Skip to main content
Version: 4.1

What's New?

Version 4.1​

📅 Smart Monitor version 4.1.0 was released on July 11, 2024.

Core​

⚡️ Changes
  • Updated OpenSearch to version 2.13.0
  • Added the ability to save Smart Monitor settings in Cluster State, allowing access to the cluster when it's overloaded
  • Added the ability to manage Keystore via API
Improvements
  • Added the ability to set a custom identifier when creating tags
  • Notifications now feature a View Error button with detailed information
  • In the Upload Data and Lookup Manager sections, the maximum import data size now refers to the server.maxPayloadBytes parameter
  • Added the ability to drag and drop panels to new rows up or down
Fixes
  • Fixed incorrect breadcrumb display with long text inside

Core: Dashboards​

⚡️ Changes Improvements
  • Added ability to drag panels to new rows up or down

Core: Search Interface​

Improvements
  • Added highlighting for string expressions in search queries
  • Added the ability to delete words up to the nearest space using the Shift + Option + Backspace or Shift + Alt + Backspace key combination
  • Improved query expression highlighting in dark mode
  • Improved error display occurring during search execution
  • Added additional connection checks (SSL, mandatory authentication) when accessing SME-RE
Fixes
  • Fixed the inability to export data to Excel with multivalue fields

Core: Engine​

⚡️ Changes
  • Added perc (percentile) function to stats, aggs, timechart, timeaggs commands
  • Added resource consumption control when sending data using SME Circuit Breaker
Improvements
  • Optimized search result transfer between Smart Monitor modules

Core: Job Scheduler​

⚡️ Changes
  • Added the ability to specify roles under which a search will run within a task
  • Added the ability to mass enable and disable tasks
  • Removed Index Aggregation action
Improvements
  • Added additional connection checks (SSL, mandatory authentication) when accessing SME-RE
  • Added a driver for ClickHouse in JdbcOutputAction
  • The database connection password in JdbcOutputAction is now stored in Keystore
  • Added the ability to specify certificates and SSL protocol version in WebhookAction
Fixes
  • Fixed incorrect task name truncation
  • Fixed incorrect table behavior when adding a new column

User Behavior Analytics​

⚡️ Changes
  • Added count to the calculation settings function
Improvements
  • Added the ability to change permissions for Object Types and Scoring Types
Fixes
  • Fixed blocked create object button when types are missing
  • Adjusted out-of-license message display

Smart Beat​

⚡️ Changes
  • Added agent.ip parameter to override localIp sent to Agent Management
  • Added agent.tags configuration parameter to filter the list of agents in Agent Management
  • Added sending all IPv4 addresses of network interfaces with a filled MAC address
Fixes
  • Fixed DNS not displaying in the absence of a private IP
  • Fixed application integrity control
  • Fixed repeated TLS handshake error from : EOF messages

Smart Beat Manager​

⚡️ Changes
  • Added the ability to store backup user and password in environment variables
Fixes
  • Fixed repeated TLS handshake error from : EOF messages

Inventory​

⚡️ Changes
  • Added the ability to store login and password for connecting to SA Data Storage in environment variables
Improvements
  • Added a warning for duplicate names of base and additional fields in the configuration

Incident Manager​

⚡️ Changes
  • Added incident grouping results to the Incident Manager main page
  • Added Incident Group Settings page for configuring incident grouping
  • Added tags to grouped incidents
Improvements
  • Search is now performed by the storage
  • Added the ability to display user filters in Incident Manager based on their type
  • Improved incident and incident group history, added incident_history_language flag to set the history language

Lookup Manager​

Fixes
  • Fixed page reload issue during file import into the directory

Knowledge Center​

⚡️ Changes
  • Added the ability to display Markdown articles (read-only)
Fixes
  • Fixed error when there are no items in the permission group field

MITRE ATTACK​

⚡️ Changes
  • Role model can now be configured for MITRE ATTACK matrix layers

Version 4.1.1​

📅 Smart Monitor version 4.1.1 released on August 9, 2024.

Core​

Improvements
  • Delete button color in Job Scheduler and UBA changed to red
  • New notifications added when working with Resource-Service Model objects
Fixes
  • Added permission check for * and cluster:admin/sm/*
  • Fixed translations for English language in Index State Management
  • Fixed visualization scaling in search
  • Fixed substitution of values from search query results into the search bar when a subquery is present
  • Fixed error in navigation menu after pinning the Wikilogs item
  • Fixed display of Smart Beat Management menu item
  • Fixed translation of the Other section in the Pie Chart
  • Fixed display of large number of tags in object list
  • Fixed error when substituting tokens with values containing the $ character
  • Fixed table display in Lookup Manager in dark theme
  • Fixed error when deleting an element on a dashboard
  • Fixed saving of user query history
  • Removed conflicting translations
  • Fixed reset of column settings in Table when opening general visualization settings
  • Fixed clicking on the Show More button in Table
  • Fixed cell coloring in Table
  • Added ability to select the number of displayed rows in a Table cell
  • Removed quote substitution in query for tokens in drilldown in visualizations
  • Fixed incorrect font size in Single Value visualization
  • Fixed incorrect color display in Single Value visualization

Core: Engine​

Improvements
  • Improved result processing in the rest command
  • Added format_escape_backslash setting for escaping the \ character in format command results
  • Optimized function operation in the peval command
  • Empty timefield, earliest and latest parameters specified in the search string will now be ignored
Fixes
  • Fixed order issue in the format command
  • Fixed error when calling | aggs count using Cross Cluster Search
  • Fixed field display when executing the format command
  • Fixed mapping operation with the format command when the enable_field_caps setting is enabled
  • Fixed field statistics display when using Cross Cluster Search
  • Fixed hexadecimal number comparison in the where command
  • Fixed empty string filtering in the search command
  • Fixed operation of the append command with enabled limits
  • null values in the join command are now overwritten
  • Fixed display of Job Scheduler searches in the active searches list after their completion

Core: Remote Executor​

Fixes
  • Service logs are now written correctly without the need for additional configuration

Core: Job Scheduler​

Fixes
  • Fixed search result format in Index Events Action and Webhook Action
  • Added job_title field to internal logs .smos_internal
  • If the task launch feature with role settings (run_with_permissions) is enabled but no roles are specified in the task itself, the job_user and job_user_roles parameters will be used to launch the task
  • Fixed incorrect operation of Webhook Action when the isRunOnce flag is disabled
  • Fixed call stack accumulation when running on a large number of results
  • Fixed logging of task action information

Incident Manager​

Fixes
  • Fixed aggregation configuration update freezing when the task list is not updated
  • Fixed service startup before configuration is populated with settings from the index
  • When changing the status in an incident for the first time, the assignee is now automatically set
  • Fixed error when editing multiple incidents with different workflows

Inventory​

Fixes
  • Added human-readable error for incorrect asset configuration filling
  • Fixed page switching in Asset List

Smart Beat​

Fixes
  • Fixed client filtering by operating system

User Behavior Analytics​

Fixes
  • Fixed focus loss issue in modal window when editing fields

Version 4.1.2​

📅 Smart Monitor version 4.1.2 released on September 9, 2024.

Core​

Improvements
  • Improved display of large notifications in search
  • Added ability to use tokens for the map command in the search command
Fixes
  • Fixed saving of Tasks in Jobs List when deleting an additional field in Incident Action
  • Fixed pagination in the dashboards list
  • Fixed drilldown operation with custom link type in Column Chart, Heat Map, Line Chart, Pie Chart, Single Value, Table
  • Fixed display and calculation in Table visualization with null values in colored cells
  • Fixed operation of the Apply Settings button in Line Chart visualization
  • Fixed dashboard display in FireFox browser version 112 and higher
  • Added correct handling of null values in Table visualization

Core: Job Scheduler​

Fixes
  • Fixed pagination errors in Jobs List
  • Fixed issue with error occurring when using splitting in Metric Action
  • Fixed operation of the rest command for execution via Job Scheduler

Incident Manager​

Improvements
  • Added ability to edit fields in Ad-Hoc Actions, that will be included in the script
  • Improved display of comments in incident history in dark theme
Fixes
  • Fixed incorrect addition of comments to incident history
  • Fixed operation of the Assignee filter when filtering by display name
  • Fixed incorrect filtering of dependent filter types in Incident Card

Smart Beat​

Fixes
  • Fixed agent status information update

Inventory​

Fixes
  • Fixed error during configuration import
  • Fixed display of asset configuration list after asset deletion
  • Fixed inactive hide filters button when no filters are present in the asset

Knowledge Center​

Fixes
  • Fixed missing time interval under the Time Interval header in the rule
  • Fixed error Error: Cannot read properties of undefined (reading 'toLowerCase'), in the Additional Parameters section when editing a rule
  • Fixed error Error: Cannot read properties of undefined (reading 'map') when re-editing a data source after saving, without switching to another window
  • Fixed list update after article deletion

Lookup Manager​

Fixes
  • Fixed error occurring when entering special characters in the directory filter search

MITRE ATTACK​

Fixes
  • Added restriction on editing matrix data in the layer if the user does not have write permissions

User Behavior Analytics​

Fixes
  • Fixed error Error: query is null when filtering object and configuration lists
  • Fixed empty Description field when navigating to a profiling policy
  • Fixed error with retrieving scoring calculation statistics
  • Configuration is now correctly saved without the Filter field
  • Fixed incorrect update of recording settings and closure of run statistics

Version 4.1.3​

📅 Smart Monitor version 4.1.3 released on November 6, 2024.

Core​

Improvements
  • Added links to modules on the main page
  • Improved search bar tooltips
  • Fields from Search Results section in incident and mitre actions in Job Scheduler renamed to Result Fields
Fixes
  • Fixed error where the core.use_cluster_state setting value was reset after cluster restart
  • Fixed error when retrieving configurations from Cluster State
  • Fixed encoding issue in log files when logging object deletion records
  • Fixed duplication of dot character when suggesting in the source command
  • Fixed update of Selection filter without saving the dashboard
  • Fixed search execution time display
  • Fixed focus shift on search page when expanding notifications
  • Priority field in the index management section is now mandatory
  • Fixed incorrect coloring in some search visualizations
  • Fixed missing backslash character escaping in object names during export
  • Fixed addition of extra spaces and line breaks when copying a query
  • Fixed substitution of prefix and filter token used in another filter's search
  • Fixed page freeze after selecting logarithmic display for Line Chart
  • Fixed incorrect information display on Pie Chart
  • Fixed Drilldown operation in Radar Chart visualization
  • Fixed error in displaying results in table
  • Fixed Table display when using the timeaggs command

Core: Engine​

⚡️ Changes
  • Changed calculation formula in the stdev statistical function to Population Standard Deviation
Fixes
  • Fixed incorrect comparison of numbers with different data types in theeval command
  • Fixed error where the random function in the eval command generated identical values for different documents
  • Fixed array handling in all peval scripts
  • Fixed parser error in the timechart command when using the useother parameter
  • Fixed writing of only the first 10000 documents when using the outputlookup command with append=false
  • Fixed issue where peval could not process keys enclosed in single quotes
  • Fixed bug occurring when source peval wildcard worked together, and added sens-scripts for equal and wildcard operators
  • Fixed missing OTHER field in timeaggs avg command results
  • Fixed error in the db command that required a cluster restart to apply the updated driver path
  • Fixed error in the stats command where the list, last, first functions returned numbers as strings
  • Added handling of fields with spaces in the format command, optimized algorithm
  • In the timeaggs command with composite=true intervals with empty values are now displayed the same as without composite=true
  • The relative_time function in the eval command can now accept fields as the second parameter
  • Fixed incorrect calculation of frequently occurring values in the field bar for queries via source clk:...

Core: Job Scheduler​

Fixes
  • Fixed writing of the custom_fields field in Mitre Action to a single line
  • Fixed error when expanding the Additional Fields section in the Incident Creation action
  • Incident Creation action can no longer be saved without a description

Core: RSM​

Fixes
  • Fixed RSM tree and indicator settings display

Inventory​

Fixes
  • Fixed incorrect coloring of some field names in the asset table

Lookup Manager​

Fixes
  • Search now only searches fields displayed in the directory list

Knowledge Center​

Fixes
  • Fixed selection of read or write permissions for all users in the Rule List section

Mitre Attack​

Fixes
  • Fixed non-working links in MITRE matrices

Incident Manager​

Fixes
  • Fixed operation of the Assignee filter with the Not set value
  • Fixed display of default field values from the incident card when manually creating an incident and incident groups
  • Fixed errors when filtering by strings with special characters
  • Fixed errors when navigating via the View additional information link

User Behavior Analytics​

Fixes
  • Fixed IndexNotFoundException error when calculating profiling or scoring if a non-existent index is specified in the calculation
  • Fixed error when substituting type in policy
  • Fixed error when filtering object and configuration tables
  • Fixed modal window reset when selecting text
  • Fixed various display issues in filling configurations
  • Fixed field validation in Cybersecurity Index
  • Fixed translations of scoring types during initialization

Version 4.1.4​

📅 Smart Monitor version 4.1.4 released on December 6, 2024.

Core​

Fixes
  • Fixed addition of extra spaces and line breaks when copying in Search
  • Fixed mapping issues in Data Upload section

Core: Engine​

Fixes
  • Fixed operation of the lookup command with lists
  • Fixed field renaming from directory in the lookup command
  • Fixed operation of the fillnull command when requesting large amounts of data

Core: Job Scheduler​

Improvements
  • Improved field validation in Webhook
Fixes
  • Incident Creation action can no longer be saved without a description

Incident Manager​

Fixes
  • Fixed erroneous addition of incidents to an incident group after closing the incident group

Knowledge Center​

Fixes
  • Removed Tags section

Lookup Manager​

Fixes
  • Fixed missing translation for Tags filter

MITRE ATTACK​

Fixes
  • Fixed display of links and code in technique description windows

User Behavior Analytics​

Improvements
  • Added ability to ignore case sensitivity for identity fields