Changelog

- [4640] Improved im_msvistalog to report malformed events instead of skipping them
- [5317] Improved im_linuxaudit to handle various field types
- [6087] Fixed improper error handling in im_linuxaudit
- [6161] Upgraded GPG signature of Linux packages to SHA2-256
- [6679] Fixed xm_admin for stalling after malformed SOAP request
- [6879] Implemented official support for Oracle Linux 8 and 9
- [6946] Added new parameters to im_msvistalog for event rendering optimizations
- [7001] Added new module im_azuremonitor
- [7004] Improved im_winperfcount with wildcards support
- [7008] Implemented OpenTelemetry log and trace forwarding with om_otel
- [7013] Fixed xm_admin successfully parsing incorrect SOAP request
- [7033] Fixed om_zmq for segfault on being unable to resolve hostname
- [7071] Fixed multiple systemd reload during installation on Debian 11 and Ubuntu 22
- [7184] Implemented official support for macOS 15
- [7209] Fixed xm_fileop ignoring $older parameter on file_remove()
- [7214] Updated im_maces to macOS 15 ES API event list
- [7217] Fixed im_systemd stopping reading logs on journal rotate on newer OSes
- [7240] Fixed om_raijin's high CPU usage when receiver was down
- [7267] Implemented additional parameters in common TCP code to control reconnect behavior
- [7269] Improved local error logging for xm_admin API calls
- [7385] Extended im_ms365 to support additional event sources
- [7398] Fixed om_otel panic when $Attributes is undefined
- [7407] Fixed memory leak in common code for XML parsing
- [7418] Fixed security issues in Docker images
- [7525] Fixed generic DEB package for leaving spare conf file and failing to properly load xm_admin

- [7391] Set ConnectionIdleTimeout to off by default

- [4101] Fixed config parser not checking trailing angle brackets
- [4336] Added support of AllowIP/BlockIP directives to im_udp
- [4874] Fixed error at im_wseventing with "Expires" directive
- [5820] Added ExitTimeout directive for im_exec and om_exec
- [6212] Fixed im_azure not restoring connection after SSL error
- [6281] Fixed segfault at om_zmq with xm_resolver in daemonized mode
- [6299] Fixed xm_admin not answering with extra long answers
- [6318] Fixed om_azure on Windows if the message is multiline
- [6337] Fixed panic at im_tcp on Solaris 10
- [6422] Added MaxConnections for TCP-based modules
- [6439] Changed macOS packages vendor signature to "NXLog FZE"
- [6442] Deprecated Domain directive from im_salesforce as now Salesforce does it automatically
- [6451] Fixed xm_kvp not allowing the use of control characters as quotes or delimiters
- [6531] Updated xm_pattern documentation with a note that IP4ADDR and IP6ADDR were substituted with IPADDR
- [6615] Improved the im_msvistalog event rendering process
- [6622] Fixed config parser changing some unsigned values to negatives
- [6648] Fixed memleak at xm_json trying to parse empty or incorrect input
- [6671] Fixed segfault at xm_python working with older Python versions called from multiple routes
- [6695] Fixed AsyncModule panic at Rust-based modules receiving non-UTF8 characters in the message
- [6703] Implemented ConnectionIdleTimeout for all TCP-based modules.
- [6704] Added possibility to set Platform URL and label during installation via env variables
- [6781] Fixed im_msvistalog directive ResolveSID
- [6783] Added new parameter ShowExtendedInfo to im_etw
- [6808] Added new module xm_transform
- [6844] Added new module im_otel to receive OpenTelemetry Logs and Traces
- [6847] Added Ubuntu 24 LTS support
- [6848] im_wseventing performance improvements
- [6851] Fixed segfault when logs are received if queues are full and FlowControl is disabled
- [6873] Fixed memory growth at om_zmq
- [7014] Fixed xm_admin memory overusage when failing with oversize strings
- [7044] Fixed xm_admin assert error while building serverInfo response
- [7072] Enhanced the im_ssl TLSConnectLog response with client host and port
- [7079] Fixed im_systemd failing on log rotation
- [7129] Fixed om_uds unlinking symlinks after shutdown when run as root
- [7190] Changed the Windows Nano package name to align with common naming schema
- [7192] Fixed im_uds unlinking symlinks after shutdown when run as root
- [7208] Dropped official support of FreeBSD11 as original repositories are deleted
- [7230] Fixed uncontrollable PersistLogQueue HDD usage
- [7264] Fixed im_exec and om_exec when the child process stops too fast

- [6998] Fixed xm_admin unable to receive complete configuration files if they are over 350 lines long

- [3624] Added support for DTS log format in xm_nps
- [5288] Fixed xm_admin not sending big responses to getLog in some situations
- [5314] Fixed some events not being picked up by im_maculs on macOS 13
- [5450] Fixed SSL-related and token-related issues in im_azure
- [5890] Enhanced the error message for "host not resolved" situations
- [5900] Added logging of exact crypto protocol and suite in im_ssl
- [5914] Added user name and password database authentication in om_raijin
- [5955] Fixed error while starting NXLog with an alternative config specified in a command line on Ubuntu 22
- [5963] Enhanced the list of supported events in im_maces up to macOS API v13
- [6027] Upgraded apr, pcre2, and openssl 1.1.1 libraries to the most recent versions
- [6063] Fixed im_amazons3 not picking up credentials from a file
- [6105] Fixed a memory leak in im_file while reading many files with a wildcard
- [6168] Fixed assertion error in im_aixaudit
- [6212] Fixed im_azure restart if no event arrived within 3 minutes after starting
- [6239] Fixed the Reconnect directive in om_raijin
- [6308] Fixed xm_admin not sending big responses to ServerInfo in some situations
- [6346] Fixed SEGFAULT with malformed config on macOS 13
- [6365] Fixed SEGFAULT at xm_kvp on invalid input
- [6459] Fixed a memory leak in im_msvistalog
- [6489] Fixed behavior for negative Reconnect values in im_redis and om_redis
- [6529] Fixed incorrect statistics reporting via SOAP in xm_admin
- [6563] Added the ability to match string to pattern with both xm_pattern and core API
- [6567] Implemented CertPattern and CAPattern directives for SSL-related modules
- [6570] Fixed persistent logqueue assertion error in om_ssl
- [6580] Fixed om_file misbehavior with xm_zlib in gzip mode
- [6583] Added global UseCNGCertificates directive
- [6600] Fixed om_raijin losing first batch of data when using user name and password authentication
- [6610] Fixed om_file not evaluating functions in File parameter
- [6643] Improved im_maces notifications about unsupported events
- [6652] Added terminate parameter to xm_admin ServerRestart function to provide agent real restart if supported by OS service manager
- [6678] Fixed om_batchcompress memory consumption when receiving malformed packet
- [6711] Updated Rust libraries due to security reasons
- [6731] Fixed assertion error in im_maculs
- [6746] Fixed abnormal memory usage with multiple routes to one output module with FlowControl
- [6785] Fixed im_msvistalog crash on EventID 108

- [4366] Fixed performance degradation in im_msvistalog when multiple evtx files were supplied
- [4894] Fixed the Python library loading on Windows platforms
- [5191] Fixed error in config rollback mechanism in xm_admin
- [5252] Fixed assertion error in im_maces on MacOS 10.15
- [5555] Added symlink and wildcard handling in im_fim
- [5634] Added symlink and wildcard handling in im_file
- [5776] Fixed error at im_tcp and om_tcp when too many files were opened
- [5778] Fixed om_azuremonitor silently not sending data on incorrect message structure
- [5866] Fixed flow control handling in im_tcp, im_ssl
- [5968] Added an alias StreamName to TableName at om_azuremonitor
- [6052] Fixed xm_rewrite aborting when processing specific configuration
- [6082] Implemented the automatic fix in om_azuremonitor for TimeGenerated field contents
- [6020] Fixed om_kafka when invalid compression option was set
- [6023] Fixed im_wseventing when Kerberos was ignoring authentication
- [6144] Fixed SEGFAULT at im_kafka when module requested server too often
- [6196] Fixed logqueue persistence mechanism when program is started with insufficient privileges
- [6215] Fixed SEGFAULT in im_file when dir was passed to File parameter
- [6218] Modified SetUid function in xm_admin, forceful reboot is removed
- [6241] Fixed assertion error in *m_python when mandatory function is not present
- [6247] Fixed error with module_restart() in im_testgen