Software Lifecycle Policy and Release Notes

LogZilla provides a defined lifecycle for each software release to ensure reliability, performance improvements, and timely security updates.

Support Phases

End of Support (EOS).

A release receives active support, including feature updates, bug fixes, and noncritical enhancements, for one year from its initial release date.

End of Life (EOL).

A release continues to receive security fixes and critical issue patches for two years from its initial release date. After this period, the release reaches EOL and no further updates are provided.

Customer Responsibilities

Customers are encouraged to remain on supported versions to receive the latest improvements, ensure platform stability, and maintain compliance with current security practices. Upgrading regularly helps avoid operating on outdated or unsupported components.

Extended Support

For deployments requiring an extended maintenance window beyond the standard policy, additional support options may be made available upon request.

Release Lifecycle Dates

Release Notes

This page lists the last three releases. Older notes are available in source control.

Version v6.38

API Updates

• LZ-3171 - Docker build system migration - Migrated the Docker builder to a bake-based system for improved build efficiency and dependency management.
• LZ-3156 - Sphinx minimum word length setting - Resolved an issue where the Sphinx minimum word length configuration did not apply correctly to search queries.
• LZ-3150 - Rule validation for numeric operators - Fixed validation for numeric field operators in rules and filters to prevent parser errors.
• LZ-3146 - HTTP receiver documentation path - Corrected a path typo in the HTTP Event Receiver documentation.
• LZ-3138 - Event enrichment CIDR matching - Fixed a bug in the parser module that caused errors when using CIDR matching in event enrichment rules.
• LZ-3134 - Configuration file permissions - Tightened file permissions for LogZilla configuration and log directories to improve security.
• LZ-3133 - Script server configuration handling - Resolved a crash that occurred when the script server configuration file was empty.
• LZ-3128 - Trigger script documentation - Updated documentation for trigger script environment variables to reflect current behavior.
• LZ-3122 - Linux BIND rule correction - Fixed the Linux BIND rule to no longer incorrectly set the source type field.
• LZ-3120 - Ubiquiti rule source tag check - Updated the Ubiquiti rule to check for source tag, ensuring proper filtering without port-based configuration.
• LZ-3110 - HTTP receiver startup timing - Added a readiness endpoint to improve module startup coordination and reduce timeout warnings.
• LZ-3109 - Storage module archiving performance - Improved archiving speed by fixing a locking issue that blocked event processing during index deletion.
• LZ-3108 - Storage module memory management - Implemented flow control and optimized out-of-window aggregate processing to prevent memory issues.
• LZ-3105 - Archive interruption handling - Fixed a crash that occurred when starting a new archive after a previous archive was interrupted.
• LZ-3102 - Timezone handling during upgrades - Resolved an upgrade failure that occurred when non-standard timezone formats were configured.
• LZ-3096 - Syslog-ng custom source configuration - Fixed an issue where custom sources added to the syslog-ng configuration were not applied correctly.
• LZ-3086 - Dashboard export - Added the ability to export dashboards directly from the dashboard menu.
• LZ-3085 - Widget data export - Added the ability to export widget data in JSON, XLS, and PNG formats.
• LZ-3084 - System status query - Added a new SystemStatsQuery type to retrieve license, upgrade, disk usage, and data retention information.
• LZ-3080 - Windows agent memory usage - Resolved an issue causing the Windows agent to crash due to excessive memory consumption.
• LZ-3068 - Restart timeout handling - Improved module communication during restarts to distinguish between startup delays and actual failures.
• LZ-2923 - Windows agent identification - Updated the Windows agent to send both legacy and current identification tags for improved rule compatibility.
• LZ-2858 - Ubiquiti and UniFi support - Added dedicated receiving port, identification rules, and parsing support for Ubiquiti and UniFi device logs.
• LZ-2800 - Host migration tool - Added data inclusion support to the snapshot command to facilitate migration between LogZilla hosts.
• LZ-2482 - Juniper dashboard installation - Fixed the Juniper app installation to include the associated dashboard.
• LZ-3166 - AI chatbot API - Added a RESTful API for the AI chatbot to enable integration with external interfaces.
• LZ-3148 - API documentation formatting - Fixed table formatting in the API documentation that caused build issues.
• LZ-3145 - HTTP ingestion documentation - Clarified the difference between incoming and incoming/raw endpoints for HTTP event ingestion.
• LZ-3144 - HTTP event receiver documentation - Updated documentation to explain the distinction between extra_fields and json properties in event payloads.
• LZ-3129 - Trigger script documentation - Consolidated duplicate trigger execution script help sections into a single unified reference.
• LZ-3044 - API documentation correction - Fixed section 9.2 to display API documentation instead of forwarder information.
• LZ-2992 - Static IP configuration guide - Added step-by-step instructions for configuring a static IP address in the LogZilla virtual machine.
• LZ-2953 - Documentation link audit - Identified and corrected dead links across documentation pages.
• LZ-2932 - ServiceNow integration guide - Created documentation and examples for integrating LogZilla with ServiceNow for ticket management.
• LZ-2859 - Troubleshooting page formatting - Fixed formatting issues on the command line maintenance and troubleshooting documentation page.
• LZ-2684 - Installation guide - Added a detailed installation guide covering system requirements through post-installation verification.

UI Updates

• LZ-3165 - Column order persistence - Resolved an issue where column order set by dragging in widgets did not persist.
• LZ-3160 - Top N widget limit validation - Fixed a bug that occurred when setting the Top N widget limit above the allowed value.
• LZ-3158 - App Store filtering - Added separate fuzzy search filters for installed and available apps in the App Store.
• LZ-3151 - AI chat interface design - Implemented design updates for the AI chat feature.
• LZ-3143 - Search functionality review - Improved search box and sidebar navigation search button behavior.
• LZ-3140 - Version update snooze - Fixed the snooze functionality for version update notifications.
• LZ-3113 - Account management buttons - Added activate and delete account buttons to the user interface.
• LZ-3111 - User group assignment - Added group assignment functionality to the user edit form.
• LZ-3093 - Trigger page responsiveness - Improved trigger page layout on smaller screens and lower resolutions.
• LZ-3075 - Router subscription cleanup - Optimized subscription handling related to router operations.
• LZ-3048 - Chart rendering stability - Resolved an issue where charts occasionally became stuck during rendering.
• LZ-3046 - Custom filter improvements - Enhanced the interface for adding custom filters.
• LZ-3038 - Form validation - Added validators and improved API response handling for forms.
• LZ-3031 - Dashboard loader IDs - Fixed duplicate loader IDs in the dashboard component.
• LZ-3022 - Unified shadow effects - Standardized shadow styling across the interface.
• LZ-2969 - Button component refactor - Consolidated button component variants for consistent behavior and styling.
• LZ-2920 - Console warning cleanup - Resolved various console warnings related to memory leaks and DOM rendering.

Version v6.37

API Updates

• LZ-3089 – Update CDR loader docs with CDR/CMR same dir and docker-compose pull_policy – Expanded documentation now shows how CDR and CMR can share a directory, with an updated docker-compose.yaml for a smoother pull process.
• LZ-3088 – Bump cisco_cdr appstore app meta.yaml – Refreshed app metadata ensures the Cisco CDR dashboard upgrades cleanly when added.
• LZ-3065 – Storage module: use individual data-retention setting – Preliminary work paves the way for per-module retention controls instead of one global setting.
• LZ-3062 – Remove front-container REQUIREMENTS – The front container can now start independently of others, reflecting recent Nginx updates.
• LZ-3019 – Integrate AI chat with LogZilla – Foundation laid for in-product AI chat via a single hostname proxy and unified authentication.
• LZ-3091 – Set app dashboards/widgets public by default – App-delivered dashboards and widgets are now visible to all users out of the box.
• LZ-3092 – CDR Loader HTTPS connection – Resolved SSL-verification issues to improve CDR loader reliability.
• LZ-3080 – WinAgent memory usage – Adjusted WinAgent to reduce observed memory spikes.
• LZ-3076 – No events incoming with HTTPS + force-HTTPS – Fixed a condition that intermittently blocked event flow when HTTPS was enforced.
• LZ-3073 – Upgrade error: deleting old containers – Streamlined the upgrade routine to silence non-critical log warnings.
• LZ-3068 – Timeout warnings during restart – Improved messaging so brief startup delays are not mistaken for failures.
• LZ-3038 – Basic response validators – Added safeguards to make API calls more predictable.
• LZ-3077 – Duplicate triggers disruption – Duplicate triggers are now ignored rather than causing disruptions.
• LZ-2724 – EPD warning accuracy – Email template correctly reflects days remaining before the EPD limit.
• LZ-2568 – Separate docker-based code – Repository re-organization improves long-term maintainability.
• LZ-2984 – Trigger edit bugs – Fixed issues with custom filters and console errors.
• LZ-2969 – Refactor UI2 button component – Consolidated multiple button variants into one consistent component.

UI Updates

• LZ-3043 – New Version Notification – The UI now indicates when an upgrade is available.
• LZ-3022 – Unified UI Shadows – Consistent shadows across the interface.
• LZ-3006 – Firefox graph display – Graphs render correctly in Firefox once again.
• LZ-3075 – Clean up subscription (router) – UI cleanup around router-linked subscriptions.
• LZ-3071 – UI2: URL length & tab hangs – Tidier URLs prevent rare tab freezes.
• LZ-3070 – UI2: Style badge widgets – Badges now scale gracefully, even with large numbers in narrow widgets.
• LZ-3067 – UI2: Groups in settings not loaded – Groups load reliably, plus assorted UI fixes.
• LZ-3053 – Editing trigger error – Smoother interaction while editing triggers.
• LZ-3045 – UI2 bug fixes – Numerous minor issues resolved for a better day-to-day experience.
• LZ-3031 – Duplicate Loader IDs in Dashboard – Loader IDs now display uniquely to avoid confusion.

Version v6.36

API Updates

• LZ-3058 – High CPU usage – Investigated to improve stability.
• LZ-3049 – Query export returns 500 – Resolved export errors.
• LZ-3040 – TLS settings description – Corrected terminology.
• LZ-3025 – Divide by zero in Queryevents – Resolved runtime error.
• LZ-3035 – Dashboard import – Fixed import failures.
• LZ-3031 – Duplicate loader IDs – Unique IDs enforced in dashboards.
• LZ-2984 – Trigger edit fixes – Corrected multiple issues in the trigger editing process.
• LZ-3050 – Event rate query CSV export – Guidance for extracting weekly event rates to CSV.
• LZ-3028 – CDR Loader docs – Updates to improve operational clarity.
• LZ-3018 – Ingest-only authtoken docs – Clarifications for ingestion scenarios.
• LZ-3001 – HTTPS forwarding with user tags – syslog-ng forwarder example with user tag propagation.
• LZ-2911 – Upgrading LogZilla – Clarified that upgrades can skip intermediate versions.
• LZ-2907 – tcpdump command update – Updated parameters for accurate packet capture.
• LZ-2894 – Subquery example – Simplified example for accessibility.
• LZ-3025 – Query Events divide by zero – Stabilized query execution.
• LZ-2991 – SEC & Script-Server – Fixed logging and escaping.
• LZ-2987 – syslog-ng persistent disk buffer – Prevented data loss on container deletion.
• LZ-2981 – Cardinality timeouts – Increased timeouts for large datasets.
• LZ-2965 – Sphinx filter argument – Corrected an argument error.
• LZ-2946 – EULA acceptance – Added an option to bypass EULA acceptance during installation.
• LZ-2901 – Docker syslog entries – Reduced verbosity for clarity.
• LZ-2892 – Special character handling – Improved handling of user tags with special characters.
• LZ-2890 – Estreamer container – Applied security updates.
• LZ-2948 – Stacked bar chart – Resolved dropdown and limit display issues.
• LZ-2945 – Email trigger – Fixed issue with external recipient handling.
• LZ-2942 – Widget order from search – Corrected placement order.
• LZ-2939 – Autofocus input – Fixed autofocus issues in inputs.
• LZ-2938 – New dashboard widget placement – Corrected placement behavior.
• LZ-2928 – Pagination – Fixed pagination reset to page 1.

UI Updates

• AI assistant integration – Natural language interaction with log data. Open Copilot in the UI to start. Key capabilities: queries, troubleshooting suggestions, pattern recognition, rules assistance, and in-product documentation access.
• LZ-3022 – Unified shadow effects – Standardized shadow styling for consistency.
• LZ-3027 – Quick access popup – Added ctrl-k/cmd-k shortcut for faster search.
• LZ-3034 – Disk space indicator – Improved color coding for low disk alerts.
• LZ-3033 – Compact filter placeholder – Added placeholder text to guide users.
• LZ-3030 – Styled widget badges – Adjusted design for clarity.
• LZ-3006 – Firefox graph display – Fixed graph rendering in Firefox.