Kinesis agent for Windows version 1.2.10.2

Changes compared to 1.2.9.1

• Fix for wrong versioning of AWSKinesisTap package and Amazon.KinesisTap.*.dll libraries.
• Upgrade System.Core.dll version 6.0.13 to 6.0.23, which is no longer vulnerable to https://nvd.nist.gov/vuln/detail/CVE-2023-28260.
• Fix for PackageUpdate plugin agent update failure bug

To see download & installation instructions, please visit Download page.

Kinesis agent for Windows version 1.2.5.1

Changes compared to 1.2.3.6

• Breaking change: This build resolves a Privilege Escalation vulnerability in CVE-2015-2370. With this fix, when sensitive junctions appear in the application's %PROGRAMDATA% path, the agent no longer writes to this location and thus application logs won't be generated. This change does not impact normal use cases.
• Fixes an intermittent's InvalidOperationException error message that occurs in WindowsEventLogPollingSource.
• Enforce use of IMDSv2 for retrieving EC2 instance metadata.

To see download & installation instructions, please visit Download page.

Kinesis agent for Windows Beta build 1.2.5.1

Changes compared to 1.2.3.6

• Breaking change: This build resolves a Privilege Escalation vulnerability in CVE-2015-2370. With this fix, when sensitive junctions appear in the application's %PROGRAMDATA% path, the agent no longer writes to this location and thus application logs won't be generated. This changes does not impact normal use cases.
• Fixes an intermittent's InvalidOperationException error message that occurs in WindowsEventLogPollingSource.
• Enforce use of IMDSv2 for retrieving EC2 instance metadata.

To see download & installation instructions, please visit Beta download page.

Kinesis agent for Windows Beta build 1.2.3.6

Changes compared to 1.2.3.3:

• Fixes a memory-leak issues due to inappropriate use of Channel.ReadAsync
• Skip sending empty log records in CloudWatchLogs sink

Kinesis agent for Windows Beta build 1.2.3.3

New feature:

Self-contained application with new .Net Core 5.0

This release uses a newer version of .Net core 5.0 that has more stability fixes and allows us to have common code and a self-contained application. With this feature, customers can install Kinesis agent independently, without requiring pre-installed runtimes, eliminating any potential issues that may arise due to missing/mismatched assemblies.

Unique Client ID support to correlate log records

This release adds Unique Client ID support to log records that allows customers to correlate log records and uniquely identify endpoints. Customers can use {UNIQUECLIENTID} variable in Kinesis agent configuration to decorate log records.

Uniform Timestamp to correlate events across multiple systems

Kinesis agent now supports uniform timestamps so that events in the data can be correlated when data is received from multiple clients with differing time zones at backend. Customers can define {uniformtimestamp} variable in the log decorator to pass the uniform timestamp along with other data to the back-end.

S3 Sink feature to upload service monitoring and troubleshooting logs

This feature enables Kinesis agent customers to upload service monitoring and troubleshooting logs to S3 sink.

Stability and Performance fixes:

Graceful shutdown

This build enables a signaling mechanism to ensure that all components stop their processing before the shutdown timeout is expired

Fixes issues regarding W3SVCLogSource and ULSSource

Below are the details:

• Fixes an issue where Timestamp logged in UTC (TimestampUtc header)
• Fixes an issue where ktdiag returns error when validating DirectorySource configuration with Delimited log parser without TimestampFormat attribute,
• Improves the sources' start-up performance when parsing large files.

Kinesis Agent for Microsoft Windows 1.1.227.1

Fixes RateExceeded error in CloudWatchLogs sink:

Customers have reported an issue where CloudWatchLogs sink fail to start after throwing RateExceededException.
The root cause for this is that the CloudWatchLogs sink, when starting up, calls the CloudWatch Logs' DescribeLogStreams API. When a large number of agents start at the same time (for example, due to a deployment to a large number of machines), they all call this API at the same time, which exceeds CloudWatch's quota at 5 requests per second. This build adds a mechanism where CloudWatchLogs sink can recognize that error and attempt to back-off and restart later.

Fixes 24-hour Time span error in CloudWatchLogs sink

Customers have reported an issue where CloudWatchLogs sink fail to send batches of records due to the records have timestamps spanning more than 24-hour. This typically happens when the agent restarts and tries to pick up the log records since where it left off.
This build fixes that error by breaking up batches into smaller batches with less than 24-hour timestamp span.

Fixes TimeStamp error when streaming W3SVC log (#13)

This issue happens when KinesisTap parses the W3SVC logs which does not contain the header line that specifies the mapping of the fields (For ex: #Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken). This build adds a config field DefaultFieldMapping to the W3SVCLogSource, so that users can specify the default mapping to use in case the header line is not present.

Fixes "Assembly not found" error when installing KinesisTap on Windows Server 2016 and older

Due to some bug in .NET Framework 4.6, the .NET Framework runtime is not able to figure out the location of the System.Runtime.Serialization.Primitives assembly, which causes any plugin using this assembly to fail to on Windows Server 2016 and older. Later version of .NET Framework has resolved this issue, however, due to customer requests, we have made an explicit assembly binding for the mentioned assembly in this build to resolve the issue.

Published the revised documentation of Kinesis agent for Windows.

Updated documentation is at this link.

Kinesis Agent for Microsoft Windows 1.1.216.4

This version fixes an issue to allow KinesisTap to correctly handle partial JSON log records. When logging big records, some applications need to write twice to the log file to finish writing a single log record. Previously, when handling that scenario, KinesisTap SingleLineJson record parser was not able to distinguish between a partial and a complete JSON record.

Also, it fixes WindowsEventLogSource to RegexFilterPipe error. Previously, when you connect an WindowsEventLogSource to a RegexFilterPipe , KinesisTap would emit an error(@stacktrace_id 258 23911 -68280721) and the data would not go through. This was due to misinterpretation, the generic data type of the WindowsEventLogSource class so it did not match with RegexFilterPipe. This bug has been fixed in this build.

Kinesis agent for Windows Beta build 1.1.216.3

This version fixes an issue when using RegexFilterPipe with WindowsEventLogSource that caused the pipe to not recognize data collected by the source.

Kinesis Agent for Microsoft Windows 1.1.216.2

Kinesis agent for Microsoft Windows version 1.1.216.2 includes a number of new features and bug fixes. For details, please see release notes.

Kinesis Agent for Microsoft Windows 1.1 Release

Kinesis Agent for Microsoft Windows 1.1 brings a new msi installer, numerous new features and improvements. For more details, see https://github.com/awslabs/kinesis-agent-windows/blob/master/release_1.1.md.