File nxlog-ce.changes of Package nxlog-ce
-------------------------------------------------------------------
Wed May 29 08:20:27 UTC 2019 - Boris Manojlovic <boris@steki.net>
- updated to latest upstream version 2.10.2150
+ Implemented Listen mode for om_tcp which enables clients to connect to it.
+ Added a workaround for the 256 source limit in the autogenerated
QueryXML in im_msvistalog.
+ Added a workaround for a possible windows bug when im_msvistalog was
giving "EvtNext failed with error 1734: The array bounds are invalid."
+ Prevent loss of unprocessed data in im_file buffers upon restart.
+ A leap-year bug was present when parsing dates without a year
i.e. Feb 29 showed up as 2016-03-01.
+ Fixed an issue in im_msvistalog that could cause a random crash
with custom application logs.
+ Fixed apr_pollset_poll and "unexpected data from server" errors
in om_http when the remote server sent fragmented data.
+ im_file now properly updates the file position after each read, not only on EOF.
+ Fixed a reconnection/response timeout issue in om_http.
+ om_http will now attempt to reconnect on all errors.
+ Added a PollInterval directive to im_dbi.
+ Added a workaround for an APR bug where the memory pool allocated by the APR pollset
+ could grow too large under heavy load under linux/epoll.
+ om_http will now attempt to reconnect on all errors.
+ Add locking to the dbi modules as a workaround
for the mysql_init race condition issue.
+ The dbi modules can now use the new reeantrant API if libdbi provides it.
+ Fixed a memory leak caused by convert_fields("AUTO").
+ The JSON parser can automatically detect datetime
values - no need to call parsedate().
+ Field limit in CSV parser was raised to 200.
+ xm_gelf handles ShortMessage as is without doing
any truncation if it exists.
+ Fixed a leak in xm_fileop's file_remove() and another
in the regexp replacement operator when using /g.
+ parsedate() can now also handle integer timestamps with an optional fractional part.
+ Enhanced the replace() function to handle undefined values better.
+ Add locking to the dbi modules as a workaround for the mysql_init race condition issue.
+ The dbi modules can now use the new reeantrant API if libdbi provides it.
+ Fixed a memory leak caused by convert_fields("AUTO").
+ There was a memory leak in xm_kvp module's to_kvp().
+ The linebased reader did not trim trailing CR when CRLF
was on the buffer boundary.
+ The to_syslog_snare() formatter creates the date string with
double digits instead of padding with space.
+ Flow-control is explicitly disabled with reroute() and add_to_route().
+ Fixed an issue in im_file getting into a loop with CloseWhenIdle enabled.
+ IETF Syslog parser properly skips UTF BOM header.
+ The set_request_path() procedure in om_http was leaking memory.
+ Deleted files could cause an excessive logging of "input file was deleted" in im_file.
+ A <QueryXML> block has been added to im_msvistalog that can be used
to specify the XML query without using '\' to join multiple lines.
+ <Exec> can be used as a block to avoid line continuation breaks '\'.
+ The IN operator has been implemented.
+ Fixed an issue related to the csv parser creating undefined values
that could lead to a crash in some cases.
+ The string() function was leaking memory.
+ Some large eventlog entries caused a crash or hang with im_msvistalog.
+ Updated openssl libraries on windows to 1.0.2a to support TLSv1.2.
+ The om_tcp and om_ssl modules now provide a reconnect() procedure.
+ Fixed a regression in im_file which was causing excessive memory usage
with a large number of files.
+ Do not swallow empty lines in LineBased reader.
+ Fixed issues with oversized strings reaching the internal string limit.
+ All SSL networking modules allow TLS by default.
+ Fixed an issue with oversized binary messages generating
"ASSERTION FAILED: "logqueue->needpop == TRUE".
+ All tcp based network modules are now using TCP_KEEPALIVE to detect dead peers.
+ Null-dereference and error handling fixes for im_file to handle
error conditions better (e.g. errors from network shares).
+ The xm_gelf extension now supports GELF_TCP and a ShortMessageLength directive has been added.
+ The parser did not handle "\/" properly inside regular expressions.
+ Fixed the assertion failure "logqueue.c/nx_logqueue_push(): "logdata->link.prev == NULL" in pm_buffer.
+ Reloading on windows caused pm_buffer to emit "ERROR couldn't open disk buffer file - Access is denied".
+ The Syslog_TLS input reader has been fixed to correctly parse
data instead of reporting "invalid header received by Syslog_TLS input reader".
+ Fixed an off-by-one error in the CSV parser which resulted in a crash on invalid input in some cases.
+ Added missing error checking to the config parser when Schedule block did not contain When or Every.
+ There was a possible infinite loop when sending zero length data (i.e. empty udp packet).
+ Fixed a crash in im_msvistalog when "Failed to retrieve eventlog user data" was encountered.
+ The year was uninitialized when parsing an rfc3164 date with microsecond precision in nx_date_parse_cisco.
+ Hexadecimal ASCII character codes in the character specification are now accepted by xm_csv.
+ The csv parser does not swallow the escape character in an invalid escape sequence.
+ Fixed a crash when the File directive for om_file contained an invalid string expression.
+ The om_http module could leak the SSL context when the remote socket was forcibly closed.
-------------------------------------------------------------------
Sun Nov 15 21:05:15 UTC 2015 - boris@steki.net
- updated to latest upstream version 2.8.1248
- The rename_field() procedure was removing the field if the source and destination were the same.
- The regexp and regexp replacement operators can now be used as statements, i.e. Exec $Message =~ s/aaa/bbb/;
- Regular expressions now support the /m modifier to do multiline matching.
- Regular expressions now support the /i modifier to do caseless matching.
- Regular expressions now support the /s modifier to make the '.' match newline characters.
- Fixed a regression introduced with the ActiveFiles directive in im_file when more than one truncation
did not get noticed. (ticket #40@sf) Credits go to 'savionat'.
- Implemented missing parser support for IPv4 literals.
- Added a host_ip() function to return the IP address associated with the hostname.
- Using exec_async() could have exhausted the memory if it was called at a very high rate.
- om_udp would stop sending messages in some cases after logging "apr_socket_send failed;Connection refused",
e.g. when graylog2 was not accepting udp packets. It should properly resume now.
- The to_syslog_snare() formatter should now produce better snare compliant output.
- Replace space, ']' and '"' with underscore in IETF syslog structured data field names.
- Context cleaning would result in a segfault in pm_evcorr's thresholded rule if there was no triggering.
- im_tcp and im_ssl on windows is not limited to 500 connections anymore.
- Non-wildcarded File contents would get lost with ReadFromLast FALSE when the file did not exist
but did appear with unread data.
- im_file does not emit "input file does not exist" warnings at every PollInterval.
- The file_name() function caused assertion failures in some cases on shutdown.
- A regression caused a crash with im_file when the File did not exist.
- A typo in the code was causing a memory leak with rename_field().
-------------------------------------------------------------------
Mon Jun 30 19:04:38 UTC 2014 - mardnh@gmx.de
- Updated to latest upstream version 2.7.1191
- A regression caused a crash with im_file when the File did not exist.
- A typo in the code was causing a memory leak with rename_field().
-------------------------------------------------------------------
Wed Feb 5 10:24:50 UTC 2014 - boris@steki.net
- Updated to latest upstream version 2.7.1189
- The LICENSE has changed.
- Added a new extension module to parse binary wtmp files on Linux.
- Fixed a regression causing a crash after the 'failed to determine FQDN hostname' error message.
- The to_syslog_*() procedures can now use $raw_event if $Message is unset to make it easier to convert to syslog.
- Added a fix to im_msvistalog to handle the "EvtNext failed with error 13: The data is invalid." error better.
- The im_file module now emits the last event when using with the xm_multiline extension.
- Fixed the issue with more than 20 fiels and xm_multiline reported in ticket #33.
- Json parse errors in raw_event could cause a double free resulting in a crash or undefined behavior.
- It is now possible to use multiple instances of xm_perl.
- Disallow using a single processor module instance in multiple routes.
- The file_chown() procedure in xm_fileop works with user/group names in addtion to uid/gid values.
- CloseWhenIdle directive for im_file.
- File removal in some circumstances caused im_file to emit "input file does not exist" messages on windows.
- In same rare cases im_file would give a panic on windows with "im_file got EAGAIN for read".
- The regexp replacement operator s/// was leaking memory.
- In some circumstances excess CPU was used when im_file watched several files.
- Added some more performance optimizations to im_file to handle a large number of wildcarded files
so that it should consume less resources than before. It also comes with a new DirCheckInterval and
an ActiveFiles directive which can help in some cases when monitoring wildcarded files.
- Added a RenameCheck directive to im_file which should help detecting renamed/rotated files.
- The deb installer got stuck after trying to (re)start the daemon.
-------------------------------------------------------------------
Fri Jul 12 11:44:45 UTC 2013 - boris@steki.net
- update package to latest upstream 2.5.1089
-------------------------------------------------------------------
Thu May 16 12:09:35 UTC 2013 - boris@steki.net
- Fixed packaging for Centos/Redhat 6.
- Regexp and regexp replace operators now support the '\' escape character to be able to specify '/' as '\/'.
- Corrected a use-after-free when trying to set $raw_event to an undefined value or non-string type.
- Fixed a race condition in im_ssl which could result in a segmentation fault under rare circumstances.
- Connection error handling should be more robust now in om_tcp and om_ssl.
- The Reconnect directive has been obsoleted, this is handled automatically now.
- Fixed some build issues with Solaris.
- The xm_perl module can be explicitly disabled even if perl is found.
- Tweaked the build process so that it compiles and works on IBM AIX.
- Fixed default sample configs (#17).
- Added a hostname_fqdn() function to return the hostname with the domain part.
- The include directive now supports wildcards in file names to be able to include multiple files in a directory.
- im_exec has been fixed on Windows and now comes with a Restart directive.
- Added a FlowControl directive (global, input and processor module level).
-------------------------------------------------------------------
Mon Apr 8 12:52:39 UTC 2013 - boris@steki.net
- initial packaging of version 2.3.1027
