Released: Mar 7, 2024

Updates in 3.1.6

Funktionen

• Added built-in dashboard for Windows Events and EVTX files.
• Added SQL drill down capability to dashboard reports.
• Improved performance when working with large data sets.
• Added support for SQL INNER JOIN and LEFT JOIN.
• Added drill-down SQL queries to all prebuilt reports.
• Significantly improved performance when executing SQL Filters.
• Improved support for Serilog and CLEF JSON log entries.
• Added support for basic SQL JOIN operations.
• Updated Windows Event Log processing libraries.
• Improved memory usage and performance when executing SQL statements.
• Added Status Codes report to the pre-built IIS dashboard.
• Added AI chat prompt command to SQL editors.
• Added support for SQL table valued functions.
• Added LoadCsv as table valued function.
• WHERE clauses can now execute across multiple threads.
• SELECT TOP is now optimized when an ORDER BY condition is not provided.
• Added BOTTOM keyword to the SQL engine.
• Added STRING_AGG, VAR, VARP, STDEV, and STDEVP aggregate SQL functions.
• Added HttpStatusCodeDesc, Win32ErrorDesc, GetUtcDate, and Date SQL functions.
• CSV parser now supports the use of '#' in the header to represent a comment.
• A new Local Event Logs data source will now be added automatically on new installations.
• Negative notifications no longer require a priming event.
• Added a warning message to discourage use of wildcards at the start of a template regex.

Fehlerkorrekturen

• Fixed issue with scroll wheel not working in dashboard reports.
• Fixed stack overflow which could occur if a SQL statement references itself.
• Fixed issue with dashboard horizontal scroll.
• Fixed issue with editing message parsers.
• Fixed issue with popup menu group lines not showing.
• Fixed an issue with using the Elapsed column in text transformation templates.
• Fixed issue with null reference in ORDER BY condition.
• Fixed an issue with calling aggregate functions without a GROUP BY clause.
• Expanded SQL keywords to include conditions.
• Fixed issue with filter names on invert.
• Fixed issue with Session rule.
• Improved SQL exception handling.
• Fixed exception which could occur when parsing a message template.
• Removed a low memory warning which could be shown incorrectly.