Skip to content

Releases: carbonblack/cb-event-forwarder

Release of v3.8.4 cb-event-forwarder

06 Oct 15:33
Compare
Choose a tag to compare

Event Forwarder 3.8.4 improves the customer experience in the following areas:

  • The service correctly processes bundled, compressed event data.

Features:

  • The service employs a more efficient compression engine.

Release of v3.8.3 cb-event-forwarder

16 Sep 15:41
Compare
Choose a tag to compare

Bug Fixes / Changes

  • The service no longer panics and fails to run when a syslog port number is not provided. The system assumes a default port of 514 and carries on.
  • The service correctly interprets S3 bucket locations stated as <Temp File Location>:<region>:<bucket_name>

Release of v3.8.2 cb-event-forwarder

09 Aug 21:05
Compare
Choose a tag to compare

Features

  • Support for dockerized EDR added via new event-forwarder docker image.

Bug Fixes / Changes

  • Adapt to change in RabbitMQ authentication in EDR v7.7.0, but maintain backwards compatibility.
  • Fixed issue that could cause event forwarder to lock up if excessive amount of time happened without logging events

Release of v3.7.6 cb-event-forwarder

20 Jul 19:04
Compare
Choose a tag to compare

Bug Fixes / Changes

  • This change enables EF to properly authenticate with RabbitMQ under EDR 7.7.0. It is also backwards-compatible with EDR 7.6.2 and older.

Release of v3.8.1 cb-event-forwarder

08 Mar 16:14
Compare
Choose a tag to compare

v3.8.1

Bug Fixes / Changes

  • Fix a bug where timestamps were not included with certain event-types
  • Fix a bug where messages were silently dropped in certain error cases
  • Improve hostname detection
  • Better error logging for configuration errors

Release of v3.8.0 cb-event-forwarder

06 Jan 20:51
Compare
Choose a tag to compare

Features

  • The new EDR event task.error.logged is now supported. This event is enabled using task_errors=ALL in the EF configuration file. It is also supported in the EDR console configuration page for EF, starting with EDR v7.5.0.
  • compression_type=lz4 A new compression type, lz4 is now available. The gzip type is still the default. LZ4 is a lossless data compression algorithm that is focused on compression and decompression speed.
  • log_level=DEBUG can be used to control logging level

Bug Fixes / Changes

  • Log files are now retained and rolled over after restarts.
  • Under some circumstances the EF process would not terminate when shut down. This is no longer the case.
  • S3 output has been improved.
  • Protobuf processing performance improvements

v3.7.5

13 Dec 16:40
Compare
Choose a tag to compare

CB EDR Event Forwarder Changelog

v3.7.5

Bug Fixes / Changes

  • Fixed a bug allowing NetconnBlocked messages to be written out

Release of 3.7.4 cb-event-forwarder

13 Jan 14:01
Compare
Choose a tag to compare
  • Bugfix: Changed the startup permissions script to operate more gracefully on systems where EDR is not installed.
  • Packages are now available for EL6, EL7, and EL8 platforms.

Release of 3.7.3 cb-event-forwarder

30 Oct 20:23
cfbf919
Compare
Choose a tag to compare

v3.7.3

Bug Fixes / Changes

  • Fixed an error in the HTTPOutput that would cause the forwarder to send empty-files to the remote even when not configured to do so.

Release of 3.7.2 cb-event-forwarder

15 Oct 16:32
a0dcfe8
Compare
Choose a tag to compare

v3.7.2

Features

  • EDR Event Forwarder automatically sets cb_server_url and cb_server_name using the FQDN of the host it is running on , unless these options are explicitly set in the configuration file
  • EL8 Support!

Bug Fixes / Changes

  • HTTP Output handler detects errors at runtime, and will not allow configurations lacking a protocol-prefix like http(s)://