What's New in This Release

This topic lists new features and changes in functionality in TIBCO LogLogic® Log Management Intelligence and TIBCO LogLogic® Enterprise Virtual Appliance version 6.2.1 as compared to the earlier release.

For other information such as migration, closed issues, and known issues, see TIBCO LogLogic® Log Management Intelligence 6.2.1 Release Notes.

New Features

New features for the following components and functionalities have been introduced in this release:

New Hardware Appliances
Starting from version 6.2.1, TIBCO LogLogic® introduces H5 appliance models. For more information about these models, see External Hardware Descriptions in the TIBCO LogLogic® Log Management Intelligence Hardware Installation Guide.
Health Monitoring
Version 6.2.1 introduces the health monitoring utility hmonlog.py By using the utility, an administrator can enable health monitor logging for aggregation node, correlation node, data node, and query node. For more information about how to enable health monitor logging, see Health Monitoring Utility in the TIBCO LogLogic® Log Management Intelligence Administration Guide.
Health Check
The health check process now checks the following items during an upgrade:
  • Minimum disk space: 100 MB on the root (/) and 10 GB on /loglogic
  • Hardware RAID
  • CPU and memory checks for LogLogic EVA
System Settings
  • When you deploy multiple TIBCO LogLogic® Enterprise Virtual Appliance instances using the same .ova file, a unique SNMP community string is configured for each instance that you deployed. This string is displayed in the Administration > System Settings > General > SNMP Community String field.
    Note: Before starting the upgrade to version 6.2.1, you must change the default value (public) of the SNMP community string to any other string.
  • On the Administration > System Settings page, there is a new section called Syslog Port. The Syslog UDP Port field is now moved to this section. Additionally, a field Syslog Collector Port is available where you can add a maximum of 14 port numbers separated by comma or space. For more information about the Syslog Port section, see Syslog Port in the TIBCO LogLogic® Log Management Intelligence Administration Guide.
General Data Protection Regulation (GDPR) Compliance
To comply with the GDPR regulations, LogLogic® LMI provides a CLI utility llshred to destroy selected data. An administrator can use the utility on the result of an Advanced Search query to destroy a list of events from the result. For more information, see Destroying LogLogic® LMI Event Data in the TIBCO LogLogic® Log Management Intelligence Administration Guide.
Queries and Enrichment Lists
You can now select the columns to be displayed on queries and Enrichment List pages on the GUI.
Other Enhancements
  • Transport Layer Security (TLS) can now be enabled on the Oracle Audit Database Collector.
  • The Management Information Base (MIB) now supports the following object IDs:
    • LogLogic LMI version
    • TIBCO LogLogic® Log Source Packages version
    • Maintenance Hotfix version (for example, HF1 or HF2)
    • Disk usage in MB
    • Free space on the disk in MB
    • CPU rate: 1 min average
    • CPU rate: 5 min average
    • CPU rate: 15 min average
    • Free and available memory
    For the complete list, see Supported Object IDs in the TIBCO LogLogic® Log Management Intelligence Administration Guide.

Changes in Functionality

This section lists changes in functionality since the last major release of this product.

Advanced Features
If you enable Advanced Features on the LX4025, ST4025, MX4025, ST2025-SAN, or LX1025R1 appliances, a warning is displayed indicating that the Advanced Features must be used with caution because the memory for these appliances is less than the minimum memory required for using Advanced Features.

The warning is displayed at every login for all users on these appliances.

Data Model
The data model Loglogic_aggregation_rule_metrics has been renamed to Loglogic_Aggregation_Rules_Metrics.
Health Monitor Logs
Starting from version 6.2.1, health monitor logging is disabled by default, and no results are returned for a search query that uses the following data models. To enable data logging, contact your administrator.
  • LogLogic_Monitor_Cpu
  • LogLogic_Monitor_Cpu_Load
  • LogLogic_Monitor_Diskspace
  • LogLogic_Monitor_Memory
  • LogLogic_Monitor_Node_Memory
For more information, see Health Monitoring Utility in the TIBCO LogLogic® Log Management Intelligence Administration Guide.
Field Restrictions
Text input fields cannot accept the characters '<', '>', '&', and double-quotes ("). For a list of field restrictions and examples, see Field Restrictions in the TIBCO LogLogic® Log Management Intelligence User Guide.
Partition Size
For upgrades from version 6.1.0 or later, the partition size of the root (/) partition and the /failsafe partition has been increased to 6 GB.
Privileges of Remote Users
In earlier versions of LogLogic LMI, an appliance administrator was able to modify the privileges of a remote RADIUS or TACACS user from the Management > Users > Users tab. Now, the appliance administrator must modify the privileges of the RemoteUserTemplate user and the changes will be applied to all RADIUS or TACACS users. For the complete list of user privileges, see List of User Privileges in the TIBCO LogLogic® Log Management Intelligence Administration Guide.