MonitorWare Agent 14.0 Released

Release Date: 2021-03-09

Build-IDs: Service 14.0.0.542, Client 14.0.0.1632

Features

  • Filter Engine: Add support to filter by IPv6 addresses.
  • File Action: Added Log Rotation support. For more details see the manual.
  • Eventlog Monitor V2: Added support to for LogPoint SIEM JSON Format.
  • Eventlog Monitor V2: Added support for the following EventLog properties (if available):
    Providerguid, processed, threaded, version, opcode, eventtype, nxseverityvalue (required for Severity Mapping in LogPoint SIEM JSON Format)
  • Action Caching: Added support for caching / queuing in RELP, SETP and SNMP Action when Action processing fails.
  • Filter Engine: Added support to store filter results when using the global Status Variable type filters.
  • Queue Engine: Added Warning/Error events which are generated when the queue gets full.
  • Librelp: Updated librelp to v1.8.0.
  • Openssl: Updated to version 1.1.1g.

Bugfixes

  • File Action: Fix problem appending into logfiles larger than 4GB.
  • Filter Engine: Fixed SaveIntoProperty handling when using the Status Type Filter.
  • Start Program Action: Fixed issue loading the sync timeout setting.
  • Queue Engine: Fixed an issue that caused an internal exception
    STATUS_STACK_BUFFER_OVERRUN when two TCP Syslog Sessions where closed at the same time.

You can download Free Trial Version of MonitorWare Agent.

MonitorWare Agent 13.2c Released

Release Date: 2021-01-27

Build-IDs: Service 13.2.0.538, Client 13.2.0.1618

Bugfixes

  • Syslog Service: Fixed an parsing issue of the syslogtag (rfc5424 only) with malformed syslog headers.
  • Syslog Service: Fixed an issue where two nullbytes were appended to the rawsyslogmsg property.
  • EventLog Monitor V2: Fixed Unicode support when using JSON Output format.
  • IPv6: Fixed a conversion issue when a source was converted into a IPv6 address string.

You can download Free Trial Version of MonitorWare Agent.

MonitorWare Agent 13.2 Released

Release Date: 2020-06-16

Build-IDs: Service 13.2.0.535, Client 13.2.0.1618

Features

  • File Action: Added option “Explicitly update create and modified file timestamp” to control created and modified file time.

Bugfixes

  • File Action: Fixed a problem closing the current open file too soon. The File Timeout is now properly handled.
  • EventLog Monitor V2: Fixed a problem during configuration load that could cause unexpected termination of the service.

You can download Free Trial Version of MonitorWare Agent.

MonitorWare Agent 11.3c Released (Build-IDs: Service 11.3.0.512, Client 11.3.0.1585)

MonitorWare Agent 11.3c Released

Build-IDs: Service 11.3.0.512, Client 11.3.0.1585

Features

Bugfixes

  • Property Engine: Fixed a bug that caused the first dynamic property to be missing when using XML report format. This bug also affected the SETP Sender and the Syslog TCP File-Caching feature (%rawsyslogmsg% missing).

You can download Free Trial Version of MonitorWare Agent.

MonitorWare Agent 11.3a Released (Build-IDs: Service 11.3.0.508, Client 11.3.0.1585)

MonitorWare Agent 11.3a Released

Build-IDs: Service 11.3.0.508, Client 11.3.0.1585

Features

Bugfixes

  • PostProcess Action: Fixed a high CPU issue on configuration reload caused by the PostProcess Action code.
  • Debug Output: Fixed misleading debug output of windows socket errors.
  • Discard Action: Fixed an issue when the discard action was called (Only happened when debug logging was fully enabled).

You can download Free Trial Version of MonitorWare Agent.

MonitorWare Agent 11.1 Released (Build-IDs: Service 11.1.0.494, Client 11.1.0.1576)

MonitorWare Agent 11.1 Released

Build-IDs: Service 11.1.0.494, Client 11.1.0.1576

Features

  • Updated to OpenSSL 1.0.2k.
  • Configuration Reload: This is a big new core feature allowing the
    service to reload itself automatically after a configuration changed has
    been detected. The feature can be turned off in General-General Options if
    this new behavior is not wanted. By default auto reload will be enabled.
    The latest Configuration Client is required for the feature to fully work.
  • SNMP Receiver: Added new compressed output format for message property.
  • EventLog Monitor V2: Added new options to delay LastRecord save.
    Enabling this option will improve processing performance of machines with
    a high event volume.
  • EventLog Monitor V1: Added new option to delay LastRecord save. Enabling
    this option will improve processing performance of machines with a high
    event volume.
  • File Monitor: Added new option to delay LastFilePosition save. Enabling
    this option will improve processing performance when processing large
    growing files.
  • FileConfig: Changed datafile saving method, more reliable when the
    service is stopped unintentionally while updating data state files.
  • Send SNMP action: Added new variable for SNMPv1 AgentIP field. By
    default the property will be set to %source%.
  • Send Syslog Action: Added new option to enable/disable UTF8 BOM. Default
    is enabled like before, but it can be disabled now by configuration so the
    message won’t contain the UTF8 BOM.

Bugfixes

  • Property Engine: Fixed SystemID and CustomerID properties.
  • FileConfig: Due a missing property (FilterVersion), some of the global
    conditions in rule filters could not be used. This automatically fixes
    itself next time the configuration is saved with the Client.
  • Debug Logging: Completely rewritten debug output for Rule Engine
    (Filters) for better readability and analysis.
  • Fixed an compatibility issue on Windows 2003/XP (failed to start because
    WSAPoll API is missing).
  • FileConfig: Fixed an issue with invalid linefeeds when using includefile
    directive.
  • FileConfig: Fixed EnumRegkey emulation causing EventLog Monitor Services
    to load invalid eventlog channels.
  • Debug Logging: Moved RELP Debugging from minimal to internal
  • FileMonitor: Fixed issue rewriting filepointer updates each time when
    wildcards support was enabled.
  • SNMP Trap Receiver: Fixed handling of SNMPv1 Enterprise traps. All
    properties are now properly set.
  • SNMP Trap Receiver: Fixed shutdown of Service causing a problem when
    reloading configuration.

You can download Free Trial Version of MonitorWare Agent.

2016-12-08 MonitorWare Agent 11.0 released

Adiscon is proud to announce the 11.0 release of MonitorWare Agent.

MonitorWare Agent now fully supports Windows Server 2016 and is ready to be used in the most demanding environments. For this, integration in enterprise-systems like SNMP has been greatly enhanced and simplified.

Also, the latest RELP subsystem is now supported. As another highlight, internationalization has been enhanced by even better support and automatic detection of various character sets, including for example Japanese. This also offers proper message translation between e.g. SNMP and syslog messages and can be used to normalize message flows.

Detailed information can be found in the version history.

Version 11.0 is a free download. Customers with existing 10.x keys can contact our Sales department for upgrade prices. If you have a valid Upgrade Insurance ID, you can request a free new key by sending your Upgrade Insurance ID to sales@adiscon.com. Please note that the download enables the free 30-day trial version if used without a key – so you can right now go ahead and evaluate it.

MonitorWare Agent 11.0 Released (Build-IDs: Service 11.0.0.480, Client 11.0.0.1570)

MonitorWare Agent 11.0 Released

Build-IDs: Service 11.0.0.480, Client 11.0.0.1570

Features

  • Added Windows 2016 Support.
  • Updated Syslog RFC3195 liblogging library
  • Updated librelp library to 1.2.11
  • Updated net-snmp library to 5.7.3. Net-snmp debug messages are also printed into the Adiscon debug log now.
  • File Monitor: Added support for UTF16 Big Endian
  • SNMP Trap Receiver: Added support to read UTF8, Shiftjis, EUC-JP encoded strings in SNMP variables.

Bugfixes

  • File Configuration: Fixed an issue loading file configuration when invalid characters where within config files like UTF8 BOM.
  • Syslog Server: Fixed internal issue when receiving empty syslog messages.
  • Adiscon SNMP Libs: Increased string length to 65536. Also fixed wrong datetimestamp in comments.
  • File Action: Fixed multiple issues in output format related to different file encodings.
  • SNMP Trap Receiver: OID’s are printed as numbers again if mib resolving is disabled.

You can download Free Trial Version of MonitorWare Agent.

2016-09-19 MonitorWare Agent 10.3 released

Adiscon is proud to announce the 10.3 release of MonitorWare Agent.

This is a bugfixing release with minor feature update.

Most importantly, the Adiscon SNMP MIB now supports messages sizes up to 64k (previous limit was 255 characters). The OpenSSL Library has been updated to 1.0.2h. Bugs were fixed primarily in RELP and syslog forwarding processing and internal queue handling. For details please see the change log.

Detailed information can be found in the version history.

Version 10.3 is a free download. Customers with existing 9.x keys can contact our Sales department for upgrade prices. If you have a valid Upgrade Insurance ID, you can request a free new key by sending your Upgrade Insurance ID to sales@adiscon.com. Please note that the download enables the free 30-day trial version if used without a key – so you can right now go ahead and evaluate it.

MonitorWare Agent 10.3 Released (Build-IDs: Service 10.3.471, Client 10.3.1564)

MonitorWare Agent 10.3 Released

Build-IDs: Service 10.3.471, Client 10.3.1564

Features

  • OpenSSL library updated to 1.0.2h.
  • Adiscon SNMP Mib:
    • Changed DisplayString limit from 255 characters to 65536. Now, strings above 255 characters can be send using the adiscon mibs.

Bugfixes

  • Send Syslog Action:
    • Fixed an issue with the “Disable processing, forward as it is” Option. RawSyslogMsg property is used instead of msg property.
  • Send Relp Action:
    • Fixed an issue in the Session Close shutdown procedure which could lead to leaking sessions on Relp Servers.
    • Fixed an issue setting a proper status on failure.
    • Fixed a problem handling socket failures.
  • File Action:
    • Fixed issue detecting the last used file on startup when Circular Logging is enabled.
  • Event Monitor V2:
    • Dynamic properties could break XML format if they contained spaces in their name. Spaces and control characters are now properly replaced with underscores.
  • Relp Listener:
    • Fixed Socketsystem startup if only one Relp Listener Service was configured without any other network related services.
  • Syslog Server:
    • Fixed an issue relaying the priority / facility properties on Syslog Forward. The prifac property was not properly recreated if the message source was Syslog
    • Fixed an issue with RFC5424 header parsing which partially parsed invalid formatted syslog messages. This broke the original message.
    • Fixed a parsing issue (TCP Protocol only) when the syslog header was missing. When the first characters were a number, TCP Syslog tried to detect octet framing. This failed but the beginning characters of the message were lost. Also octet framing was not disabled resulting in unexpected endings of the message.
    • Fixed an issue with RFC 3164 Syslog Header parsing when “take syslog source from msg” is enabled.
  • Property Replacer:
    • Date related options are now evaluated before and after the property is truncated. But only if a match before the string truncation was not successful.

You can download Free Trial Version of MonitorWare Agent.