CHANGELOG.md

[0.4.3] - AI Foundation, Simulation Improvements, and SNMP Fixes - 06/07/2026

Added

• Added an Elastic Serverless indicator after successfully testing a connection.
• Added foundational support for AI agents.
• Added Integration Factory as an experimental feature.
• Added system architecture documentation and linked it from the README.

Changed

• Updated simulation mode to use port 9650 instead of 9600 to avoid conflicts with Logstash monitoring APIs.
• Normalized language around simulation nodes in the pipeline editor.
• Updated condition editing controls so they appear as clear edit buttons instead of inline pencil icons in both graph and inline modes.
• Updated Integration Factory so it only uses connections configured with Cloud IDs.

Fixed

• Fixed an issue where simulated document batches could incorrectly show the “no plugins executed” banner for all documents when only a single document returned no results.
• Fixed an issue where simulation continued searching for results after the final document response had already been received.
• Fixed the walk profile caution message so it appears again when rows are added to a walk profile.
• Fixed generated SNMP pipelines so they include the port when connections do not use a Cloud ID, preventing incorrect default port behavior.
• Added additional simulation-mode agent logging to help diagnose agent issues.

[0.4.2] - SNMP Expansion, Settings, and AI Foundation - 05/14/2026

Added

• Added global settings support with an initial Experimental Mode setting.
• Added the initial AI / chat app foundation.
• Added the ability to test an SNMP connection and device template directly from the SNMP UI.
• Added an SNMP overview page with initial KPI cards, visualizations, queries, and network summary data.
• Added a CDP-based network map for SNMP adjacency visualization.
• Added CDP adjacency data to the SNMP data quality table.
• Added an agent view to the policy page in preparation for feature flags.
• Added Logstash node visibility to agent policies.
• Added a deploy button glow when there are undeployed changes.
• Added support for cloning SNMP-related objects.
• Added interfaces as a core field in the device data quality check.
• Added sysObjectID to the generic system profile.
• Added an Epson device template.
• Added automatic SNMP profile / template detection.
• Added device template assignment suggestions based on detected device metadata such as sysDescr.
• Added template suggestion context, including name, description, vendor, family/type, model, matching field, official status, and associated profiles.
• Added handling for cases where no strong device template match is available.
• Added hover descriptions and explanatory text across SNMP CRUD pages.
• Added dedicated SNMP setup documentation and linked to it from the SNMP UI.

Changed

• Incremented the version number to 0.4.2.
• Renamed SNMP “Commit Changes” language to “Deploy Changes” for clearer deployment semantics.
• Reduced the discovery modal to show devices seen in the last 10 minutes instead of the last 2 hours.
• Normalized SNMP “Add” button sizing across pages.
• Overhauled the SNMP profile page and removed/changed older pinning behavior.
• Updated SNMP CRUD pages so creating, updating, and deleting values no longer requires a full page reload.
• Replaced the offline symbol with a loading spinner while device information is being fetched from Elasticsearch.
• Added last successful poll / last seen visibility for SNMP devices.
• Added a startup / management sync process for official SNMP profiles instead of re-syncing profiles on page load.
• Updated official SNMP profile sync behavior to remove unused official profiles that are no longer present in the official profile set.
• Replaced the old profile-to-device relationship model with the newer profile-to-template relationship model.
• Removed deprecated profile-to-device junction table usage.
• Moved inline HTML CSS into dedicated CSS files where Tailwind could not be used.
• Moved “Click here for setup instructions” content into a dedicated documentation page and updated the UI to reference that page.
• Added top-of-page explanatory text to SNMP pages describing what each component does and linking to relevant documentation.

Fixed

• Fixed SNMP connection modal styling on SNMP pages.
• Fixed broken documentation app link rewriting.
• Updated documentation compatibility details for Elastic / Logstash 8.x and 9.x.
• Improved SNMP template matching behavior, including tie-breaker handling for competing matches.

Documentation

• Updated in-app SNMP setup instructions.
• Added SNMP setup documentation.
• Added compatibility documentation for 8.x and 9.x.
• Added contextual descriptions for SNMP CRUD pages and linked related docs from the UI.

[0.4.1] - Post 0.4.0 Polish - 04/20/2026

Added

• Added an undeployed-changes indicator across SNMP-related pages to make pending SNMP changes more visible.
• Added goto input and goto output navigation buttons in the graph editor.
• Added a global scroll-to-top control that appears after scrolling far enough down a page.
• Added support for closing modals globally by pressing Esc.
• Added a CONTRIBUTING.md guide for project contributors.

Changed

• Replaced browser-native confirmation and dialog boxes with the application's native popup experience.
• Centralized toast handling in base.js and removed older SNMP-specific showToast usage.
• Improved documentation structure and organization to make it easier to navigate.
• Updated automation for generating NOTICE content and license headers.
• Removed concurrent rotating file handlers to avoid ongoing complexity from an inconvenient transitive dependency.

Fixed

• Fixed Docker packaging so the /docs/ directory is copied into the image and the in-app documentation feature works as expected.

[0.4.0] - Logstash Agent - 04/18/2026

Added

• Added centralized Logstash Agent management, including policy creation, enrollment, and agent-aware connection workflows.
• Added support for managing pipelines through Logstash Agent, including pipeline settings and policy-level pipeline organization.
• Added keystore management improvements, including password management, clearer visibility into sensitive fields, and support for deploying keystore-related changes independently.
• Added agent operational controls such as restart support, upgrade support, health reporting, and richer status details.
• Added live status and log streaming improvements to make troubleshooting and monitoring easier.
• Added validation to help catch missing Logstash installations, invalid paths, and other configuration issues earlier.
• Added clearer deployment feedback, including indicators for undeployed changes and warnings for situations that require special handling.
• Added an in-app documentation experience.
• Added expanded automated testing and coverage reporting.

Changed

• Improved the overall Logstash Agent experience across enrollment, policy management, deployment workflows, and health visibility.
• Improved the safety of deployments so failed changes are handled more cleanly and unnecessary restarts are reduced.
• Improved the UI across connection management, policy views, agent health/status displays, and navigation.
• Improved security for communication between LogstashUI and Logstash Agent.
• Reworked packaging and project structure to support the ongoing evolution of Logstash Agent.
• Moved documentation into the application for a more integrated user experience.
• Updated SNMP-related UI flows and made minor usability improvements.

Fixed

• Fixed navigation state so collapsed navigation sections now persist more reliably.
• Fixed several deployment and keystore edge cases that could cause failed or blocked changes.
• Fixed pipeline change detection issues so edits are recognized more reliably.
• Fixed agent status and health display issues.
• Fixed several policy, pipeline, and configuration UI bugs.
• Fixed monitoring behavior to better align with centralized connection workflows.
• Fixed documentation image/link issues.
• Fixed a number of packaging, path, logging, and platform-specific issues introduced during refactoring.

[0.3.5] - 03/23/2026

Changed

• Disabled light mode entirely

[0.3.4] - 03/17/2026

Changed

• Quick fix to make simulation of dropped messages work universally

[0.3.3] - 03/17/2026

Added

• Converted delete alerts/confirmation boxes to use stylized popup components
• Saving a pipeline now shows a toast notification instead of shifting UI elements

Changed

• Pipeline manager table now displays hostname when a node is added via URL instead of Cloud ID
• Defaulted logstashagent.yml to Linux configuration

Fixed

• Improved handling of messages sent to pipelines that never loaded
• Fixed pipeline eviction issue caused by runtime config not being properly detected

[0.3.2] - 03/16/2026

Changed

Fixed elastic host connection string

[0.3.1] - 03/16/2026

Added

Added a search bar to the top of the plugin config modal

Changed

Allow unverified elastic connections Swapped a javascript alert for our popup box (styled it)

Fixed

Fixed minor visual line bugs in the graph

[0.3.0] - 03/16/2026

Added

• Host mode for Windows and Linux with environment variable preservation
• Log files for LogstashAgent
• Scripts for Linux host mode
• Runtime configuration (replaces build-time config)
• Startup scripts that force shutdown first and manage a .venv file
• Graph view in the Pipeline Editor with recursive nested condition support
• Custom popup/modal to replace native browser alerts, matching app theme
• Ability to validate pipelines on click
• Stats strip in the Pipeline Editor
• User preference persistence for last-used editor mode (text vs. graph)
• Toggle in text mode to suppress mode-switch confirmation popup
• Regression tests for Common, Management, Monitoring, PipelineManager, Site, SNMP, and Utilities
• popup.html for themed in-app alerts
• GitAttributes file to prevent line ending changes on commit

Changed

• Default simulation mode is now embedded
• ElasticAgent simulation node now listens on localhost only instead of all interfaces
• Logstash supervisor tuned to be more aggressive on restarts and better handle large pipeline simulations
• Startup scripts now activate and manage a .venv instead of installing dependencies directly
• Reworked Pipeline Editor top bar UI — more responsive and reactive
• Updated Dockerfile and Docker Compose to support server, development, and Docker Compose modes
• Renamed and reorganized docs
• Text editor behavior now consistent when switching between text and graph modes
• Default YML config example reset to clean state

Fixed

• Linux host mode permissions and file permission quirks
• Database not persisting due to path mismatch
• Stop script now more reliably terminates the agent
• Testing config now works with the supplied binary instead of hardcoded Linux path
• Windows Server limitations documented for host mode
• Drop return path for pipelines

[0.2.1] - 03/05/2026

Added

• Documentation links inside the plugin configuration modal
• Initial implementation of a visual expression editor (foundation for future condition builder)
• Ability to load Logstash plugin documentation directly within LogstashUI
• Label showing the slowest plugin during pipeline simulation
• Icons for filter plugins in the pipeline editor
• Search bar and pagination for Connection Manager
• pipeline_list.js for improved pipeline UI behavior

Changed

• Tuned Logstash performance and stability
• Reduced the number of generated Ruby scripts created during pipeline editing
• Updated Logstash API polling behavior to be less aggressive
• Updated eviction algorithm to reduce unnecessary cache churn
• Simulation overlay now dims the interface while results are loading to prevent interaction

Fixed

• Eliminated or significantly mitigated a Logstash memory leak caused by cached Ruby plugins
• Added a shared connection pool to prevent opening a new Logstash API connection for every request
• Removed temporary pipeline file writes during simulation
• Fixed missing return statement that caused unexpected behavior
• Simulation timeline now ignores comments
• Updated tests to reflect LogstashAgent pipeline status behavior changes

[0.2.0] - 03/02/2026

Added

• Toggle button for simulation that turns on/off simulation metadata
• Simulate now shows time in ms of plugin and entire execution
• Visual indicator of parsing failure / tag on failure in simulate
• Popular plugins float to the top of the plugin selector page
• Added fs_path type
• Added file upload for simulate when a pipeline requires it
• Comments are now supported
• Pipelines are now tested every time plugins are added/changed/removed
• Warning badge (!) appears on plugins with missing required fields
• Copy button in simulation result tooltips to copy JSON data to clipboard
• SNMP discovery workflows (tested end-to-end: discovery → device → scheduled monitoring)
• Initial implementation of the pipeline text editor
• Autocomplete, improved bracket matching, and syntax highlighting in the text editor
• Visual indicators when conditions are empty
• Save button is blocked when required fields or conditions are invalid
• SNMP test coverage improvements
• SDK-like script for interacting with the Logstash API (replaces older log analyzer)
• “Memory intensive” plugin flag with visual indicator
• key_list_hash type to ensure consistent grok match ordering
• Additional SNMP profiles (new + tuned existing)
• Added traps file (and related .gitignore updates)
• Favicon

Changed

• Colorized the "after" JSON output for clearer visibility into changes
• Overhauled plugin configuration modal for improved usability
• View Full Event and Original Event in simulate are now more clearly clickable
• Default condition is now if [message]
• Migrated to Gunicorn (removed runserver + eliminated unnecessary logstashagent port)
• Updated Docker Compose configuration for 0.2.0
• Updated Nginx configuration to resolve Docker Compose issues
• Refreshed collectstatic workflow and removed tracking of staticfiles
• Moved pipeline renaming functionality to common module for reuse
• Adjusted Logstash configuration to optimize performance
• Simulation API endpoints now route through ConnectionManager
• Hardened and cleaned up ConnectionManager (including model updates and removal of SSH references)
• Monitoring overhaul with additional tests and refreshed static assets
• Error page overhaul and removal of public CDN calls
• Standardized on a single visualization engine
• Removed legacy Core/API layer and distributed functionality into appropriate apps
• Refactored Ruby code injection to standardize quoting and reduce escaping issues
• Cleaned up legacy JavaScript and consolidated shared utilities into base.js

Fixed

• Drops no longer time out in the simulation feature
• Chevron icon when expanding advanced options in pipeline settings
• Null list values no longer insert the string "null" into configs
• Simulation no longer hangs when events don't match conditions (proper message shown)
• Logs no longer appear in the wrong pipeline slot
• Fixed bug when adding Elastic connections via URL after moving away from HTML-returning views
• Fixed regression with hovering over edges in the UI
• Fixed JavaScript bug using json.dumps instead of JSON.stringify
• Inline comments inside plugins no longer break parsing (inline comments are stripped to preserve round-trip stability)
• Fixed pipeline hashing issues affecting configuration load progress
• Fixed SNMP timeout/retry settings not being applied to generated configs
• Fixed profile caching confusion when pipelines were updated
• Fixed interface hover UI positioning
• Fixed incorrect pipeline count in commit toast
• Fixed bug caused by renaming SNMP data streams
• Simulation now detects success faster and gives pipelines sufficient time to complete
• Fixed race condition when simulating file-dependent plugins
• Fixed simulation file-path handling (user file paths are no longer modified)
• Updated bug report links to correct targets

[0.1.11-12] - 02/12/2026

Added

• Instrumented pipeline simulation
• LogstashAgent
• Containerized Logstash

[0.1.10] - 02/12/2026

Added

• Tests for all APIs
• User tracking for all CRUD operations
• Logging for all APIs
• CHANGELOG.md!
• Log viewer / exporter
• Clone pipeline functionality
• Added a readonly user and verification for all create/read/delete operations
• Added a cookie session age so that users aren't permanently logged in

Changed

• Removed commented out function for simulating pipelines, will implement later
• Updated license dates
• Made the showToast function in javascript global and removed duplicated references to it in templates
• Removed CSRF_EXEMPT library because we're not using it anymore

Fixed

• Missing grok-patterns file, preventing autocomplete in grok debugger from working
• Fixed user CRUD tests to work with new changes