Skip to main content

Cloud-delivered Data LakeExabeam Data Lake i40 Release Notes

Known Issues in Data Lake i40

LMS-16889

The ability to export logs to an external AWS S3 Storage or EC2 bucket is not supported.

LMS-16688

The Syslog default forwarder filters that contain \\\ (three slashes) are not working and the logs are not transferring from Data Lake to Advanced Analytics as expected.

This is due to extra \\\" syntax being included in the forwarder filter line.

For example, the default Microsoft Azure forwarder filter line:

...or "CEF:" and "destinationServiceName=Office 365" and "description\\\":\\\"Log on\\\"" or...

Would fail to forward a log containing:

...destinationServiceName=Office 365 "dash":"","description":"Log on","genericEventType"...

Workaround

Copy and paste the default forwarding filter in notepad, remove all the extra unnecessary slashes, and then create a custom forwarding filter without these slashes.

LMS-15089

When you enable a valid S3 archiving destination to Data Lake, it fails with a Connection Refused error and elastic node-a goes down.

There is a workaround for this issue, please reach out to the Exabeam Customer Success Team for this workaround.

DLA-3653

**This issues was resolved in i40.7**

If a saved search produces no results, you are unable to change the access control on it, to share that query. As a workaround, you must prepare a search with the proper sharing permissions first, before you modify and save the query.