Auto Parser GeneratorSite Collector Release Notes

Region-specific Deployments

For Site Collector deployment, the regional endpoints will be utilized for communication with GCS instead of the generic GCS endpoints. Regional endpoints ensure that all requests and data in transit are processed and uploaded into the destination GCS only within the specified geographic region, maintaining data residency compliance.

Automatic Scaling of Concurrency Settings for Site Collectors

Based on system load and hardware specifications such as CPU count, Site Collector is enhanced to dynamically scale its concurrency settings. This helps prevent event log accumulation in the queue and minimizes processing delays, especially when the repository disk is at full capacity.

Performance Optimization for Windows and Linux File Collector

Implemented performance enhancements for Windows and Linux File Collector to facilitate processing of extra large files exceeding 20GB.

Site Collector Upgrade Options

After you upgrade to the Site Collector 2.7 version, the next releases will show options to upgrade the current Site Collector version to the latest and the most recent stable version.

Windows Server 2025 and Windows Server 2025 Core Support for Agent Collectors

The Windows Event Log Collector, Windows File Collector and Windows Archive Collector now support the Windows Server 2025 and Windows Server 2025 Core operating system.

Kafka Collector

The Kafka Collector is now available as part of Site Collectors to facilitate the collection of logs in any text format from your Kafka server.

Archive Windows Collector

The Archive Windows Collector is now available as part of Site Collectors to facilitate the collection of log events from the following types of archived log files: *.gz, *.tar, *.tar.gz, *.gzip, *.rar, *.7z.

Archive Linux Collector

The Archive Linux Collector is now available as part of Site Collectors to facilitate the collection of log events from archived log sources *.7z, *.arj, *.bzip2, *.cab, *.gzip, *.iso, *.lzh, *.rar, *.gz, *.tar, *.tar.gz, *.z, and *.zip.

Windows File Collector Recovery

You can now update an agent collector from the overview page to recover the collector if it does not collect logs while running. Previously, resolving Windows File Collector log ingestion issues required manual intervention.

Ubuntu 24.04 Support for OVA

Updated the existing Ubuntu 20.04 version to Ubuntu 24.04 for OVA, for better performance, security, and software support.

Multi-template support for Windows File Collector and Linux File Collector

Site Collector now offers multi-template support for the Windows File Collector and the Linux File Collector. You can now apply multiple templates and specify different log conditions for each of the templates.

Splunk fetch interval

The Splunk collector now provides more options for the time interval within which the collector fetches logs.

Support Package Generation Command for Collectors

The Windows Event Log Collector, Windows File Collector and Windows Archive Collector now provide a command on the user interface to share the support package with the Exabeam support team while configuring a collector instance. By running the support package command using PowerShell, users can share the support package with the support team for troubleshooting and remediation of issues if any.

Ubuntu 24.04 support by Site Collector

Site Collector now supports the Ubuntu 24.04 operating system for Site Collection installation.

Early Access Feature

SSL Connection for the Kafka Collector

In addition to the existing SASL protocol, the Kafka collector now offers an option to connect securely via SSL protocol and add custom security certificates. This feature is now available as part of Site Collectors Early Access program.