Changelog for version 5.8.8#

Released 5 November 2025#

Added array indexing for strings in eval, e.g. foo = my_string[2:5];
Systems & Health page now shows Label field for ingesters if present.
Made it possible to copy-paste timestamps from the GUI picker into start/end constraints in the query.
Improved lease handover behavior in environments with redundant search agents.
Search agent now copies /etc/hosts into containers for flows & scripts.

Fixed corner-case crash in printf module.
Fixed corner-case crash when truncating extremely large payload values for flows in debug mode.
Fixed a bug where flow debug runs could exceed maximum API payload size.
Fixed a crash for queries which dump from a resource to the reingest module.
Fixed a problem where the datastore component was not actually setting its log level.
Fixed a bug in the packet module’s parsing code.
Fixed variable binding in eval module.
Fixed bug where an existing macro could be re-named to collide with another macro.