Request Demo

2026R1.3

  • May 12, 2026

Release Summary

For migration, added alert history, dashboards and report, Logstash configs and many more. Added support for Enterprise Linux 10 variants. Fixed bugs, made improvements. [Video Overview]

Added

  • Added migration and translation of alert queries and alerts to ECS [GL:NLS#847] – JM
  • Added migration of alert history [GL:NLS#852] – JM
  • Added migration of audit log [GL:NLS#854] – JM
  • Added migration of command subsystem jobs [GL:NLS#856] – JM
  • Added migration of dashboards and reports [GL:NLS#853] – JM
  • Added migration of Logstash configuration [GL:NLS#857] – JM
  • Added migration of snapshots & maintenance settings [GL:NLS#855] – JM
  • Added support for CentOS Stream 10, Oracle 10, and RHEL 10 [GL:NLS#691] – TL
  • Added the ability to exclude terms to the term panel [GL:NLS#519] – TL
  • Added the ability to search for columns to the log table panel [GL:NLS#747] – TL

Fixed

  • Fixed allowing invalid Lucene queries [GL:NLS#818] – JM
  • Fixed an issue where %field.[fieldname]% macros in email templates did not resolve for real-time alerts [GL:NLS#864] – TL
  • Fixed an issue where closed indices would appear in the index selection list when migrating [GL:NLS#877] – TL
  • Fixed an issue where dashboard names would capitalize ‘and’ and ‘or’ [GL:NLS#263] – TL
  • Fixed an issue where deleting a report did not delete associated scheduled reports [GL:NLS#114] – TL
  • Fixed an issue where long log messages overflowed and were not fully visible in Log Entry Details [GL:NLS#745] – TL
  • Fixed an issue where natural language queries returned blank results due to using deprecated model versions [GL:NLS#799] – TL
  • Fixed an issue where natural language queries did not use a UTC offset in generated timestamps [GL:NLS#139] – TL
  • Fixed an issue where system status and NCPA status checks incorrectly used proxy configuration [GL:NLS#869] – TL
  • Fixed an issue where tabs could not be added within new Inputs, Filters, and Outputs on the Global Config page [GL:NLS#410] – TL
  • Fixed an issue where the ‘Reverse DNS Disabled’ message would incorrectly appear when reverse DNS was enabled [GL:NLS#876] – TL
  • Fixed an issue where the shipper.py script would fail due to invalid syntax [GL:NLS#878] – TL
  • Fixed an issue where the term panel’s missing field option displayed placeholder labels [GL:NLS!736] – TL

Updated

  • Improved JSON formatting in the log table panel and log entry details for better readability [GL:NLS#866] – TL
  • Improved pagination functionality and layout in the table panel [GL:NLS#543] – TL
  • Improved styling for filters [GL:NLS#746] – TL
  • Improved styling on the Snapshots & Maintenance page [GL:NLS#872] – TL
  • Improved the %last10alertlogs% macro to be configurable to any number of logs [GL:NLS#180] – TL
  • Improved the ‘Execute Script’ alert notification method to support the same macros as email templates [GL:#850,#862] – TL
  • Improved the log table panel to save column order and sort order [GL:NLS#739] – TL
  • Reduced unnecessary PHP log warnings when accessing pages [GL:NLS#838] – TL
  • Renamed the System Status dropdown to Instance Status and added CPU, Memory, and Disk metrics [GL:NLS#587,#798] – TL
  • Updated knowledge base links to point to current documentation [GL:NLS#880] – JS
  • Updated NCPA to use /bin/bash for .sh plugins by default [GL:NLS#873] – TL
  • Updated the instance status page to show JVM Heap Used and JVM Heap Free instead of Memory Used and Memory Free [GL:#891] – TL
  • Updated the report generation process to log events and event output to chromium_browser.log [GL:NLS#865] – JS