Added a default, non-administrator "scilog" user account for SL1 agents and updated the installation process to reflect this change.

Updated the minimum agent versions required for 12.1.0 for:

• Linux, AIX, Solaris: 184

• Windows: 145

Windows Agent installation has substantial command line configurations introduced so that you can configure the Windows Agent to fit your needs.

The new Anomaly Index chart displays a graph of values from 0 to 100 that represent how far the real data for a metric diverges from its normal patterns.

You can define the thresholds for the Anomaly Index chart, and whether those values generate alerts, on the Machine Learning Thresholds page (Machine Learning > Thresholds).

Added an Anomaly Count column to the Machine Learning page and the Machine Learning tab of the Device Investigator page that lists the number of anomalies present on that device.

If you click an event relating to a specific device on the Service Investigator, you will now be redirected to the Device Investigator for that device. An event context panel will appear at the top of the page, where you can clear, acknowledge, or view causes and resolutions relating to the event.

Added a "Dashboard List" widget type and additional widget customization options.

The "Root Cause Timeline" widget was added to the Dashboards page. This widget lets you monitor Zebrium suggestions and alerts in SL1 dashboard, and you can select an item on that dashboard to view more information in the Zebrium user interface.

The new Service Connections page (Manage > Service Connections) in SL1 lets you connect SL1 with another third-party application to transfer data to a dashboard or a report.

Updated the SNMP read/write credential template so that deleted credentials are removed.

You can view an interface's network utilization graph in a new window by clicking the bar graph icon next to the name of the interface.

Added the ability to delete devices from the Devices page.

The Device Investigator page now has additional widget customization options.

Added a credential gateway service that allows you to install the CyberArk agent on SL1 Data Collectors. When an SL1 system has been set up with the CyberArk agent and the credential gateway service, you can enter vault tags in any secret/encrypted credential field in SL1 instead of entering the password or secret value itself.

The Events Insights page was updated with the following enhancements:

• Added a new "Savings" section that highlights a system's "noise reduction" percentage and the estimated time saved from SL1's noise reduction and deduplication capabilities compared to the estimated amount of time it would take to triage an SL1 event. This section includes all event severity levels when calculating savings.
• Added a new "Tuning Targets" section that displays the top 10 most utilized event policies and top 10 noisiest devices by event volume during a selected time frame. You can also download CSV reports of this data.
• Renamed the "Overview" section to "Event Trends" and added two new charts. These charts display:

  • The ratio of total events created to the number of active devices during a selected time frame.

  • The ratio of masked events to the total events created during a selected time frame.

• Added the ability to download all of the Event Insights Sankey chart data into a CSV report.
• Added new mouse-over features to the Sankey chart that allow you to:

  • View the total count of records that did not result in an event being created and the various reasons as to why an alert did not generate or update an event record.

  • View alert node values related to your system's event links and review any alert source context related to new event record severities.

  • View counts for each severity category in the "New Event Created" and "Deduplication" nodes.

  • View API alert node values related to your system's nodes. The metrics include a total count of alerts represented by that node and a breakdown of the three event classifications: "New Event Record", "Deduplication", and "No Event Created". Metrics depicted are based on the timespan selected by the page's time selector feature.

On the Events page, you can now filter active event records in the Event Note field.

Updated the Event Details page to the hide the Assets and Vitals panels if there is no data present.

If you click an event relating to a specific device on the Event Investigator, you will now be redirected to the Device Investigator for that device. An event context panel will appear at the top of the page, where you can clear, acknowledge, or view causes and resolutions relating to the event.

Updated the color and styling of the event severity chips.

Added Global Manager support for Business Services, which allows you to view business services across multiple SL1 stacks.

Added a new section for troubleshooting High Availability and Disaster Recovery Configurations in split-brain situations and other connectivity issues.

Updated the process for configuring High Availability and Disaster Recovery with three appliances, licensing, and configuring failover and failback.

Updated High Availability and Disaster Recovery so that you can deploy in the cloud for use with Azure, for example, using clustering and load balancing processes. Introduced the coro_install command which allows use for a quorum witness device.

Added compatibility with Oracle Linux 8 for new installations of SL1, including updates to the installation process and logging.

Setup and Config page was updated with the following enhancements:

• Added a Reset button to the Setup and Config workflow cards that allows you to reset one or more of your workflows.

• Added a new Not Applicable button to the "Not Started" workflows section under the ellipses drop-down. When you click this button, it sets the selected console workflow as "Not Applicable", which moves the workflow to the bottom of the page and out of the immediate page view. You can also display a previously set "Not Applicable" workflow by selecting that workflow and clicking Display.

• The Setup and Config workflow cards are now grouped together and displayed based on their workflow statuses. Each workflow section is collapsible and expandable. The workflow count is displayed in the status/section header. However, if a workflow count is zero, it appears grayed out.

• Updated the Setup and Config workflows to automatically update to a "Not Applicable" status when you select the "Not Applicable" option from the workflow status bar or when any activities within that workflow's cards are also marked as "Deactivated" or "Not Applicable".

• Updated the Activity wizard on the Setup and Config page to automatically update the activity status of a completed task to"In Progress."

• When you close the Activity wizard or complete a task, you now return automatically to the Setup and Config page with the activity's status updated to reflect your progress.

Added a new command-line interface command to rename an existing Phone Home device: phonehome rename <new name>. Previously this was available with the phonehome set <id> command.

Updated the organization name character limit from 64 to 128 characters.

Released Restorepoint version 5.6.

Added the ability to manually build a ScienceLogic Library.

Added steps for setting the mysql username and password in the silo.conf file after a full restore.

Added the ability to use two new configurable fields in the silo.conf file. These fields, ap_user and ap_pass, enable you to define usernames and passwords for the Administration Portal that differ from the usernames and passwords used for the Database Server.

The new "User Login Session Timeout" field on the Behavior Settings page (System > Settings > Behavior) lets you define the amount of idle time that can pass without any user activity before that user's SL1 session expires.

Updated the steps for configuring and restoring full, config, and DR backup procedures on S3 Bucket and for remote NFS/SMB share databases in the System Administration Backup Management chapter. Added steps that explain how to manually mount the restore filesystem to restore the backup.

The Zebrium documentation was completely re-organized to better follow the typical workflows in the Zebrium user interface, including new information about the Accept and Reject Suggestion workflow.

Also, the "Root Cause Timeline" widget was added to the Dashboards page. This widget lets you monitor Zebrium suggestions and alerts from within an SL1 dashboard, and you can drill down into an item on that dashboard to view more information in the Zebrium user interface.

The ScienceLogic Release Notes site now includes release notes for Zebrium releases.