Radware Logging Agent (RLA) v1.3.1

Radware Logging Agent (RLA) v1.3.1

Released on 07/11/2024, Radware Logging Agent (RLA) version 1.3.1 introduces improved Docker deployment options, streamlined configuration management via S3 and environment variables, and optimized logging practices for containerized environments.

What's Changed

• Enhanced Docker Deployment: Improved Docker deployment by eliminating internal logging to agent.log when running inside Docker containers, in favor of logging directly to the console. This aligns with best practices for containerized environments and simplifies capturing logs from the container. Additionally, introduced the option to import rla.yaml from an S3 bucket via the Docker entry point script, making configuration more centralized and manageable.

• Environment Variable-Driven Configuration: Added support for a fully environment variable-driven configuration through rla.yaml.template. This allows for highly flexible deployments, where all necessary configuration can be provided as environment variables, avoiding the need to store sensitive information in static files.

• Docker Deployment with a Provided Dockerfile (v1.3.0): This release introduced Docker deployment with a provided Dockerfile, simplifying the process of deploying RLA in containerized environments and enabling more consistent deployments.

• Additional Fixes and Improvements (v1.2.1):

  • Fixed an issue related to certificate validation with known CA-signed certificates.
  • Resolved a conversion error affecting unified access log fields.
  • Improved graceful shutdown handling to ensure that remaining tasks are completed before the agent stops.

Radware Logging Agent (RLA) v1.2.0

Radware Logging Agent (RLA) v1.2.0

Released on 26/02/2024, Radware Logging Agent (RLA) version 1.2.0 delivers significant enhancements aimed at optimizing log structure compatibility, improving configuration validation mechanisms, introducing new debugging options, and updating the installer for a more seamless upgrade experience. This version also includes the addition of an extra folder containing component index templates for ECS, further aligning RLA with Elastic Common Schema standards.

What's Changed

• ECS Compatibility Mode: Version 1.2.0 introduces an ECS Compatibility Mode, ensuring enhanced log structure compatibility with both the Elastic Common Schema and Radware's custom schema. This update facilitates more seamless integration with Elastic environments, optimizing log indexing and searchability.

• Improved Configuration Validation: To increase application reliability, this release features improved configuration validation processes during startup. These enhancements include comprehensive checks for SQS queue availability and destination connectivity, ensuring that RLA is properly configured and ready to operate in your environment.

• Advanced Debug Options: Recognizing the need for flexible troubleshooting capabilities, version 1.2.0 introduces advanced debug options. Users can now selectively disable configuration validation steps, empowering administrators to identify and resolve configuration issues more efficiently.

• Installer Enhancements: The RLA installer has been updated to offer the option to retain the existing rla.yaml configuration file during the upgrade process. This thoughtful feature ensures a smoother transition to the latest version without the need to reconfigure previously set preferences.

• Extra Folder for Component Index Templates: Expanding on its customization capabilities, version 1.2.0 adds an extra folder specifically designed to house component index templates for ECS. This addition further demonstrates RLA's commitment to providing flexible, schema-compatible logging solutions.

Radware Logging Agent v1.1.1: Homogenized fields are now all styled uniformly using camel casing.

Radware Logging Agent (RLA) v1.1.1

The Radware Logging Agent (RLA) version 1.1.1 introduces enhanced uniformity across homogenized fields by adopting a consistent camel case styling. This update ensures better readability and integration compatibility.

What's Changed

• Field Consistency: All homogenized fields are now uniformly styled using camel casing to promote consistency and ease of use.

Future Plans

• Add ECS compatibility for Elasticsearch, optimizing log structure for Elastic environments.
• Introduce API-based log ingestion, expanding input options for versatile log collection

Radware Logging Agent v1.1.0: Expanding Batch Mode Configuration Options and Splunk HEC Compatibility

Radware Logging Agent (RLA) v1.1.0

The Radware Logging Agent (RLA) v1.1.0 introduces configurable batch mode for TCP and TLS connections, enhancing control over log transmission. This version also debuts Compatibility Mode, initially supporting Splunk HEC, to facilitate tailored integration with SIEM systems.

What's Changed

• Configurable Batch Mode for Enhanced TCP and TLS Options
• Introduction of Compatibility Mode for SIEM Integration, Featuring Initial Support for Splunk HEC

Future Plans

• Add ECS compatibility for Elasticsearch, optimizing log structure for Elastic environments.
• Introduce API-based log ingestion, expanding input options for versatile log collection

Radware Logging Agent v1.0.0 - Initial Release

Radware Logging Agent v1.0.0

We're excited to introduce the first official release of the Radware Logging Agent (RLA) v1.0.0. This initial version lays the groundwork for simplifying and streamlining the integration of Radware security logs with Security Information and Event Management (SIEM) systems. Currently focused on supporting Cloud WAAP logs via AWS S3, this release is just the beginning of our journey to offer extensive log management capabilities.

Highlights of v1.0.0

• Cloud WAAP Log Support: Direct support for ingesting Cloud WAAP logs exported to AWS S3, tailored for seamless SIEM integration.
• Configurable Log Formats: Transform logs into widely-used formats such as JSON, CEF, or LEEF to fit various SIEM requirements.
• Log Enrichment: Enrich logs with additional metadata for more insightful security analysis.
• Comprehensive Documentation: Includes detailed setup and deployment guides for straightforward implementation.

Coming Soon

• Expanded support for more Radware products and log sources.
• Additional input types and output features to enhance flexibility and compatibility with a wider range of SIEM solutions.

v1.0.0-rc.2 bug fixes and updated readme.md

v1.0.0-rc.2 bug fixes and updated readme.md

RLA v1.0.0 RC1

RLA (Radware Logging Agent) v1.0.0 RC1

Includes RLA with automated Ubuntu or Debian based linux distro installer file and uninstaller.
Full Cloud WAAP support via S3 export for all log types.
Full CEF, LEEF and enriched JSON support.