22.4 enhancements and patches

Review the BMC Helix Log Analytics 22.4 enhancements for features that will benefit your organization and to understand changes that might impact your users.

Version	SaaS	On premises	Fixed issues	Updates and enhancements
22.4.02			Known and corrected issues	updates
22.4.01			Known and corrected issues	updates
22.4.00			Known and corrected issues	22.4.00 enhancements

BMC applies upgrades as described in BMC Helix Upgrade policy . BMC applies upgrades and patches during Maintenance windows. .

22.4.02

Documentation updates

• Create custom dashboards in BMC Helix Dashboards by using the fields that are present in logs; see Creating a dashboard by using fields from logs.
• Exclude Logstash and Filebeat metadata from collections; see Collecting logs by using Logstash and Filebeat.

22.4.01

Documentation to collect Windows event logs and Linux syslog records

The documentation is updated to include the topics that help you to collect the following logs by using the open-source td-agent and Fluentd:

• Windows event logs
• Linux syslog records

22.4.00

Monitor logs by using out-of-the-box dashboards

As an operator, access out-of-the-box dashboards to help you track log information:

• Kubernetes: Log collection statistics for Kubernetes log collection integrations
• Amazon Web Services (AWS): Log collection statistics for AWS log collection integrations
• Self monitoring: Log events generated for the configured alert policies

For more information, see Visualizing logs.

Archive and restore logs

By default, logs are purged after the retention period. Archive logs to retain them longer for compliance or other purposes. When archival is enabled, logs are archived after the retention period elapses. Restore the archived logs to analyze and search them. After the archival period elapses, the logs are purged. The archival details depend on your license entitlement. 

Only an administrator can archive or restore logs. For more information about permissions, see Orientation. This feature is disabled by default. To enable it, contact BMC Support.

For more information, see Archiving and restoring logs.

Extract fields from log messages

Important information (like status and other details) is available in the log messages. Extract this information as fields and use them for analyzing and visualizing logs. These fields are displayed in the Available fields section in the Explorer.

For more information, see Extracting fields.

Support for additional connectors to collect logs from Amazon Web Services

In addition to the Docker connector, collect logs from Amazon Web Services by using any one of the following connectors:

• Linux connector
• Windows connector

For more information, see Collecting logs from cloud (AWS).

Discontinued alerts from Explorer

The option to view alerts in the Explorer is removed. Use the alert policies (Alerts > Alert Policies) to add alerts.

For more information, see Deprecated and discontinued features.