Software Lifecycle Policy and Release Notes

LogZilla provides a defined lifecycle for each software release to ensure reliability, performance improvements, and timely security updates.

Support Phases

End of Support (EOS).

A release receives active support, including feature updates, bug fixes, and noncritical enhancements, for one year from its initial release date.

End of Life (EOL).

A release continues to receive security fixes and critical issue patches for two years from its initial release date. After this period, the release reaches EOL and no further updates are provided.

Customer Responsibilities

Customers are encouraged to remain on supported versions to receive the latest improvements, ensure platform stability, and maintain compliance with current security practices. Upgrading regularly helps avoid operating on outdated or unsupported components.

Extended Support

For deployments requiring an extended maintenance window beyond the standard policy, additional support options may be made available upon request.

Release Lifecycle Dates

Release Notes

This page lists the last three releases. Older notes are available in source control.

Version v6.40

Notable Features

• LogZilla AI Configuration - Config is now handled via the Admin -> Settings in the UI vs on disk
• Event Taxonomies - All apps now adhere to designated Taxonomy standards and include new tags for many filterable/useful drill-down tags such as Vendor, Product, MITRE, and ~150 different Compliance Standards such as PCI-DSS, HIPAA, SOX, GDPR, etc.

API Updates

• LZ-3271 - VMware App Update - Updated the VMware application with improved event generation capabilities.
• LZ-3256 - F5 Dashboard - Added a new dashboard for F5 device monitoring.
• LZ-2657 - Dashboard Metric Badges - Added count-style badge widgets to application dashboards for improved data visualization.
• LZ-3297 - Watcher CPU Optimization - Resolved high CPU usage caused by unnecessary status checks in the watcher component.
• LZ-3293 - Taxonomy Consolidation - Created a unified source for application taxonomies and MITRE ATT&CK mappings.
• LZ-3277 - Trigger Configuration Regeneration - Fixed an issue where trigger configurations were not properly regenerated after app reinstallation.
• LZ-3276 - Upgrade Version Detection - Corrected version detection during upgrades to properly identify the latest available release.
• LZ-3274 - App Standards Compliance - Updated multiple applications to follow new taxonomy standards and removed duplicate rules.
• LZ-3244 - Tag Naming Consistency - Standardized IP-related tag names across applications to reduce high cardinality issues.
• LZ-3230 - User-Defined MCP Servers - Added support for user-defined MCP servers to enhance AI context for queries.
• LZ-3227 - Container File Limits - Configured appropriate file descriptor limits in containers for improved stability.
• LZ-3221 - SEC Rule Support - Modified App Store applications to support Event Correlation example configurations.
• LZ-3173 - Start Command Timeout Flag - Fixed the --no-timeout switch for the logzilla start command.
• LZ-3157 - SonicWall App Enhancements - Added user login and VPN session tracking tags to the SonicWall application.
• LZ-3083 - Report Templates - Enhanced report templates with additional data sources and output format options.
• LZ-2700 - Search Results Formatting - Improved formatting options for search results display.
• LZ-3186 - AI Provider Expansion - Added support for additional AI providers including Gemini, vLLM, Ollama, and OpenRouter.
• LZ-3038 - API Validation Enhancements - Added input validators and improved API response handling.

UI Updates

• LZ-3272 - AI Session Copy Function - Enabled copying of individual AI chat responses within a session.
• LZ-3265 - AI Copilot Settings Save - Fixed the disabled save button in the AI Copilot settings section.
• LZ-3262 - App Store List Display - Corrected truncation of the last item in the App Store list view.
• LZ-3258 - Severity Chart Labels - Fixed severity name mapping to display text labels instead of integers in all chart types.
• LZ-3251 - Error Message Improvements - Improved error handling and messaging after legacy interface deprecation.
• LZ-3240 - Trigger Filter Protection - Disabled filter editing for regex-based trigger filters to prevent accidental overwriting.

Version v6.39

API Updates

• LZ-3248 - Windows Agent Origin Computer - Added origin computer information from Windows event data as a user tag.
• LZ-3242 - AI Query Timestamp Validation - Resolved an exception that occurred when timestamp range validation failed in AI queries.
• LZ-3238 - AppStore Config Validation Testing - Added automated testing to validate application configurations against their schemas.
• LZ-3237 - Operations Dashboard App - Created a new Operations app providing a centralized dashboard for high severity events, service disruptions, application errors, and infrastructure changes.
• LZ-3230 - User-Defined MCP Servers - Users can now add custom MCP servers to enhance AI context for queries such as root cause analysis and event correlation.
• LZ-3227 - Container File Descriptor Limits - Corrected the open file limit in containers to prevent issues with services requiring many file handles.
• LZ-3219 - JSON Rules User Tags - Added support for user tags in the rewrite section of JSON rules.
• LZ-3217 - Lua Rules Event Generation - Lua rules can now generate new events, enabling more advanced event processing workflows.
• LZ-3214 - Rule Validation Fix - Fixed a bug that occurred when validating rule files with list structures at the top level.
• LZ-3208 - Integrated AI Chatbot - Introduced a new AI chatbot fully integrated with the LogZilla API, eliminating the need for separate containers or databases.
• LZ-3205 - WebSocket Migration - Migrated WebSocket functionality from Tornado to Django Channels for improved performance and maintainability.
• LZ-3204 - Help Menu Link Update - Updated the help menu to link directly to the LogZilla documentation website.
• LZ-3192 - Unified Query API Filters - Simplified query API filter logic to improve usability and AI query generation accuracy.
• LZ-3184 - Palo Alto Prisma App - Created a new LogZilla app for Palo Alto Prisma integration.
• LZ-3176 - HTTP Receiver Fix - Resolved an attribute error in the HTTP receiver token management component.
• LZ-3157 - SonicWall App User Tags - Added user information tags to the SonicWall app for tracking VPN login activity.
• LZ-3156 - Minimum Word Length Setting - Updated the minimum word length setting for search indexing to function better.
• LZ-3146 - HTTP Receiver Documentation - Corrected a path typo in the HTTP Event Receiver documentation.
• LZ-3120 - Ubiquiti Rule Source Check - Updated the Ubiquiti rule to check for source tags, ensuring proper filtering regardless of port configuration.
• LZ-3118 - Palo Alto App Documentation - Updated Palo Alto app documentation with Traffic, System, and Config event format examples.
• LZ-3116 - CDR Loader Startup Fix - Resolved an issue causing the CDR Loader to stop during startup.
• LZ-3086 - Dashboard Export - Added the ability to export dashboards directly from the dashboard menu.
• LZ-3085 - Widget Export - Added the ability to export widget data in JSON, XLS, and PNG formats.
• LZ-3083 - Report Templates Enhancement - Enhanced report templates with additional data sources, format selectors, and Excel integration.
• LZ-3081 - New Reports Engine - Introduced a new reports engine supporting scheduled reports, multiple output formats, and direct exports from the interface.
• LZ-2858 - Ubiquiti UniFi OS Support - Added dedicated receiving port and rules for Ubiquiti UniFi device logs including iptables events.
• LZ-2720 - AV Rules to Apps Conversion - Initiated conversion of antivirus vendor rules to LogZilla apps for improved management.
• LZ-2693 - Checkpoint firewall app - Added new Checkpoint firewall application to the AppStore.
• LZ-2482 - Juniper Dashboard installation - Resolved an issue where the Juniper dashboard was missing after app installation.
• LZ-2480 - Implement Ford triggers - Added over 300 triggers for Cisco WAAS, Cisco ACI, Cisco IOS, Cisco Nexus, Cisco ACE, SDWAN, Cisco ASA, and F5 platforms.
• LZ-3166 - AI chat API - Created RESTful API for the LogZilla AI chatbot functionality.
• LZ-3236 - AI installation documentation - Improved formatting and clarity in the AI installation documentation.
• LZ-3235 - Splunk HEC forwarder documentation - Updated documentation to clarify both HTTP and HTTPS support for Splunk HEC forwarding.
• LZ-3232 - End of support policy documentation - Added software lifecycle policy documentation with clear end of support and end of life definitions.
• LZ-3194 - Cloud onboarding video - Added cloud onboarding video to the documentation.
• LZ-3189 - API documentation correction - Corrected errors in the detailed API method documentation.
• LZ-3148 - API documentation table formatting - Fixed table formatting issues in the API method documentation.
• LZ-3145 - HTTP ingestion endpoint documentation - Clarified usage of incoming versus incoming/raw endpoints for HTTP ingestion.
• LZ-3144 - HTTP event receiver documentation - Updated documentation to explain the difference between extra_fields and json parameters.
• LZ-3129 - Trigger script documentation - Unified duplicated trigger execution script help sections into a single reference.
• LZ-3044 - API documentation section correction - Fixed section 9.2 to display API documentation instead of forwarder information.
• LZ-2992 - Static IP configuration guide - Added step-by-step instructions for setting a static IP address in the LogZilla VM.
• LZ-2932 - ServiceNow integration documentation - Created documentation and examples for ServiceNow ticket integration.
• LZ-2684 - Detailed installation guide - Added an installation guide covering system requirements through post-installation verification.
• LZ-2599 - Documentation rewrite - Completed a major rewrite of the LogZilla documentation.

UI Updates

• LZ-3251 - Error handling improvements - Improved error message handling and added graceful fallback when legacy UI is disabled.
• LZ-3241 - AI chat message copy functionality - Fixed an issue where copying AI chat messages did not include content above embedded charts.
• LZ-3225 - Search export functionality - Resolved an error that occurred when exporting search results to CSV or XLS format.
• LZ-3224 - Icon package replacement - Replaced the icons package and implemented style improvements throughout the interface.
• LZ-3218 - AI chat integration - Integrated AI chat functionality into the new interface.
• LZ-3179 - AI interface connection - Connected the AI user interface to the new AI API.
• LZ-3113 - Account management buttons - Added activate and delete buttons to the account management interface.

Version v6.38

API Updates

• LZ-3171 - Docker build system migration - Migrated the Docker builder to a bake-based system for improved build efficiency and dependency management.
• LZ-3156 - Sphinx minimum word length setting - Resolved an issue where the Sphinx minimum word length configuration did not apply correctly to search queries.
• LZ-3150 - Rule validation for numeric operators - Fixed validation for numeric field operators in rules and filters to prevent parser errors.
• LZ-3146 - HTTP receiver documentation path - Corrected a path typo in the HTTP Event Receiver documentation.
• LZ-3138 - Event enrichment CIDR matching - Fixed a bug in the parser module that caused errors when using CIDR matching in event enrichment rules.
• LZ-3134 - Configuration file permissions - Tightened file permissions for LogZilla configuration and log directories to improve security.
• LZ-3133 - Script server configuration handling - Resolved a crash that occurred when the script server configuration file was empty.
• LZ-3128 - Trigger script documentation - Updated documentation for trigger script environment variables to reflect current behavior.
• LZ-3122 - Linux BIND rule correction - Fixed the Linux BIND rule to no longer incorrectly set the source type field.
• LZ-3120 - Ubiquiti rule source tag check - Updated the Ubiquiti rule to check for source tag, ensuring proper filtering without port-based configuration.
• LZ-3110 - HTTP receiver startup timing - Added a readiness endpoint to improve module startup coordination and reduce timeout warnings.
• LZ-3109 - Storage module archiving performance - Improved archiving speed by fixing a locking issue that blocked event processing during index deletion.
• LZ-3108 - Storage module memory management - Implemented flow control and optimized out-of-window aggregate processing to prevent memory issues.
• LZ-3105 - Archive interruption handling - Fixed a crash that occurred when starting a new archive after a previous archive was interrupted.
• LZ-3102 - Timezone handling during upgrades - Resolved an upgrade failure that occurred when non-standard timezone formats were configured.
• LZ-3096 - Syslog-ng custom source configuration - Fixed an issue where custom sources added to the syslog-ng configuration were not applied correctly.
• LZ-3086 - Dashboard export - Added the ability to export dashboards directly from the dashboard menu.
• LZ-3085 - Widget data export - Added the ability to export widget data in JSON, XLS, and PNG formats.
• LZ-3084 - System status query - Added a new SystemStatsQuery type to retrieve license, upgrade, disk usage, and data retention information.
• LZ-3080 - Windows agent memory usage - Resolved an issue causing the Windows agent to crash due to excessive memory consumption.
• LZ-3068 - Restart timeout handling - Improved module communication during restarts to distinguish between startup delays and actual failures.
• LZ-2923 - Windows agent identification - Updated the Windows agent to send both legacy and current identification tags for improved rule compatibility.
• LZ-2858 - Ubiquiti and UniFi support - Added dedicated receiving port, identification rules, and parsing support for Ubiquiti and UniFi device logs.
• LZ-2800 - Host migration tool - Added data inclusion support to the snapshot command to facilitate migration between LogZilla hosts.
• LZ-2482 - Juniper dashboard installation - Fixed the Juniper app installation to include the associated dashboard.
• LZ-3166 - AI chatbot API - Added a RESTful API for the AI chatbot to enable integration with external interfaces.
• LZ-3148 - API documentation formatting - Fixed table formatting in the API documentation that caused build issues.
• LZ-3145 - HTTP ingestion documentation - Clarified the difference between incoming and incoming/raw endpoints for HTTP event ingestion.
• LZ-3144 - HTTP event receiver documentation - Updated documentation to explain the distinction between extra_fields and json properties in event payloads.
• LZ-3129 - Trigger script documentation - Consolidated duplicate trigger execution script help sections into a single unified reference.
• LZ-3044 - API documentation correction - Fixed section 9.2 to display API documentation instead of forwarder information.
• LZ-2992 - Static IP configuration guide - Added step-by-step instructions for configuring a static IP address in the LogZilla virtual machine.
• LZ-2953 - Documentation link audit - Identified and corrected dead links across documentation pages.
• LZ-2932 - ServiceNow integration guide - Created documentation and examples for integrating LogZilla with ServiceNow for ticket management.
• LZ-2859 - Troubleshooting page formatting - Fixed formatting issues on the command line maintenance and troubleshooting documentation page.
• LZ-2684 - Installation guide - Added a detailed installation guide covering system requirements through post-installation verification.

UI Updates

• LZ-3165 - Column order persistence - Resolved an issue where column order set by dragging in widgets did not persist.
• LZ-3160 - Top N widget limit validation - Fixed a bug that occurred when setting the Top N widget limit above the allowed value.
• LZ-3158 - App Store filtering - Added separate fuzzy search filters for installed and available apps in the App Store.
• LZ-3151 - AI chat interface design - Implemented design updates for the AI chat feature.
• LZ-3143 - Search functionality review - Improved search box and sidebar navigation search button behavior.
• LZ-3140 - Version update snooze - Fixed the snooze functionality for version update notifications.
• LZ-3113 - Account management buttons - Added activate and delete account buttons to the user interface.
• LZ-3111 - User group assignment - Added group assignment functionality to the user edit form.
• LZ-3093 - Trigger page responsiveness - Improved trigger page layout on smaller screens and lower resolutions.
• LZ-3075 - Router subscription cleanup - Optimized subscription handling related to router operations.
• LZ-3048 - Chart rendering stability - Resolved an issue where charts occasionally became stuck during rendering.
• LZ-3046 - Custom filter improvements - Enhanced the interface for adding custom filters.
• LZ-3038 - Form validation - Added validators and improved API response handling for forms.
• LZ-3031 - Dashboard loader IDs - Fixed duplicate loader IDs in the dashboard component.
• LZ-3022 - Unified shadow effects - Standardized shadow styling across the interface.
• LZ-2969 - Button component refactor - Consolidated button component variants for consistent behavior and styling.
• LZ-2920 - Console warning cleanup - Resolved various console warnings related to memory leaks and DOM rendering.