Releases: aws-solutions/centralized-logging-with-opensearch
Releases · aws-solutions/centralized-logging-with-opensearch
v2.4.0
[2.4.0] - 2025-05-22
Added
- Anonymized operational metrics collection
Changed
- Added input validation to ensure Light Engine table name only contains alphanumeric characters, hyphens, and underscores
- Renamed PostgreSQL log field
duration
toquery_time
for consistency with existing MySQL log format
Fixed
- Issue where domains would display inconsistent metric values. Issue #277
- Enhanced OpenSearch API retry mechanism in Log processor Lambda to handle IAM role propagation delays
Security
- Updated setuptools package to address CVE-2025-47273
v2.3.3
[2.3.3] - 2025-04-30
Updated
- Cognito user invitation email template
Fixed
- NGINX service startup issue and optimized health check settings for OpenSearch Access Proxy instances
- OpenSearch bulk loading to split large payloads into smaller batches to comply with OpenSearch's HTTP request size limits
- PostgreSQL log ingestion parser to parse duration and log message into separate fields
Security
- Updated http-proxy-middleware to version 2.0.9
- Updated AWS CDK packages to latest versions
v2.3.2
[2.3.2] - 2025-03-14
Fixed
- Fixed an issue where Lambda Elastic Network Interface resources were not being properly cleaned up during CloudFormation stack deletion
Security
- Updated axios package to address CVE-2025-27152
- Updated Jinja2 package to address CVE-2025-27516
- Updated prismjs package to address CVE-2024-53382
- Updated Babel packages to address CVE-2025-27789
v2.3.1
[2.3.1] - 2025-02-24
Changed
- Migrated to Poetry for Python dependency management
Fixed
- Fixed S3 permission issue when creating cross-account Lambda log ingestion pipeline Issue #312
- Fixed STS credential expiration handling when ingesting logs from cross-account sources
- Fixed Opensearch index rollover timeout issue
Security
- Updated serialize-javascript package to address CVE-2024-11831
- Updated cryptography package to address CVE-2024-12797
v2.3.0
[2.3.0] - 2024-12-11
Added
- Add the architecture diagram of sampled WAF logs when creating WAF log pipeline. #132
- Add the support of ingesting Aurora/RDS PostgreSQL logs. #122
Changed
- Replace Amazon SQS with Amazon EventBridge to mitigate the Amazon S3 Event Notifications creation failure. #12
- Redesigned the log ingestion workflow to ingest logs from RDS without the dependency of CloudWatch Logs. #102
- Reordered pipeline creation workflow: log type and analytics engine selection now occur first for AWS service log pipelines. #309
Fixed
- Fix the sampling rate validation issue to allow only positive integers when creating CloudFront real-time logs. #302
- Fix the issue that the pipeline cannot be created due to a lack of "iam:TagRole" permission in some AWS Accounts. #279
- Fix the issue that the content of Log Config detail may exceed the maximum length of the window. #275
- Fix the issue that the EKS DaemonSet Guide is not refreshed after editing the log config. #241
- Fix the user interface issue that a wrong S3 bucket prefix is using when creating WAF log pipeline if the logging has already been enabled. #67
v2.2.2
v2.2.1
[2.2.1] - 2024-07-22
Added
- Optimised instance list performance. #76
- Added support for using Unix epoch time format as the time key for single line text log type.
Fixed
v2.2.0
[2.2.0] - 2024-06-20
Added
- Added support to install, configure, and monitor the Fluent Bit agent on Windows Server 2016/2019/2022 Instances. #76
- Added a log visualization template for Windows IIS (W3C Format) logs. #212
- Added a default tag "CLOSolutionCostAnalysis" to all resources created by the solution. #285
- Add support for tag propagation for resources when creating log pipelines, allowing customers to view all resources and associated costs at the pipeline level. #232
- Added support for ingesting and analyzing data in a specified S3 location using Light Engine. #233
- Added support for importing OpenSearch clusters with custom KMS encryption enabled. #172
- Added support for ingesting and analyzing AWS CloudTrail logs using Light Engine. #234
- Added support for ingesting and analyzing Syslog data using Light Engine. #235
- Added support for using Unix epoch time format as the time key in Log Config. #198
- Added support for Asia Pacific (Hyderabad), Asia Pacific (Jakarta), Asia Pacific (Melbourne), Israel (Tel Aviv), Canada (Calgary), Europe (Spain), Europe(Zurich), Middle East (UAE) regions. #230
Fixed
- Fixed an issue where creating a pipeline failed when Lambda reached concurrency limits. #141
- Fixed a bug where the system could not read properties of undefined ('accountId') when the Next button was clicked without selecting an Instance Group. #236
- Fixed an issue where logs were not received when using the solution-provisioned staging bucket in Light Engine. #237
- Fixed a permissions issue in the LogMerger State Machine within Light Engine: The S3ObjectMigration Lambda failed due to insufficient KMS permissions on the analytics S3 bucket. #272
- Fixed a bug that prevented instances from being listed when switching accounts on the Instance Group list page. #291
v2.1.2
[2.1.2] - 2024-03-19
Fixed
- Resolved a bug where upgrading from versions earlier than 2.1.0 led to the loss of S3 notifications, preventing the proper collection of logs from the S3 buffer. #261
- Addressed a problem where including the
@timestamp
field in log configurations caused failures in creating index_templates, leading to an inability to write data to OpenSearch. #262 - Fixed a bug in the log processor Lambda due to the absence of the 'batch_size' variable, causing process failures. #242
- Solved a deployment issue with the Log Analytics Pipeline, which previously could not deploy cross-account Lambda pipelines. #227
- Corrected an issue with the ALB Service Log Parser that resulted in the omission of numerous log lines. #243
- Amended an inaccurate warning message displayed during pipeline creation with an existing index in OpenSearch. #260
- Amended an inaccurate error messaging when deleting an Instance Group in application log pipelines. #229
Full Changelog: v2.1.1...v2.1.2