Skip to content

Commit

Permalink
Bump io.prometheus:simpleclient_bom from 0.11.0 to 0.16.0 (#16743)
Browse files Browse the repository at this point in the history
* Bump io.prometheus:simpleclient_bom from 0.11.0 to 0.16.0

Bumps io.prometheus:simpleclient_bom from 0.11.0 to 0.16.0.

---
updated-dependencies:
- dependency-name: io.prometheus:simpleclient_bom
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* Add changelog

* Add upgrade notes

* Re-add formatted examples for API changes

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Othello Maurer <[email protected]>
  • Loading branch information
dependabot[bot] and thll authored Oct 30, 2023
1 parent 6875266 commit 34f8eb8
Show file tree
Hide file tree
Showing 3 changed files with 26 additions and 92 deletions.
104 changes: 13 additions & 91 deletions UPGRADING.md
Original file line number Diff line number Diff line change
@@ -1,105 +1,27 @@
Upgrading to Graylog 5.2.x
Upgrading to Graylog 6.0.x
==========================

## New Functionality

- New pipeline rule functions for manipulating maps: `map_set` and `map_remove`.

## Breaking Changes
- If you use the DataNode, the system clocks of the nodes have to be synchronized with an external source for JWT usage (within a margin of a couple of seconds).

### Migrating from legacy index templates to composable index templates

Starting with Graylog 5.2, we are migrating from using [legacy index templates](https://www.elastic.co/guide/en/elasticsearch/reference/7.17/indices-templates-v1.html) to [composable index template]
(https://www.elastic.co/guide/en/elasticsearch/reference/7.17/index-templates.html). While this gives us more flexibility and predictability for field types in index mappings, this also requires that existing custom legacy index templates need to be migrated to composable index templates manually as well.

### Removed support for legacy "Collector Sidecars"

Graylog 3.0 introduced "Graylog Sidecars" as a replacement for the old Collector Sidecars (version 0.1.x).

With Graylog 5.2, support for the legacy Collector Sidecars is finally removed.

Please refer to the migration guide [Upgrading from the Collector Sidecar](https://archivedocs.graylog.org/en/3.3/pages/sidecar.html#upgrading-from-the-collector-sidecar) if you are still using the old Sidecars before upgrading Graylog to 5.2.

## Deprecation and Change in Functionality of GreyNoise Data Adapters

- GreyNoise Community IP Lookup Data Adapters have been marked as deprecated. Existing Data Adapters can no longer be
started or lookups performed.
- GreyNoise Full IP Lookup [Enterprise] Data Adapter can no longer be used with a free GreyNoise Community API tokens.
- GreyNoise Quick IP Lookup Data Adapter can no longer be used with a free GreyNoise Community API tokens.

## Shutdown of Graylog on OutOfMemoryError
Because of an error in HttpCore 4.4.12, which is required by Elasticsearch and older versions of Opensearch, OutOfMemoryError errors were not properly handled.
The Reactor was stopped, which prevented proper Graylog operation and the reason (OutOfMemoryError) was not clearly visible.
From now on, Graylog will shutdown on OutOfMemoryError, trying to log some basic information about the thread and memory consumption during this event.

## CrowdStrike input log parsing changes

Several log parsing changes have been made to the CrowdStrike input.

Added fields:
`event_created`: Contains the `metadata.eventCreationTime` log value.
`vendor_subtype`: Contains the `metadata.eventType` log value.
`vendor_version`: Contains the `metadata.version` log value.
`event_source_product`: Contains the static value `crowdstrike_falcon`.
### Prometheus metrics

Changed fields:
- `message`: Now contains the JSON content of the log `event` value, effectively the message payload.
- The message `timestamp` field is now set to the current Graylog system date/time, instead of the previously used log `metadata.eventCreationTime` value.
The name of the `jvm_classes_loaded` metric [has been changed](https://github.com/prometheus/client_java/pull/681).

Removed fields:
- `event_end`
- `event_source`
- `event_start`
- `user_domain`
- `user_id`
- `vendor_event_description`
- `FILE_NAME`
- `FILE_PATH`
- `OBJECTIVE`
- `TECHNIQUE`

Note that additional CrowdStrike message parsing is expected to be released in a future release of Graylog Illuminate.

## Microsoft Defender for Endpoint input log parsing changes

Several log parsing changes have been made to the Microsoft Defender for Endpoint input.

Added fields:
`event_source_product`: Contains the static value `microsoft_defender_endpoint`.

Changed fields:
- `message`: Now contains the full message payload.
- `source`: Now contains the `detectionSource` log value.

Removed fields:
- `alert_signature`
- `alert_signature_id`
- `event_start`
- `event_end`
- `full_message`

Note that additional Microsoft Defender for Endpoint message parsing is expected to be released in a future release of
Graylog Illuminate.
Prometheus queries referencing `jvm_classes_loaded` need to be adapted to
the new name `jvm_classes_currently_loaded`.

## Java API Changes
The following Java Code API changes have been made.

| File/method | Description |
|-------------------------------|-----------------------------------------------------------------|
| `ExampleClass#exampleFuntion` | TODO placeholder comment |
The following Java Code API changes have been made.

| File/method | Description |
|-------------------------------|--------------------------|
| `ExampleClass#exampleFuntion` | TODO placeholder comment |

## REST API Endpoint Changes
The following REST API changes have been made.

| Endpoint | Description |
|------------------------------------------|-----------------------------------------------------|
| `GET /contentstream/settings/{username}` | Retrieve Content Stream settings for specified user |
| `PUT /contentstream/enable/{username}` | Enable Content Stream for specified user |
| `PUT /contentstream/disable/{username}` | Disable Content Stream for specified user |
| `PUT /contentstream/topics/{username}` | Update per user Content Stream topic list |
| `GET /contentstream/tags` | Retrieve Content Stream tags based on license |


The following REST API changes have been made.

| Endpoint | Description |
|-------------------------|--------------------------|
| `GET /example/resource` | TODO placeholder comment |
12 changes: 12 additions & 0 deletions changelog/unreleased/pr-16743.toml
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
type = "c"
message = "Update io.prometheous:simpleclient to version 0.16.0."

pulls = ["16743"]

details.user = """
This update contains a breaking change to the `jvm_classes_loaded` metric.
Prometheus queries referencing `jvm_classes_loaded` need to be adapted to
the new name `jvm_classes_currently_loaded`.
See https://github.com/prometheus/client_java/pull/681.
"""
2 changes: 1 addition & 1 deletion pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -159,7 +159,7 @@
<opentelemetry.version>1.31.0</opentelemetry.version>
<os-platform-finder.version>1.2.3</os-platform-finder.version>
<pkts.version>3.0.10</pkts.version>
<prometheus-client.version>0.11.0</prometheus-client.version>
<prometheus-client.version>0.16.0</prometheus-client.version>
<protobuf.version>3.24.4</protobuf.version>
<reflections.version>0.10.2</reflections.version>
<retrofit.version>2.9.0</retrofit.version>
Expand Down

0 comments on commit 34f8eb8

Please sign in to comment.