Releases: carbonblack/cb-event-forwarder
Releases · carbonblack/cb-event-forwarder
Release of v3.8.4 cb-event-forwarder
Event Forwarder 3.8.4 improves the customer experience in the following areas:
- The service correctly processes bundled, compressed event data.
Features:
- The service employs a more efficient compression engine.
Release of v3.8.3 cb-event-forwarder
Bug Fixes / Changes
- The service no longer panics and fails to run when a syslog port number is not provided. The system assumes a default port of 514 and carries on.
- The service correctly interprets S3 bucket locations stated as <Temp File Location>:<region>:<bucket_name>
Release of v3.8.2 cb-event-forwarder
Features
- Support for dockerized EDR added via new event-forwarder docker image.
Bug Fixes / Changes
- Adapt to change in RabbitMQ authentication in EDR v7.7.0, but maintain backwards compatibility.
- Fixed issue that could cause event forwarder to lock up if excessive amount of time happened without logging events
Release of v3.7.6 cb-event-forwarder
Bug Fixes / Changes
- This change enables EF to properly authenticate with RabbitMQ under EDR 7.7.0. It is also backwards-compatible with EDR 7.6.2 and older.
Release of v3.8.1 cb-event-forwarder
v3.8.1
Bug Fixes / Changes
- Fix a bug where timestamps were not included with certain event-types
- Fix a bug where messages were silently dropped in certain error cases
- Improve hostname detection
- Better error logging for configuration errors
Release of v3.8.0 cb-event-forwarder
Features
- The new EDR event
task.error.logged
is now supported. This event is enabled usingtask_errors=ALL
in the EF configuration file. It is also supported in the EDR console configuration page for EF, starting with EDR v7.5.0. compression_type=lz4
A new compression type,lz4
is now available. Thegzip
type is still the default. LZ4 is a lossless data compression algorithm that is focused on compression and decompression speed.log_level=DEBUG
can be used to control logging level
Bug Fixes / Changes
- Log files are now retained and rolled over after restarts.
- Under some circumstances the EF process would not terminate when shut down. This is no longer the case.
- S3 output has been improved.
- Protobuf processing performance improvements
v3.7.5
CB EDR Event Forwarder Changelog
v3.7.5
Bug Fixes / Changes
- Fixed a bug allowing NetconnBlocked messages to be written out
Release of 3.7.4 cb-event-forwarder
- Bugfix: Changed the startup permissions script to operate more gracefully on systems where EDR is not installed.
- Packages are now available for EL6, EL7, and EL8 platforms.
Release of 3.7.3 cb-event-forwarder
v3.7.3
Bug Fixes / Changes
- Fixed an error in the HTTPOutput that would cause the forwarder to send empty-files to the remote even when not configured to do so.
Release of 3.7.2 cb-event-forwarder
v3.7.2
Features
- EDR Event Forwarder automatically sets cb_server_url and cb_server_name using the FQDN of the host it is running on , unless these options are explicitly set in the configuration file
- EL8 Support!
Bug Fixes / Changes
- HTTP Output handler detects errors at runtime, and will not allow configurations lacking a protocol-prefix like http(s)://