For more details on the new features below, reference the Plixer website and Scrutinizer documentation.

KEY: ACTION: (Ticket Number) description

Ex. ADDED: (1640) Thresholds based on outbound traffic

Change Log History


Version 18.14 - May 2019

ADDED: (873) Now including cstore table conversion script in utils
ADDED: (951) Improved default work_mem settings

FIXED: (640) DB process needs priority over other processes when system runs out of memory
FIXED: (784) Top Interfaces summarization timing out with high interface count
FIXED: (790) Issue when upgrading from version 16.7
FIXED: (793) Issue where exporters sending bad timestamps would freeze spool file processing
FIXED: (832) “Save password” error when navigating from group membership
FIXED: (849) Large number of DrDOS violations could crash process
FIXED: (850) Error when changing exporter status
FIXED: (851) Backup exporters count against licensing even if same IP is already active
FIXED: (872) Interface thresholds would only violate if there was both inbound and outbound traffic
FIXED: (894) IP group detection not working for v6 addresses
FIXED: (896) Not all interface names are collected from FireSIGHT
FIXED: (903) Issue with business hours ending at midnight
FIXED: (904) First time LDAP authentication would fail if local authentication is disabled
FIXED: (963) Drilling in on an interval from volume reports could display the wrong timeframe
FIXED: (971) A slow connection could impact API latency LED for other collectors
FIXED: (990) Issue with NTP daemon not starting automatically on some installs
FIXED: (1004) Updated DRDOS thresholds to be ratios instead of fixed packet counts
FIXED: (1009) TACACS authentication would work if disabled but configured
FIXED: (1019) Issue with the scale APM outbound jitter was displayed in
FIXED: (1063) Reparser could not connect to the DB with a space in the password
FIXED: (1130) One exporter not collecting when at maximum license count for exporters

Version 18.12.14 - January 2019

ADDED: (10) Realtime DDOS and DRDOS detection before data is written to disk
ADDED: (87) FQDN reports are back and better performing
ADDED: (105) Interface threshold checks are now done once a minute and check one minute of data
ADDED: (111) FireSIGHT integration includes username support
ADDED: (112) FireSIGHT integration includes interface names
ADDED: (274) Group reports now include members of child groups
ADDED: (299) “User Accounts” permission to allow restriction of Scrutinizer user account creation
ADDED: (447) Added option to disable CrossCheck threshold notifications

FIXED: (132) Faster report CSV generation
FIXED: (167) FireSIGHT integration detects connection loss and attempts to reconnect to FirePOWER
FIXED: (177) Top interfaces values were understated for sFlow exporters sending multiple totals flows per minute
FIXED: (263) PostgreSQL log rotation
FIXED: (267) Rate values for Trend reports are now based on graph interval
FIXED: (301) Link Back Host set to the wrong port on a deployed AMI
FIXED: (319) Installer no longer displays post install script errors
FIXED: (26415) Add Audit messages when connections to LDAP servers fail
FIXED: (26768) Fixed username filtering when name is based on IPv6 address
FIXED: (26874) Faster Defined Application tagging

Version 18.9 - September 2018

FIXED: (26874) Fixed issue with multiple defined applications on the same IP
FIXED: (26511) Improved contrast for some icons in dark themes
FIXED: (26536) System user was counting against licensing limits
FIXED: (26550) Fixed issue with top N gadgets and exporters only sending egress flows
FIXED: (26557) Fixed the Analytics Violation Overview link on the Alarms tab
FIXED: (26579) Fixed issue using Gmail to send emails
FIXED: (26587) Fixed issue with emailing table views
FIXED: (26600) Fixed issue with TopN subnets gadget and SAF aggregation
FIXED: (26602) Fixed issue with editing designed reports
FIXED: (26613) Backslash in LDAP passwords caused issue on upgrade
FIXED: (26619) Fixed issue with map labels in dashboards
FIXED: (26629) Multiple subnet filters issue in MySQL
FIXED: (26632) Fixed issue with threshold details not being cleared out when switching reports
FIXED: (26650) Fixed issue editing designed reports with some manufactured columns in them
FIXED: (26652) Fixed issue with interface permissions in mapping
FIXED: (26655) Fixed issue with row limiting in CSV files
FIXED: (26699) Fixed issue with flow vitals when packets contain multiple flow sets for the same template
FIXED: (26731) Reporting: Top 10 rows on any page are now color coded as the graph
FIXED: (26735) Postgres installs - improved reporting temp table performance

Version 18.7 - July 2018

ADDED: (23542) Added QRadar Integration
ADDED: (26194) Changed dashboard gadget behavior to improve usability and clearly display gadget titles
ADDED: (26310) Numerous improvements to the manual

FIXED: (24546) Flickering issue with report graphs when loading a report
FIXED: (25156) Formatting issues in Maps Tab alerts
FIXED: (25504) Double tooltip when mousing over report graph
FIXED: (26042) Audits from IPv6 hosts are now correctly received and recorded
FIXED: (26298) Issues with input parameters for the Users API
FIXED: (26317) Optimized rollups
FIXED: (26318) Decreased time necessary to run upgrades
FIXED: (26342) Links from alarms heatmap were not working
FIXED: (26345) Tuning would too aggressively set roller memory
FIXED: (26350) Addressed upgrade issue related to DB locking
FIXED: (26358) Improved dashboard gadget behavior based on customer feedback
FIXED: (26360) Reparser: Fix understatement of NetFlow v9 flow volume in vitals report
FIXED: (26370) AWS instances would not upgrade if on Postgres 9.5
FIXED: (26371) Maps couldn’t be saved in dashboard gadgets
FIXED: (26372) Could not generate PDFs of reports in Japanese
FIXED: (26373) Fixed issue with Japanese characters in emailed reports
FIXED: (26395) Other Options > Search link not working
FIXED: (26399) Peaks in totals tables were 5 minute byte counts rather than 1 minute byte counts
FIXED: (26406) Forensic filters were not forcing change to forensic data
FIXED: (26431) Fixed filtering on AS number under Admin > Definitions > Autonomous Systems
FIXED: (26451) Fixed issue with making dashboards visible to a user group

* This is the last supported release for the CentOS 6 and MariaDB platforms

Version 18.6 - June 2018

ADDED: (9911) Test button for LDAP/RADIUS/TACACS setup
ADDED: (15154) Ability to acknowledge alarms with any combination of filters
ADDED: (16826) scrut_util command to disable ping for devices that have not responded
ADDED: (17589) Manufactured columns can be included in the report designer
ADDED: (18291) Full back button support
ADDED: (19981) Automatically detect which SNMP credentials to use for exporters
ADDED: (20068) Ability to manage interface details via API
ADDED: (21522) Ability to filter on a port range
ADDED: (21744) All interface reports now account for metering on each interface in the report
ADDED: (21770) Host -> AS -> Host reports for additional BGP reporting
ADDED: (22220) Major release upgrade to PostgreSQL 9.6 and 10
ADDED: (22773) scrut_util command to enable/disable ipv6
ADDED: (23267) User can be locked out after n failed login attempts
ADDED: (23478) Full foreign datastore support in collection and rollups
ADDED: (23924) Ability to exclude domain names from flow analytics
ADDED: (24134) Ability to edit URLs for custom gadgets
ADDED: (24164) Milliseconds now included with formatted timestamps where applicable
ADDED: (24297) Columnar store support for AWS Scrutinizers
ADDED: (24452) Ability to customize the login page
ADDED: (24600) Improved support for configuration of multiple LDAP servers and domains
ADDED: (24661) Ability to grant dashboards to other users / groups
ADDED: (24781) Default PostgreSQL datastore is columnar. Better disk space utilization and IO performance.
ADDED: (24948) Performance improvements for flow class lookups
ADDED: (25077) Support IPv4-mapped IPv6 addresses in subnet and ipgroup filters (PostgreSQL)
ADDED: (25216) Report IP Group with protocol and defined applications
ADDED: (25289) Support for Flowmon probe elements
ADDED: (25396) DrDoS detection for memcached and CLDAP attacks
ADDED: (26187) Ability to schedule operating system updates

FIXED: (12972) Flow metrics vitals times now align with ingestion time
FIXED: (22530) Ungrouped now visible by non-admin users
FIXED: (22588) Tidy up loose ends when deleting exporters. Deleted exporters will stay deleted.
FIXED: (22654) Stop showing disabled exporters in the exporters LED
FIXED: (24107) Some timezones were duplicated in the selector
FIXED: (24115) Latency reports per exporter
FIXED: (24659) Addressed issue reporting on multiple interfaces with different metering configured
FIXED: (24703) Issue with generating PDF with device group filters
FIXED: (24790) Restrict PaloAlto username collection to only internal IPs
FIXED: (24875) Donut/Pie Graph not available in Top -> Interfaces report
FIXED: (24893) Map interface utilization arrows always pointed in the same direction
FIXED: (24899) ‘cancel report’ button truly cancels backend reporting requests.
FIXED: (24993) Device menu in Google maps
FIXED: (25027) Cleaned up log noise from Cisco ISE data collection
FIXED: (25111) Scheduled reports font issue on AWS
FIXED: (25317) Remove memcached external exposure CVE-2017-9951
FIXED: (25323) FlowPro APM jitter report
FIXED: (25399) Audit report times now display as clients timezone
FIXED: (25419) Addressed CVE-2014-8109
FIXED: (25660) Issue with Queue Drops >> Queue Drops By Hierarchy

Version 17.11 - November 2017

ADDED: (24685) Support for Oracle cloud

FIXED: (24500) Vitals errors when a user with a long UID is created
FIXED: (24560) Save button for filters would go away if field was selected, but not changed
FIXED: (24586) Localhost Unlicensed after upgrade to 17.10
FIXED: (24616) Collector appears down after Daylight Savings Time change
FIXED: (24647) Potential short gap in rollups after collector restart

Please reference our End of Life Policy for details regarding the end of life schedule. For more information on Scrutinizer, please reference the online documentation or visit our website.