Skip to main content

Version 2.1.0 Released

RegionRelease Date
USAugust 5, 2026, Wednesday — 06:00 EDT (10:00 UTC)
AUSAugust 5, 2026, Wednesday — 22:00 AEST (12:00 UTC)
EuropeAugust 5, 2026, Wednesday — 21:00 CEST (19:00 UTC)

This release brings major workflow improvements to pipeline management, expands deployment flexibility for Directors, and strengthens multi-tenant data ingestion. The new Pipeline Editor and Pipeline Source Control bring structured, single-page editing with review-and-approval workflows directly into the platform. Directors gain Serverless Mode and configurable Persistent Storage, opening the door to container-native and cloud deployments. Multi-tenant ingestion support across seven device types, twelve new device and target integrations, and a broad set of stability and usability fixes round out this release.

🚀 New Features​

  • Pipeline Editor — Pipelines can now be edited and debugged entirely from a single page. Teams no longer need to navigate between multiple screens to build, review, and troubleshoot pipeline logic, making configuration faster and far less error-prone.

  • Pipeline Source Control — Pipelines no longer deploy directly to Directors. A lightweight source control workflow now sits between editing and deployment, requiring review and approval so problems are caught before they reach production.

  • Director Serverless Mode — Directors were previously limited to installation on traditional operating systems such as Windows and Linux. With this release, Directors can now also be deployed to Kubernetes, Docker, Azure Container Instances, and Azure Container Apps, giving teams the flexibility to run in modern, cloud-native infrastructure.

  • Director Persistent Storage — Directors now support configurable data storage behavior, with a choice between in-memory, crash-resistant, and fully persistent storage modes. Teams can tailor this setting to their specific needs, balancing raw performance against data durability.

  • Source-Based Monitoring Rule Creation — Syslog, TCP, UDP, and HTTP devices now support source-based monitoring rule creation, allowing teams to define separate rules for different sources behind the same device. This extends the alerting mechanism with far more granular control over when and how alerts are triggered.

🔧 Improvements​

New Devices​

  • OTLP — OpenTelemetry Protocol device integration for ingesting telemetry data from OTLP-compliant sources.
  • SNMP Trap — Device integration for capturing SNMP trap notifications from monitored network equipment.

New Targets​

  • NATS — Deliver logs to NATS for lightweight, high-performance messaging integration.
  • MQTT — Forward logs to MQTT brokers, extending reach into IoT and lightweight messaging environments.
  • Snowflake (S3) — Deliver logs to Snowflake via S3-based staging for scalable data warehousing.
  • Snowflake (AZBlob) — Deliver logs to Snowflake via Azure Blob-based staging, extending Snowflake connectivity to Azure environments.
  • Databricks (S3) — Send logs to Databricks via S3-based staging for advanced analytics workflows.
  • Databricks (AZBlob) — Send logs to Databricks via Azure Blob-based staging, extending Databricks connectivity to Azure environments.
  • IBM Cloud Logs — Deliver logs directly to IBM Cloud Logs for centralized visibility in IBM Cloud environments.
  • IBM Event Streams — Stream logs into IBM Event Streams to feed downstream event-driven workflows.
  • IBM QRadar — Forward logs to IBM QRadar for seamless integration with existing SIEM workflows.
  • CrowdStrike — Deliver logs to CrowdStrike, extending native integration with endpoint security workflows.

Data Ingestion​

  • Multi-Tenant Ingestion Support — Elastic, Splunk, OTLP, HTTP, Syslog, UDP, and TCP devices now support multi-tenant ingestion, so a single device can separate and collect data belonging to multiple tenants.

Pipelines​

  • Improved Pipeline Selection — Pipeline selection fields now support choosing a specific child pipeline instead of only the root pipeline, making configuration faster and more precise.

Rules & Alerts​

  • Trigger Stability Improvements — Rules and alert triggers received broad stability improvements, with the trigger mechanism now operating more reliably under real-world conditions.

Live Data​

  • Multi-Director Live Data Collection — Devices connected to multiple Directors now continue collecting Live Data as long as at least one connected Director remains active.

File Datasets​

  • Decoder Field — Windows and Linux File Datasets now include a decoder field, giving teams finer control over how collected file data is parsed and interpreted.

Security​

  • Managed Identity Support — Microsoft Graph API and Sentinel devices now support Managed Identity authentication, simplifying credential management and aligning with Microsoft's recommended security practices.

Device Configuration​

  • CCF Device Enhancements — CCF device configuration now supports validation before saving, and placeholder values can be selected from a list instead of being typed manually, reducing setup errors and speeding up configuration.

Director Management​

  • Advanced Route Dependency Check — Director deletion now checks whether the Director is linked to an Advanced Route and blocks deletion if it is, preventing the accidental removal of Directors that are still in active use.

Audit Log​

  • Expanded Audit Log Coverage — Previously missing audit log entries have been added to relevant detail pages, giving teams a more complete and trustworthy audit trail across the platform.

Syslog​

  • UDP Collection Alongside TCP Mode — Syslog devices configured in TCP mode can now also collect data over UDP, giving teams the flexibility to receive syslog traffic over both protocols from a single device configuration.

🐛 Bug Fixes​

Devices & Targets​

  • Schema Selection Not Reflected — Fixed an issue where a selected schema on devices and targets appeared as unselected in the interface, ensuring configuration screens accurately reflect the selections users have made.

Agentless Installations​

  • Verify Connection False Errors — Fixed an issue where the Verify Connection step in agentless installations returned an error despite a working connection, ensuring the step reliably reflects actual connection status.

User Management​

  • Preferences Update Error for Main Tenant — Fixed an issue where the main tenant user encountered an error when updating preferences while operating within a sub-tenant, ensuring preference changes can be made smoothly regardless of tenant context.

Director & Agent​

  • Incorrect Status After Reinstall Confirmation — Fixed an issue where Director and Agent status displayed as not-connected after a reinstall was confirmed, ensuring the interface reflects the correct connection state.

File Datasets​

  • Pipeline Selection Persisting After Removal — Fixed an issue where removing a pipeline selection from Windows and Linux File Datasets did not clear it from the configuration, ensuring configurations accurately reflect the current pipeline selection.

Pipelines​

  • Update Notification Persisting After Confirmation — Fixed an issue where confirmed pipeline updates continued to display as pending, ensuring the interface accurately reflects the current update status.

Tables​

  • Pagination Breaking After Search — Fixed an issue where searching within tables across the platform disrupted pagination, ensuring consistent and reliable navigation through search results.

Monitoring​

  • Log Stream Column Blank in Chromium Browsers — Fixed an issue where the Log Stream column appeared blank in Chromium-based browsers, ensuring consistent visibility across all supported browsers.

Usage & Limits​

  • Incorrect Display in Usage and Limit Data — Fixed an issue causing incorrect display of Usage and Limit data, ensuring teams see accurate consumption information at all times.

Stats​

  • Disabled Count Showing as Zero — Fixed an issue where the disabled item count in the Stats Overview always displayed as zero, ensuring accurate reporting of disabled devices and targets.