Release notes for IBM Log Analysis
Use these release notes to learn about updates to IBM® Log Analysis.
As of 28 March 2024 the IBM Log Analysis and IBM Cloud Activity Tracker services are deprecated and will no longer be supported as of 30 March 2025. Customers will need to migrate to IBM Cloud Logs, which replaces these two services, prior to 30 March 2025. For information about IBM Cloud Logs, see the IBM Cloud Logs documentation.
28 March 2024
- IBM Log Analysis is deprecated
- For more information about the deprecation, see Deprecation of IBM Log Analysis and IBM Cloud Activity Tracker.
8 December 2023
- Virtual private endpoint support
- IBM Log Analysis now supports virtual private endpoints for VPC. For more information, see Using virtual private endpoints for VPC to privately connect to IBM Log Analysis.
5 December 2023
- Logging agent 3.9 is now available.
-
Version 3.9 of the logging agent is now available. Changes include:
-
A new configuration parameter MZ_METADATA_RETRY_DELAY to delay Kubernetes logs until pod metadata is available.
-
Enhancements to reduce the number of file events and the order in which events are processed to reduce memory, deduplication and improve throughput.
-
Enhancements to handle truncation during file create.
-
Enhancements for Windows environments: an icon has been added for the windows executable; you can now monitor windows event logs; and a fix is included to address the issue where an agent crashed if the windows log directory was not present.
-
Support for Mac (Experimental release).
-
Memory enhancements: Optimization of memory allocations in file system monitoring; reduced memory overhead of kubernetes watchers.
-
Enhancement on the journald dockerfile so that it does not enumerate linux devices.
-
Enhancements on the agent logs: The environment configuration is printed on startup; log information is generated to notify when the agent exits gracefully.
and more.
-
22 November 2023
- Context-based restrictions support
- IBM Log Analysis now supports access support to IBM Log Analysis using context-based restrictions.
31 October 2023
- Services now sending logs to Madrid
- Some services are now sending logs to Madrid. See services generating logs by location for the services sending logs to Madrid.
18 October 2023
- Changes to Chennai (in-che) IP addresses
- New endpoint IP addresses are being added to the Chennai region (in-che) after 17 November 2023. If your service is configured to use specific IP addresses or firewall to a specific IP address, then modification to the new IP addresses might be required. For more information on the endpoint changes, see Service IP changes.
28 September 2023
- Changes to endpoint IP addresses
- Several endpoint IP addresses are changing after 30 October 2023. If your service is configured to use specific IP addresses or firewall to a specific IP address, then modification to the new IP addresses might be required. For more information on the endpoint changes, see Service IP changes.
26 September 2023
- Madrid region support
- Madrid is now an online region for IBM Log Analysis. Services can now be provisioned in Madrid and Madrid endpoints can be used. Platform metrics will continue flowing to the Frankfurt region.
24 July 2023
- CIDR block deprecated in Frankfurt
- A CIDR block has been deprecated in Frankfurt. You should remove deprecated CIDR blocks from any configured allowlists. See CIDR blocks for more information.
27 June 2023
- CIDR block deprecated in Frankfurt
- A CIDR block has been deprecated in Frankfurt. You should remove deprecated CIDR blocks from any configured allowlists. See CIDR blocks for more information.
8 June 2023
- CIDR blocks deprecated in London and Toronto
- Some CIDR blocks have been deprecated in London and Toronto. You should remove deprecated CIDR blocks from any configured allowlists. See CIDR blocks for more information.
25 April 2023
- New private CIDR blocks available for Toronto
- New private CIDR blocks will be available on 10 May 2023 for Toronto. See CIDR blocks for more information.
22 February 2023
- New CIDR blocks available
- New CIDR blocks will be available on 9 March 2023. See CIDR blocks for more information.
21 February 2023
- Logging agent 3.8 is now available.
-
Version 3.8 of the logging agent is now available. Changes include:
-
The ability to include or exclude logs based on annotations and labels.
-
The ability to collect the image name and tags for containers as metadata for each log line.
-
Fix for when frequent DNS requests were made and were rejected.
-
Fix for advanced Glob and Regex patterns not being recognized causing files to be ignored.
-
13 February 2023
- New API method to retrieve account usage totals
- A new method is available to get aggregate data usage information for an account during a specified time period.
10 January 2023
- Upcoming changes to endpoint IP addresses
- Several endpoint IP addresses will be changing after 24 January 2023. If your service is configured to use specific IP addresses or firewall to a specific IP address, then modification to the new IP addresses might be required. Allowlisted IP addresses can be configured in advance of the change to avoid service interruptions. For more information on the endpoint changes, see Service IP changes.
- Webhook alerts are enabled for Index Rate alerting.
- For more information, see Activate the index rate alert feature.
14 December 2022
- Upcoming changes to endpoint IP addresses
- Several endpoint IP addresses will be changing after 15 January 2023. If your service is configured to use specific IP addresses or firewall to a specific IP address, then modification to the new IP addresses might be required. Allowlisted IP addresses can be configured in advance of the change to avoid service interruptions. For more information on the endpoint changes, see Service IP changes.
08 December 2022
- Changes to endpoint IP addresses
- Several endpoint IP addresses have changed. If your service is configured to use specific IP addresses or firewall to a specific IP address, then modification to the new IP addresses might be required. For more information on the endpoint changes, see Service IP changes.
03 October 2022
- Availability of the IBM Log Analysis agent 3.6
-
Windows logging agent 3.6 is now available. This agent is a rust agent that includes Windows File Logging support.
MZ_
environment variables are available.For more information about the agent. Learn about configuring the agent.
06 May 2022
- Changes to endpoint IP addresses
- Several endpoint IP addresses have changed. If your service is configured to use specific IP addresses or firewall to a specific IP address, then modification to the new IP addresses will be required. Until 23 May 2022, the original endpoints are in effect.
24 March 2022
- Ability to limit access to private endpoints only
- You can limit access to an IBM® Log Analysis instance to private endpoints only. Learn more.
11 February 2022
- Support for syslog private endpoints
- IBM Log Analysis now supports syslog private endpoints. Learn more about syslog private endpoints.
3 February 2022
- Changes to Tokyo syslog IP addresses
- The IP addresses used for the
syslog-a.jp-tok.logging.cloud.ibm.com
endpoint have changed. If your service is configured to use specific IP addresses or firewall to a specific IP address, then modification to the new IP addresses will be required.
31 January 2022
- Index rate analysis to alert on unexpected data volume spikes
- You can configure index rates alerts in your IBM Log Analysis instance to monitor and be alerted of unexpected spikes in your data volumes. Use the index rate to analyze and predict costs that are associated with storage of searchable data. Learn more about index rate analysis.
- Managing and limiting data usage
- In your IBM Log Analysis instance, you can use the usage quota settings to control how much data is stored so you can manage your data cost while still being able to view and retain the data that you need. Learn more about usage quotas.
4 October 2021
- API for archiving
- Documentation of API changes supporting archiving is generally available. Learn more about the archiving API.
30 September 2021
- API for data streaming
- Documentation of API changes supporting data streaming is generally available. Learn more about the streaming API.
31 August 2021
- Support to stream data is generally available
- Streaming data from an IBM Log Analysis instance to other corporate tools such as Security Information and Event Management (SIEM) tools is generally available. Learn more about streaming.
2 July 2021
- Support to stream data is available in beta
- New beta feature that is released in US-South and Frankfurt to stream data from an IBM Log Analysis instance to other corporate tools such as Security Information and Event Management (SIEM) tools. Learn more about streaming.
31 March 2021
- New CLI support
- New CLI added that can be used to list instances and export data from an instance. Learn more about the CLI.
- New API support
- New API added that can be used to export data from an instance, and manage views and alerts. Learn more about the API.
31 January 2021
- Changes to archiving frequency
- Hourly archiving in Chennai, Tokyo, Sydney, Seoul, London, Washington instead of daily archiving. Learn more.
31 December 2020
- Addition of configuration support using an API
- Configuration support using an API, in addition to configuration using the web UI.
- Terraform support
- Support for Terraform to programmatically manage IBM® Log Analysis instances and agents and automate their deployment.
9 July 2020
- HIPPA service plans available
- Added support for 30-day search plans for HIPAA workloads.
19 July 2019
- Enhanced data residency, compliance, and security
-
The following support is now available:
- Services are available in London and Tokyo.
- Services in Frankfurt are now available as EU-Managed.
- Cloud Service endpoint support is available in all regions.
27 November 2018
- Introducing IBM Log Analysis
- You can use IBM Log Analysis to manage system and application logs in the IBM Cloud. IBM Log Analysis offers administrators, DevOps teams, and developers advanced features to filter, search, and tail log data, define alerts, and design custom views to monitor application and system logs. Learn more