22.4 enhancements and patches

Review the BMC Helix Log Analytics 22.4 enhancements for features that will benefit your organization and to understand changes that might impact your users.

Version	SaaS	Fixed issues	Updates and enhancements
22.4.02	✅️	Known-and-corrected-issues	updates
22.4.01	✅️	Known-and-corrected-issues	updates
22.4.00	✅️	Known-and-corrected-issues	22.4.00 enhancements

22.4.02

Documentation updates

Create custom dashboards in BMC Helix Dashboards by using the fields that are present in logs; see Creating-a-dashboard-by-using-fields-from-logs.
Exclude Logstash and Filebeat metadata from collections; see Collecting-logs-by-using-Logstash-and-Filebeat.

22.4.01

Documentation to collect Windows event logs and Linux syslog records

The documentation is updated to include the topics that help you to collect the following logs by using the open-source td-agent and Fluentd:

22.4.00

Monitor logs by using out-of-the-box dashboards

As an operator, access out-of-the-box dashboards to help you track log information:

Kubernetes: Log collection statistics for Kubernetes log collection integrations
Amazon Web Services (AWS): Log collection statistics for AWS log collection integrations
Self monitoring: Log events generated for the configured alert policies

For more information, see Visualizing-logs.

Archive and restore logs

By default, logs are purged after the retention period. Archive logs to retain them longer for compliance or other purposes. When archival is enabled, logs are archived after the retention period elapses. Restore the archived logs to analyze and search them. After the archival period elapses, the logs are purged. The archival details depend on your license entitlement.

Only an administrator can archive or restore logs. For more information about permissions, see Orientation. This feature is disabled by default. To enable it, contact BMC Support.

For more information, see Archiving-and-restoring-logs.

Extract fields from log messages

Important information (like status and other details) is available in the log messages. Extract this information as fields and use them for analyzing and visualizing logs. These fields are displayed in the Available fields section in the Explorer.

For more information, see Extracting-fields.

Support for additional connectors to collect logs from Amazon Web Services

In addition to the Docker connector, collect logs from Amazon Web Services by using any one of the following connectors:

Linux connector
Windows connector

For more information, see Collecting-logs-from-cloud-AWS.

Discontinued alerts from Explorer

The option to view alerts in the Explorer is removed. Use the alert policies (Alerts > Alert Policies) to add alerts.

For more information, see Deprecated-and-discontinued-features.