.292.10.2.
• Switched Docker Java dependency from forked version to open source version 3.2.1.
• Security upgrades:
  • Google Guava upgraded to 30.1.1.
  • Log4j upgraded to 2.13.3.
  • Netty upgraded to 4.1.46.
• Bug Fix: Installation could fail on Windows systems when the autorun registry was set.
• Bug Fix: Collector registration failed with the correct hostname when deployed using an AMI in an autoscaling group.
• Bug Fix: Quota reports are now sent after data is successfully collected.

v19.338-5

• Bundled JRE version upgraded to 8.282.08.1.
• Bundled Jackson version upgraded to 2.11.2.
• Beta release: Windows Event Sources can now collect forwarded events from a Windows Event Collector.
• Bug Fix: Fixed Docker metrics ingestion with host network mode.
• Bug Fix: Fixed Docker Sources malformed chunk errors for docker-java dependency where Jersey version was upgraded from 2.23 to 2.30.
• Bug Fix: Fixed a permission issue encountered in redacted version 19.338-3 when using the runAs parameter during installation or an upgrade.
• Bug Fix: Fixed a Windows Events Log Source data duplication issue encountered in redacted version 19.338-4 when upgrading/downgrading the collector version.

v19.319-111

• Bug fix: upgraded docker-java dependency for installed collector, where jersey version has been upgraded from 2.23 to 2.30
• Add SUMO_ENABLE_SCRIPTS option