25 April 2017

Logstash Lines: GeoIP ASN data, Persistent Queue fixes

By Suyog Rao

Welcome back to The Logstash Lines! In these weekly posts, we'll share the latest happenings in the world of Logstash and its ecosystem.

This week we released 5.3.1 which fixed a couple of important bug fixes. Details in the release notes.

Changes in 5.4.0
  • Persistent queue: Fixed an issue where data on disk was not getting purged even after we processed (and acked) it. Multiple users had run into this issue and with this resolved, we are plan on releasing a GA version soon.
  • GeoIP: Add support for ASN data and commercial databases from MaxMind. Getting ASN data was a popular request. This filter has also been ported to Java now.
  • RabbitMQ: Events' metadata hash is no longer overwritten by headers and properties.
  • Log4j Input has been deprecated for security reasons and will be removed in 6.0.0. We advise users to log locally to files using Log4j, and then use filebeat to ship them to Logstash or Elasticsearch directly. Details and migration steps are in this blog post.