TIBCO LogLogic Unity Release Notes

Transcription

1 Software Release July 2015 Two-Second Advantage

2 2 Important Information SOME TIBCO SOFTWARE EMBEDS OR BUNDLES OTHER TIBCO SOFTWARE. USE OF SUCH EMBEDDED OR BUNDLED TIBCO SOFTWARE IS SOLELY TO ENABLE THE FUNCTIONALITY (OR PROVIDE LIMITED ADD-ON FUNCTIONALITY) OF THE LICENSED TIBCO SOFTWARE. THE EMBEDDED OR BUNDLED SOFTWARE IS NOT LICENSED TO BE USED OR ACCESSED BY ANY OTHER TIBCO SOFTWARE OR FOR ANY OTHER PURPOSE. USE OF TIBCO SOFTWARE AND THIS DOCUMENT IS SUBJECT TO THE TERMS AND CONDITIONS OF A LICENSE AGREEMENT FOUND IN EITHER A SEPARATELY EXECUTED SOFTWARE LICENSE AGREEMENT, OR, IF THERE IS NO SUCH SEPARATE AGREEMENT, THE CLICKWRAP END USER LICENSE AGREEMENT WHICH IS DISPLAYED DURING DOWNLOAD OR INSTALLATION OF THE SOFTWARE (AND WHICH IS DUPLICATED IN THE LICENSE FILE) OR IF THERE IS NO SUCH SOFTWARE LICENSE AGREEMENT OR CLICKWRAP END USER LICENSE AGREEMENT, THE LICENSE(S) LOCATED IN THE LICENSE FILE(S) OF THE SOFTWARE. USE OF THIS DOCUMENT IS SUBJECT TO THOSE TERMS AND CONDITIONS, AND YOUR USE HEREOF SHALL CONSTITUTE ACCEPTANCE OF AND AN AGREEMENT TO BE BOUND BY THE SAME. This document contains confidential information that is subject to U.S. and international copyright laws and treaties. No part of this document may be reproduced in any form without the written authorization of TIBCO Software Inc. TIBCO, LogLogic, and Two-Second Advantage are either registered trademarks or trademarks of TIBCO Software Inc. in the United States and/or other countries. Enterprise Java Beans (EJB), Java Platform Enterprise Edition (Java EE), Java 2 Platform Enterprise Edition (J2EE), and all Java-based trademarks and logos are trademarks or registered trademarks of Oracle Corporation in the U.S. and other countries. All other product and company names and marks mentioned in this document are the property of their respective owners and are mentioned for identification purposes only. THIS SOFTWARE MAY BE AVAILABLE ON MULTIPLE OPERATING SYSTEMS. HOWEVER, NOT ALL OPERATING SYSTEM PLATFORMS FOR A SPECIFIC SOFTWARE VERSION ARE RELEASED AT THE SAME TIME. SEE THE README FILE FOR THE AVAILABILITY OF THIS SOFTWARE VERSION ON A SPECIFIC OPERATING SYSTEM PLATFORM. THIS DOCUMENT IS PROVIDED AS IS WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. THIS DOCUMENT COULD INCLUDE TECHNICAL INACCURACIES OR TYPOGRAPHICAL ERRORS. CHANGES ARE PERIODICALLY ADDED TO THE INFORMATION HEREIN; THESE CHANGES WILL BE INCORPORATED IN NEW EDITIONS OF THIS DOCUMENT. TIBCO SOFTWARE INC. MAY MAKE IMPROVEMENTS AND/OR CHANGES IN THE PRODUCT(S) AND/OR THE PROGRAM(S) DESCRIBED IN THIS DOCUMENT AT ANY TIME. THE CONTENTS OF THIS DOCUMENT MAY BE MODIFIED AND/OR QUALIFIED, DIRECTLY OR INDIRECTLY, BY OTHER DOCUMENTATION WHICH ACCOMPANIES THIS SOFTWARE, INCLUDING BUT NOT LIMITED TO ANY RELEASE NOTES AND "READ ME" FILES. Copyright TIBCO Software Inc. ALL RIGHTS RESERVED. TIBCO Software Inc. Confidential Information

3 3 Contents TIBCO Documentation and Support Services...4 Features...5 Closed Issues...7 Known Issues...8

4 4 TIBCO Documentation and Support Services Documentation for this and other TIBCO products is available on the TIBCO Documentation site: Documentation on the TIBCO Documentation site is updated more frequently than any documentation that might be included with the product. To ensure that you are accessing the latest available help topics, please visit us at Product-Specific Documentation Documentation for TIBCO products is not bundled with the software. Instead, it is available on the TIBCO Documentation site. To directly access documentation for this product, double-click the following file: TIBCO_HOME/release_notes/TIB_logu_version_docinfo.html where TIBCO_HOME is the top-level directory in which TIBCO products are installed. On Windows, the default TIBCO_HOME is C:\tibco. On UNIX systems, the default TIBCO_HOME is /opt/tibco. The following documents for this product can be found in the TIBCO Documentation site: TIBCO LogLogic Unity Installation and Configuration Guide TIBCO LogLogic Unity User's Guide TIBCO LogLogic Unity Developer's Guide TIBCO LogLogic Unity Tutorials How to Contact TIBCO Support For comments or problems with this manual or the software it addresses, contact TIBCO Support: For an overview of TIBCO Support, and information about getting started with TIBCO Support, visit this site: If you already have a valid maintenance or support contract, visit this site: Entry to this site requires a user name and password. If you do not have a user name, you can request one. How to Join TIBCOmmunity TIBCOmmunity is an online destination for TIBCO customers, partners, and resident experts. It is a place to share and access the collective experience of the TIBCO community. TIBCOmmunity offers forums, blogs, and access to a variety of resources. To register, go to:

5 5 Features This section lists new and enhanced features of LogLogic Unity. New Features Common Event Format (CEF) Parser Added support for ArcSight Common Event Format log events. CEF defines a syntax for log events comprised of a standard header and a variable extension, formatted as key-value pairs. Regular Expression (REGEX) Parser Added support for regular expression parsing rules. REGEX supports the usage of regular expression groups using the PCRE format for building expressions. File Upload Added support for uploading custom file based data to the system. This gives you the capability to upload your own personal data so that you may leverage the system for analysis of this data. LogLogic Unity Events Collection Added support for LogLogic Unity to ingest all generated log events from the system. This provides the capability to troubleshoot and debug LogLogic Unity issues using the standard features available in the product. TIBCO LogLogic Log Management Intelligence (LMI) Role Based Access Control (RBAC) Added support for LogLogic Unity to use LogLogic LMI for RBAC authentication and control. This allows LogLogic Unity to leverage the user security profiles and permissions from LogLogic LMI giving users the same access and visibility to devices and events in LogLogic Unity. This requires LogLogic LMI v LogLogic LMI Device Groups Integration Added support for device groups in LogLogic Unity. This enables a synchronization between the two systems to allow LogLogic Unity users the ability to leverage device groups created in LogLogic LMI. This requires LogLogic LMI v LogLogic LMI Devices Integration Added support for devices in LogLogic Unity. This allows users the ability to leverage device names that have been defined in LogLogic LMI to also be leveraged in LogLogic Unity when performing various activities. This requires LogLogic LMI v Domain Management Added support for Domains to store event data. Domains allow administrators to segment data to optimize performance in the system and to limit access to certain types of data. Syslog Notifications Added support for alerts to send notifications via syslog. This gives the ability to send a formatted event to a third party system via syslog.

6 6 Enhanced Features Key-Value Pair (KVP) Parser Added support for both pre-pending a Regex pattern and appending a Regex pattern. This offers greater flexibility and control when dealing with KVP events that are not well formatted. Also added support for last key definition. This gives the additional capability to denote a last key which allows the parser to work with a key which has special characters and spaces in the value. Source Configuration Added support for multiple parsing rules per source configuration. This allows support for multiple permeations from a log source making it possible to have one source configuration for multiple patterns. Added additional improvements to workflow to simplify working with complex data sets and give greater visibility on parser to event interaction. LogLogic LMI Filter Forwarding Added additional support for filtering from LogLogic LMI to LogLogic Unity. This allows administrators to reduce data, as needed, to LogLogic Unity to reduce the load on the system. Java Support This requires LogLogic LMI v LogLogic Unity now supports Oracle Java Runtime Environment (JRE) update 45. If not using the JRE that is bundled with the installer, you must use the supported version. Search Performance Updated system caching methods to increase the speed of searches when performing searches with large result sets or when performing searches with aggregation functions. Faceted Search Added filtering functionality to the key-value list allowing for greater flexibility when performing faceted searching on results. In addition LogLogic Unity now supports editing existing facets to quickly find information.

7 7 Closed Issues The closed issues in LogLogic Unity are listed below. Key LLA-2572 LLA-2566 LLA-2293 LLA-2292 LLA-2291 LLA-2290 LLA-2289 LLA-1975 LLA-1970 LLA-1966 LLA-1844 LLA-1777 LLA-1119 Summary LogLogic Unity search queries using REST API do not show correct result set when the LIMIT keyword is set too high. When parsing special characters in the key-value pairs an error is displayed. The wildcard search does not work correctly on partial words; for example, "roo?" cannot find "root". The LogLogic Unity installer should not allow installation by the root user. The./lld commands should not be run by the root user. When editing a search query in the Search field, the cursor resets unexpectedly. Sometimes the./lld stop command hangs when trying to stop services. Occasionally after starting the LogLogic Unity system, search queries fail due to connection issue. Sometimes starting the LogLogic Unity system fails due to a connection timeout issue. The Home and Delete keys do not work correctly in the Search field. An OutOfMemoryError is shown in the data node when number of index files exceed When trying to select a user-defined source configuration or view all source configurations in the list, it may not be always possible to scroll down to them. When defining the ECL rule in the correlation Blok, the Format statement option does not work correctly.

8 8 Known Issues The known issues in LogLogic Unity are listed below. Key LLA-2836 Summary Summary: Running a search query for large data will not work because of the database connection loss when not using the USE statement in the query. Workaround: Run search queries using at least one source; for example, USE VMware_vCenter LIMIT LLA-2834 LLA-2544 LLA-2284 Summary: Clicking on the Alert's group count does not show the expected results because of the "too many boolean clauses" error. Workaround: Do not click on the count link if the number is greater than Summary: Running filter on a value shows an error in the GUI when a session has been running for some time with query results displayed in the GUI. Workaround: Close the browser window and log into the system again. Summary: The Content Assist feature, that shows typeahead or contextual matches as you type in the Search field, intermittently stops working. Workaround: Click outside of the frame and then click again in the Search field to fix this issue.