SIEM, Log Management, Security, Compliance, Server Monitoring and Uptime Monitoring Software

Server Manager 2023 Release Notes

Continue To Download
Build Description Date
Build 23.0.0.220 Added major updates to proximity filters applied to log entry monitors. 2023-09-22
  • The Proximity Filter that is applied to log monitors has been overhauled enabling better ‘if then options and triggers’. If you are using this feature, please verify your monitors are working as expected.
  • A new option has been added to both Reports and Templates called, “Auto-execute”. When enabled, reports and templates scheduled to run while the Corner Bowl Server Manager Service was turned off are automatically executed when the service is started. The feature, for example, enables air gapped servers to automatically execute Event Log File Backups scheduled to run when the system was turned off.
  • Two new path replacement variable tags have been added: {MONTH_MMMM} and {MONTH_MMM}. These are replaced with either the full current month name or the abbreviated month name respectively.
  • Previously when a template action was assigned to a report, the action was run against the local machine rather than each assigned machine. This bug has been fixed.
  • The Template and Host Summary Views now enable users to multi-select hosts and templates then batch update.
  • Previously when logging out of the Management Console the window layout was not saved causing the previous settings to load when logging back in without closing the application. This bug has been fixed.
  • A previous update to fix the restarting of services that specify command-line parameters busted services that have a space in the file path without quotes. The change has been rolled back.
  • A refresh button has been added to the Host Properties Agent Tab enabling users to refresh the installed version without having to re-open the view.
  • Previously the Due Date found within Audit Work Items was not properly being saved. This bug has been fixed. This bug has been fixed.
Build 23.0.0.216 Added several new features and fixed several bugs. 2023-09-14
  • The Command Line Interface has been updated to enable users to execute Templates and Reports.
  • The Command Line Interface has been updated to prompt for username and password and the password is now masked.
  • A new agent-based RHEL Template has been added that consolidates all audit log files in their native format to a central location.
  • The sample Event Log Summary Report has been updated to exclude the User column.
  • A customer reported a bug on Linux that occurred when saving backed up audit logs with the name audit.log.1 or audit.log.2. Previously when backing up log files with the File Consolidation and Retention Template, the extension for zipped files was replaced with the .zip extension causing this bug. The extension is no longer replaced. This bug occurred on both Windows and Linux and has been fixed in both environments. When fixing this bug, we also noticed recursive sub-directory log backup did not work within the agent-based templates. This bug has been fixed as well.
  • Previously when attempting to manually run a template on an agent-based host, neither disabled nor templates without a schedule were executed. Disabled and un-scheduled templates will now run when manually executed.
  • Previously when creating a new agent-based file system template for a Linux Server, an error message was thrown stating the file system could not be accessed. The error has been suppressed. Please watch out for future builds that included file system access via the agent. This should be released within the next few weeks.
  • Previously when creating or updating a file system-based template, the file selection list box did not include a scrollbar. A scrollbar has been added to the view.
Build 23.0.0.214 Fixed a service restart bug. 2023-09-12
  • Previously when attempting to restart a service, the service was stopped but then in some cases did not restart because of a race condition in the WMI call. This bug has been fixed.
  • A recent updated caused disk space monitor templates that use the discovery mode to always get stuck on the initial threshold. This bug has been fixed.
  • Previously when importing EVTX files, the Management Console’s Primary Data Provider did not auto-populate the newly added database tables. This bug has been fixed.
Build 23.0.0.211 Updated several sample templates. 2023-09-10
  • Previously the Event Log Consolidation (Security) Template did not extract Subject account attribute value pairs when the Subject group erroneously contained a space between the work Subject and the colon, for example “Subject :”. The sample Template has been modified to workaround this Microsoft bug.
  • A new sample Template Group has been added that includes all of the Templates required to implement JSIG controls.
  • The JSIG Removable Storage sample Report has been modified to only return 4663 Event IDs in the “Removable Storage” Category.
  • The sample agentless RHEL Audit Log Consolidation template has bee removed and instead replaced with the an agent-based template.
Build 23.0.0.210 Fixed new WMI bug in Disk Space Monitors 2023-09-08
  • I bug was introduced in the disk space monitor template that caused each non agent-based monitor to run against the localhost. This bug has been fixed.
Build 23.0.0.208 Updated several Templates and views and fixed several bugs. 2023-09-07
  • The SMART Monitor and Defragment NFTS Disks Templates have been updated to run on the Windows Agent.
  • Several views have been updated to include new toolbar buttons.
  • Previously when viewing the built-in Template Summary for Log Entry Retention Policy Templates, several columns were listed that should not have been included and the Log column was not displaying a value. These bugs have been fixed.
  • Updated installers to install .Net 7.0.10.
  • Previously the PowerShell Action was not properly display the script type properties. This bug has been fixed.
  • A previous update caused Grouped Attribute Value Pair Complex Filter Criteria for attribute value pairs that do not have a group, for example Logon Type found within Security Event Log Event ID 4625, to be ignored. This bug has been fixed.
Build 23.0.0.205 Added W3C (Directories) Template, updated Disk Space Monitor (Windows Shares) Template and fixed several bugs. 2023-09-01
  • The Text Log Monitor Templates now support scanning multiple W3C files in different sub-directories enabling multiple IIS websites to be monitored with a single template that discovers all sub-directories.
  • In order to support Azure Storage Services, the Disk Space Monitor (Windows Shares) Template has been updated to enable users to manually add share names.
  • Previously when viewing a Summary Report for Directory Size Monitor Templates, the gauge control was not displaying. This bug has been fixed.
  • Previously when attempting to enable the log monitor trigger throttle option, the flag was not setting. This bug has been fixed.
  • Previously when using the Linux Agent to upload audit logs to Server Manager, the LEVEL_IMAGE column was not set. This bug has been fixed.
  • Previously when the log monitor throttle option only worked when polling logs. Real-Time log monitor templates did not use the correct time to determine the period. This bug has been fixed in the real-time log monitors.
  • Previously when importing EVTX files into the log database, if an entry contained a \0 character the entire import failed. \0 characters are now removed from all Event Log messages and categories when downloading, subscribing to or importing from EVTX files.
Build 23.0.0.199 Updated the Logon Sessions Report 2023-08-23
  • The Logon Sessions Report now supports scanning, Active Directory for inactive domain accounts, Windows machines for inactive local accounts, setting inactivity thresholds to show trigger states within the report results and triggering incomplete logon sessions. The sample reports include new logon session samples and new JSIG samples.
Build 23.0.0.192 Updated various Security Event Log Reports. 2023-08-21
  • The JSIG Reports have all been updated to better support out-of-the-box implementation.
  • Security Event Log Reports assigned to off-domain hosts now apply user filters to local accounts.
Build 23.0.0.189 Fixed a filtering bug 2023-08-03
  • Previously when viewing a Report, then creating a new Event Log Filter from an Event Log Entry, if either the source column or the message column had been removed from the report, the filter would not return any results. This bug has been fixed.
  • Previously when attempting at assign an Environment Variable to a new Regular Expression Column Definition, the selection dialog did not display. This bug has been fixed.
  • Previously when assigning an agent template to a device, if the template was enabled bug did not have a schedule assigned, the agent device was notified every minute to execute the template. This bug has been fixed.
Build 23.0.0.186 Added .Net 4.7.2 Support and fixed a scheduling bug. 2023-07-31
  • Server Manager has been updated to support both .Net 7 and .Net 4.7.2.
  • Previously there were an edge case where the schedule exclusion control did not display the exclusion rules properly. This bug has been fixed.
  • Previously when a monitor was manually triggered to re-schedule, and range-based schedule was assigned, when the last time ran fell within the range interval and the next time fell within the current time and the range interval, the next execution time was used even if the next execution time was inside of a schedule exclusion rule. This bug has been fixed.
Build 23.0.0.178 Fixed a email attachment bug recently introduced. 2023-07-20
  • A recent update caused attached Zipped attached files to no longer include the .zip extension caused the file to be mis-identified. The .extension is now properly replaced with .zip.
Build 23.0.0.177 Added Agent Event Log queries. 2023-07-18
  • Previously when managing a Windows host that is configured to use the Agent and keep it’s connection to the Management Windows Service alive, the select Event Logs views did not use the Agent to query the logs. This new feature has been added enabling users to navigate through all available Event Logs on an Agent managed host when WMI is blocked.
  • Previously when updating the software to the latest version the installer and multiple users are logged into the host, the installer may not have shutdown all of the tray icons which could trigger a deferred reboot. This bug has been fixed.
Build 23.0.0.175 Fixed several nested group bugs. 2023-07-13
  • Previously and assigning and unassigning nested Report Groups and nested Templates Group to Host Groups, the UI did not always add and remove the assigned and unassigned objects to and from assigned hosts. This UI only bug has been fixed.
Build 23.0.0.172 Added a new Action type. 2023-07-10
  • Reports can now be executed when a template completes, for example, after an Event Log File Backup Template completes, a Collection Report that runs multiple Compliance Reports, can be executed immediately.
  • Previously when changing a Logon Monitor Template the corresponding Logon Monitors did not always restart. This bug has been fixed.
Build 23.0.0.167 Added several new Security Reports and fixed several reporting bugs. 2023-07-06
  • Two new user filters have been added to filter out built-in subject and target account names.
  • Two new user activity reports have been added to group results by subject and target account names.
  • A new Special Permission Assignments report has been added that summarizes the results by account while also filtering out built-in accounts.
  • The Collection Report now automatically appends assigned Report Group Names when clicking on the Auto-Generate Name button.
  • The Collection Report has been modified to ignore all disabled reports.
  • Previously the Event Log Cleared Filter was not properly handing both Audit Log Clear Events and Log Clear Events while also excluding overlapping Event IDs from other Sources. This bug has been fixed.
  • Previously the Event Log Cleared Report was only querying for Event ID 1102. The report now queries for both 104 and 1102 Events.
  • Read-only users can now execute Templates and Reports on demand enabling auditors to manage stand-alone air gapped machines on demand.
  • Previously when loading columns from within a log report that has enabled the select discount option, the Count column lost its Enabled selection. This bug has been fixed.
Build 23.0.0.166 Added Linux Agent. 2023-07-05
  • We are excited to announce the release of our first .Net implemented Linux Agent. The agent can be installed on any Linux flavor including RHEL and Ubuntu. For the initial release, the Linux Agent supports Text Log Consolidation and Text Log Monitor Templates. These templates enable users to replace the previous RedHat Template for consolidating Linux Audit Logs which used SSH and SFTP to pull the logs. Once replaced the audit logs are read, parsed, filtered and then finally new entries sent to the server exactly how the Text Log Templates run on the Windows Agent which significantly increases performance and removes the requirement of logging into the server to pull the logs each time. For more information see the in-application help.
  • The Agent Installer Service has been updated to write installation events to the CBSAudit Log and a corresponding Agent Installer Service Audit Report is now included.
  • The Host Agent options have moved to their own tab and an inline verbose output view added so manually executed Agent installations display verbose output.
Build 23.0.0.157 Updated the MS Application Log consolidation process. 2023-06-30
  • Previously when consolidating MS Application Log files, the logs were automatically enabled. The logs are no longer automatically enabled.
  • The software was recently updated to enable the WMI to pull Microsoft Application Logs to resolve several bugs within the .Net API previously used. While making that change a bug was introduced that caused the logs to be pulled from the localhost. This bug has been fixed.
Build 23.0.0.155 Updated the installers to look for .Net 7.0.8 and fixed a SMS Action UI bug. 2023-06-28
  • The installers have been updated to install the latest .Net Framework, v7.0.8, if no previous version is installed.
  • The SMS Action was previously always showing Clickatell as the selected SMS type when in fact the type was actually set as another. This UI display bug has been fixed.
  • A recent update caused new Azure Audit Log Monitors to no longer automatically create a host placeholder to assign the template when initially created. This bug has been fixed.
Build 23.0.0.145 Overhauled internal auditing. 2023-06-26
  • The internal auditing has been overhauled. Numerous calls have been added to better track object updates, assignment/un-assignment, enable/disable and execution start/complete. The Explorer View now includes CBSAudit Log Reports that enable users to globally audit Reports, Templates, Auto-Configurators, and user activity.
  • The in-application help has been updated to included Audit Work Item and CBSAudit Report topics.
Build 23.0.0.144 Updated Microsoft Application Log Monitors. 2023-06-22
  • A new option has been added to the Event Log Consolidation and Event Log Monitor Properties Views that enable users to enable or disable the WMI API when managing Microsoft Application Logs.
Build 23.0.0.142 Updated the documentation and made several UI enhancements. 2023-06-21
  • Documented the new PowerShell action.
  • Updated several icons and layouts throughout the Management Console.
Build 23.0.0.135 Added real-time monitoring support to Microsoft Application Logs. 2023-06-19
  • Previously Microsoft Application Log Monitors used a .Net API to monitor the logs. This API is approximately 10-times slower than WMI, has a bug in the reader that prevents the actual message from displaying and does not support real-time monitoring. Microsoft Application Log Monitors now update the Windows Registry settings so the logs can be monitored using WMI resolving the speed issue, message display issue and lack of real-time monitoring support. If you have log monitors in place that take into account the malformed message, please update your monitors so they can properly detect your filter search criteria.
  • Previously when saving a template, certain scenarios caused the UI to prompt users to save. This bug has been fixed.
  • I recent build introduced a bug that causes copying and pasting of some reports to fail. This bug has been fixed.
  • Users can now drag and drop Reports and Templates to each host’s Reports and Templates child tree nodes.
  • Previously when email reports as attachments, the attachment file name was a GUID. The filename has been updated to either the report name or monitor name.
  • A new PowerShell Action has been added that enables users to execute PowerShell commands and scripts on the management server and agent-based devices.
  • A new sample firewall Action has been added and can be found under the Intrusion Prevention System (IPS) Action Group. The Action is an instance of the new PowerShell Action that can be applied to IIS W3C file monitoring templates so attacking IP addresses can be automatically blocked on the Windows Firewall. This actin can be run directly on monitored agent hosts to block attacks on managed Windows Servers.
Build 23.0.0.130 Fixed Microsoft Application log download bug recently introduced. 2023-06-12
  • A previous update was made to support reading Success Audit and Failure Audit Events from Microsoft Application Logs however the change exposed a major bug in .Net which the message is not returned leaving users to only be able to read the parameters. This bug has been in .Net and recorded to Microsoft for over 5 years. This is a temporary build. We are working on adding the necessary registry entries to the Microsoft Event Log Service so the logs can be moved to the WMI API.
Build 23.0.0.127 Fixed several Event Log Backup bugs. 2023-06-09
  • Previously when consolidating Event Logs and backing up and clearing Event Log Files with the Agent, Event Log Consolidation Filters were not passed to the agent causing a Not Found error to be thrown while consolidating. This bug has been fixed.
  • Previously when manually viewing backed up non-Security Event Log Files in the Management Console, Success Audit and Failure Audit types displayed as Errors types. This bug has been fixed.
Build 23.0.0.126 Enhanced user and group filtering and fixed several UI bugs. 2023-06-07
  • The User and Group Filters now differentiates between groups, built-in groups, users and built-in users. Corresponding templates and reports are now optimized so they only lookup groups rather than group and users.
  • Previously the Permissions Report displayed the FQDN in the User column which then required users to add the FQDN to the User and Group Filters controls when filtering users and groups. The report has been updated to only display the username. If you previously included the FQDN in the user and group filters, please update your reports by clearing the filter then re-adding the actual usernames and groups in the filter controls. The Permissions Report has also been updated to exclude all of the latest built-in groups, as defined by Microsoft, and some built-in users not previously caught, when the hide built-in users and groups option is selected.
  • A recent update caused AD Account Lockout Monitors Status View to no longer include the word Locked in the message column. This bug has been fixed.
  • Previously when displaying a consolidated log from within a log monitor tree node (a new feature) the viewer may have thrown a duplicate key error. This bug has been fixed.
Build 23.0.0.122 Added a new feature to the Event Log Backup Template and fixed several UI bugs. 2023-06-02
  • The Event Log Backup template has been updated to include an option to automatically archive the event log files when they reach a percentage of the maximum allows size. Please note this option is only implemented within the Agent.
  • The Management Console on-demand Template Summary Views were not properly updating the gauge control when viewing large numbers of CPU, Memory and Disk Space Templates. This bug has been fixed.
  • Previously when viewing consolidated logs then selecting the move to first page button but not the move to previous page, the view may not have returned any records for the first page. This bug has been fixed.
  • The Website, Pop3 and IMAP Templates and FTP Connection Settings now support the option to ignore SSL certificate name errors.
  • The Website Monitor now throws the innermost exception when a connection error occurs.
Build 23.0.0.120 Fixed several summary report bugs. 2023-05-31
  • While adding the history database support the CPU, Memory and Disk Space Template Summary Views were not displaying some column values these bugs have been fixed.
Build 23.0.0.119 Added a new real-time view of connected Agent Devices and fixed several bugs. 2023-05-31
  • Previously when using the Auto-Configurator to add hosts, filtering on Int32 AD properties, for example userAccessControl, always returned false. This bug has been fixed.
  • A recent refactor caused 2 tabs with the SIEM Chart Report Properties view to display the incorrect views. This bug has been fixed.
  • When viewing the Data Properties for a Microsoft Application Log that included a slash and using Sqlite, one of the views was displaying an error. This bug has been fixed.
  • When merging multiple logs, the application would crash when the primary key exists on the same page of data in both logs. This bug has been fixed.
  • The Agent Server has been updated to include a real-time view of connected devices.
Build 23.0.0.117 Added real-time Event Log Viewer capabilities to Agent. 2023-05-25
  • The Management Console can now subscribe to Event Logs through the Agent enabling real-time viewing when WMI is blocked. Filters are applied on the agent side so, unlike WMI, the only entries passed on the network are filtered entries which significantly decreasing network traffic and CPU load.
  • Previously when attempting to block an IP on a remote IIS webserver, the operation may have failed. The Agent and IIS IP Restriction Action have been updated to support running the Action directly through the agent enabling the successful addition of the rule.
  • A new Batch Template Properties menu item has been added to the Explorer View’s root Templates Node. Once selected all templates are opened in the batch editor. The batch editor has also been updated to include the Agent Tab when multiple types are selected.
Build 23.0.0.105 Added agent-based real-time Event Log monitoring and fixed several bugs. 2023-05-24
  • Server Manager now supports real-time Event Log monitoring from our agent. To enable, set keep-alive flag from within the Host Properties view of the target server then assign a real-time scheduled Event Log monitor template to the host.
  • Templates can now be immediately executed on agents when the agent host is configured to keep the connection alive from within the Management Console.
  • A recent bug was introduced that caused agent-based text log monitoring to fail. This bug has been fixed.
  • The Explorer View has been updated so Event Log and Syslog Monitors nodes include a View menu item. When selected the Regular Expression Columns Definitions that have been applied to the monitor are included in the Log Viewer enabling users to test filters against Regular Expression driven columns.
  • Several of the batch Log Consolidation Templates tabs did not properly update the view when selecting between the different servers. These bugs have been fixed.
  • Previously the Ping Monitor Template did not include a Trigger Recovery Action which meant when a ping monitor triggered because the response was too slow, rather than no response, no recovery alert was sent. This UI bug was fixed so the trigger recovery alert is now sent when configured.
Build 23.0.0.95 Added History Database support, IIS IP Restriction Action and Timeline Control. 2023-05-15
  • The history can now be saved to SQL Server, MySQL and Sqlite providing faster support for historical review and enabling users to integrate with any BI Dashboard. Out-of-the-box the History Database defaults to Sqlite. To integrate with your BI Dashboard, configure the History Database to use either SQL Server or MySQL.
  • A new Timeline control has been added to the Schedule Properties View, Monitor Status View and Log Viewers. When viewed within the Monitor Status View and the monitor executes faster than once a minute, the control acks as a graphical uptime viewer (e.g. Ping Monitors).
  • A new Intrusion Prevention System (IPS) action has been added that enables users to automatically add attacking IPs to the IIS IP and Domain Restriction list.
  • Previously the RegEx based generic Account Management Report (Generic) report did not include the Caller Machine Name column. This column has been added into the default report. The Security ID and Target Security ID columns have also been disabled. To re-create, select Tools | Create Default Object.
Build 23.0.0.80 Enhanced the agent server and fixed several memory leaks. 2023-04-28
  • The agent server now includes a maximum number of connections option.
  • Fixed several memory leaks that occurred within the service.
Build 23.0.0.73 Added a new database table reseed template. 2023-04-24
  • A new template has been added called Database Table Reseed. This template enables users to reseed Event Log and Syslog tables to resolved arithmetic overflow errors.
  • When running with 1000s of agents and updating to a new version, the agent server did not throttle the updates causing client connections to get protocol starved resulting is unexpected disconnects. The agent now throttles to 20 updates at the same time. This value can be overridden via the Agent Server Settings View.
  • Previously when viewing 1000s of monitors via the Template Summary View, the user interface would hang. This bug has been fixed.
Build 23.0.0.71 Added several enhancements and fixed several bugs. 2023-04-23
  • The initial configuration has been updated to include an agent based delete temporary files template to each newly connected agent device.
  • The initial configuration has been updated to assign a security event log specific template to the localhost sow the source and target account names are extracted from each security event log entry and saved to the database in their own columns.
  • Previously the Explorer View was searching twice when users pressed the Enter button. This bug has been fixed.
  • Several minor verbose service log messages have been updated.
Build 23.0.0.70 Fixed agent based log monitor bug. 2023-04-22
  • Previously when applying multiple agent-based event log monitors to the same host with the same schedule all referenced filters were applied to each monitor. This bug has been fixed.
Build 23.0.0.69 Added new Agent installer option. 2023-04-21
  • A new agent installer has been added that includes .Net 7.0.5 embedded within the bootstrapper enabling offline and air gapped installations on hosts that do not already have .Net 7 installed.
  • Previously when automatically installing the agent and using TLS 1.2, the server passed the server certificate identifier to the client. This bug has been fixed.
  • The Management Console login screen has updated the TLS 1.2 Certificate label to a accurate label, Client certificate (optional).
Build 23.0.0.65 Fixed a minor agent based Security Event Log download bug. 2023-04-21
  • Previously when downloading security event log entries from the agent and the batch download option was enabled, only the first batch stripped the informational content from the messages. All batches now strip the redundant information content.
  • When configuring regular expression driven columns, the changing the order of multiple regular expressions for the same column caused the regular expression being moved to be removed from the column definition and regular expression list.
  • Fixed several scroll bugs just introduced.
Build 23.0.0.64 Fixed a SQL Server reseed bug. 2023-04-20
  • A recent optimization broke the SQL Server Event Log reseed function. This bug has been fixed.
  • A recent update caused the verbose output found in log consolidation and retention policies to list a class name rather than the detailed information that was intended. This bug has been fixed.
  • Updated multiple help topics.
Build 23.0.0.62 Fixed a bug in the website monitor. 2023-04-19
  • Previously when attempting to monitor a non-standard SSL port the port number was not applied to the URL. This bug has been fixed.
Build 23.0.0.61 Added several enhancements. 2023-04-18
  • The Dashboard’s Host Inventory view has been overhauled. The view now subscribes to host updates, monitor status updates and inventory updates enabling users to watch in real-time as hosts, agents and inventory is updated.
  • Previously when running 1000s of agents the Management Console was often slow. Many different optimizations have been made to speed up the user interface.
  • The Agent Server, Syslog Server and SNMP Trap Server Properties Views were all updated to have a consistent look and feel. The corresponding help topics for these views have been updated.
Build 23.0.0.60 Fixed a legacy file system log repository bug. 2023-04-14
  • When upgrading from Server Manager 2022 and using the legacy file system to save log entries, the file reader was not properly paging through data due to an initialization bug in a date time field associated with moving to .Net 7 and refactoring. This bug has been fixed.
  • A recent update caused log monitors flipped between enabled and disabled to lose the ability to update. This bug has been fixed.
Build 23.0.0.57 Added several enhancements. 2023-04-12
  • The Microsoft Teams action has been updated to included a few more metadata fields. On the backend, the level images were not displaying because they were missing from our backend server. This bug has been fixed.
  • The Real-Time Event Log and Syslog viewers have been updated to use the column definitions found in the corresponding log consolidation and log monitor template configurations.
  • The Explorer View tooltips have been updated to limit the length to 4096 characters.
Build 23.0.0.55 Fixed a UI performance bug. 2023-04-12
  • Previously when viewing a large log file with message preview enabled and grouped by a column the UI was consuming large amounts of CPU whilst doing nothing. This bug has been fixed.
Build 23.0.0.54 Added Microsoft Graph email support. 2023-04-11
  • Per a customer request, Server Manager now supports sending email through the Microsoft Graph API using an Azure Application’s client ID, tenant ID, client secret and an Azure Office 365 email account.
  • Previously when the agent server became overloaded, errant agents would attempt to re-connect after 60 seconds. The agent has been updated to sleep for one minute then randomly re-connect within 5 minutes.
  • Previously when batch saving many templates remotely there was no indication the save operation was running the background. The document view has been updated to start the waiting spinner in the title bar.
  • Previously when batch updating multiple templates, the Warning and Trigger actions only displayed when the first template in the array supported those options rather than any of the templates. This bug has been fixed.
  • Some of the test verbose output views have been moved to a resizable tool window.
  • In an effort to save space, many of the test verbose outputs have been updated to include the Test button inline within the Verbose Output toolbar control.
  • Previously the MAC Address, Local IP and Remote IP were not displaying in Host Inventory Reports. This bug has been fixed.
  • Previously when viewing the Dashboard and the service was restarted, the CPU and Memory donut charts no longer displayed. This bug has been fixed.
  • The Data Properties Views have been updated with better error messages and display results when the corresponding table is not present.
  • The agent has been updated to support range-based connection schedules. When assigned, each agent randomly applies the configured range interval before sleeping between connections.
  • A bug was recently introduced that resulted in the save prompt continually displaying. This occurred when being prompted to save after attempting to close the view with the close button rather than first saving the object. This but has been fixed.
Build 23.0.0.52 Added several enhancements and fixed several bugs 2023-04-10
  • A new data type has been added to the Column Definitions and Complex Attribute Value Pair based Filters called Logon Type. The default Success Logon Report has been updated to use this value to display the English value of the Logon Type number, for example, instead of seeing the value Logon Type = 10 users will now see Logon Type = Remote Interactive. When configuring a filter with this data type, users can now use check boxes to select the logon types they would like to apply to the filter rather than previously having to rely on a numerically based regular expression.
  • The Agent Server now throws an error when an agent on a Server 2008, Windows 8 or Windows 7 machine attempts to download the latest version from the management server.
  • Previously when an agent requested to download the latest version and the installer was missing from the management server, the agent would hang indefinitely waiting for the file. A 10 minute timeout has been added.
  • Real-Time WMI based event log monitors now restart anytime the template is modified.
  • Previously log monitor in-memory configuration and state was not reset when a template’s column definitions were modified. This bug has been fixed.
  • Previously when a real-time log monitor template was modified, the change was only logged to the service log file. The change is now logged to the history and the service log file.
  • Previously when a log monitor template was disabled, log monitor state was continually being updated. The state is no longer updated when a template is disabled.
  • The event log consolidation verbose log messages have been updated to provide more detailed information.
  • Previously when attempting to add a regular expression via the lower Regular Expressions control, rather than within the Column Definitions control, in the various Columns tab views, a new item was not added. This bug has been fixed.
  • Previously the File System Browser view was not properly sorting the Modified At column. This bug has been fixed.
  • Previously when creating a new template the view’s title bar value said New Report. This bug has been fixed.
  • Numerous focus and tab bugs have been fixed throughout the Management Console.
  • The data grid rows no longer reverse the foreground and background colors when rows are selected. Instead, selection and focus is indicated using a border and light background.
Build 23.0.0.51 Added several enhancements and fixed several bugs. 2023-04-05
  • Many of the log viewers now include the query duration in the view detail.
  • Previously when applying regular expressions to Syslog Consolidation templates, if multiple entries were initially received in the same batch the custom columns were not created causing an error to be thrown when the entries were inserted into the database. This bug has been fixed.
  • A recent update caused the Merge function to do nothing. This bug has been fixed.
  • Previously when the service was restarted and the Dashboard was open in the Console, the Server Information duplicated the meta data columns. This bug has been fixed.
Build 23.0.0.50 Fixed several bugs and updated several in-application help topics. 2023-03-31
  • Previously when using the agent to backup EVTX files and consolidate Event Log entries to a central database, if logs were assigned to the template that did not reside on the managed system, the function would exit without sending the error back to the service. Both functions have been updated to continue if and when the ignore log not found error option is selected, the error ignored.
  • When manually adding an Event Log to a template or report, the newly added log is not automatically selected.
  • Updated several help topics.
Build 23.0.0.49 Fixed several dashboard bugs. 2023-03-27
  • Previously the Dashboard / Host Inventory view did not properly sort when a column header was clicked. This bug has been fixed.
  • Previously the Dashboard / Host Inventory view did not remove a host once manually deleted. This bug has been fixed.
Build 23.0.0.46 Added SQL query by function and fixed a report properties bug. 2023-03-27
  • Users can now configure log reports to apply query by rules (SQL where clauses) enabling custom index and non-indexed columns to be searched for fast results prior to returning result sets and applying user defined filters.
  • Previously when the Report Properties view did not display the directly assigned hosts in the assignments view. This bug has been fixed.
Build 23.0.0.44 Fixed several monitor bugs. 2023-03-24
  • Previously the File Integrity Monitor did not properly auto clear triggered files. This bug has been fixed.
  • Previously when viewing monitor status and the service was restarted, the view would re-draw blank once reconnected. This bug has been fixed.
  • Previously when viewing the monitor status for a collection-based template, such as File Integrity Monitors, and the monitor auto cleared it’s triggered status, the view only displayed one of the auto cleared items rather than all of the monitored items. This bug has been fixed.
  • The Agent Server documentation has been updated to reflect the changes made in version 2023.
  • Several Management Console memory leaks have been fixed.
Build 23.0.0.43 Fixed several text log monitor UI bugs. 2023-03-22
  • Previously the text log monitor template views were not using the new file selection dialog. This bug has been fixed.
  • Previously when a text log monitor had many directories and many log monitor rules, the UI loaded very slowly. The load time has been significantly decreased however in some cases it is still slower than expected.
Build 23.0.0.41 Server Manager 2023 Released! 2023-03-15
Continue To Download