v0.22.0

Fixed

• Issue in file_input where doublestar globbing could only be used at a single level (PR268)
• Bug in tcp_input, udp_input, and syslog_input which could cause a panic (PR273)
• Made windows_event_log_input compatible with Windows Server 2022 (PR283)

Changed

• file_input will now emit bytes when encoding = nop (PR262)

v0.21.0

Added

• The timestamp operator can now parse timestamps that use a comma separator (Go v1.17)
• journald_input now accepts units and priority settings (PR252)
• file_input will now trim whitespace when using multiline (PR212)

Changed

• Operator IDs are now autogenerated sequentially, removing the necessity to specify the id field in most circumstances (PR246)
• Updated to go version 1.17 (PR248)

Fixed

• file_input's force_flush_period now defaults to 500ms, ensuring that the use of multiline.line_start_regex does not cause omission of the last line of each file (PR261)

v0.20.0

Added

• file_input operator can now be configured to flush incomplete logs, using the force_flush_period setting (PR216)

Changed

• severity levels have been redefined to match OpenTelemetry standard levels (PR228)

Fixed

• multiline splitting now trims whitespace characters (PR212)
• windows_eventlog_input now gives a helpful error message when a metadata request fails (PR206)

v0.19.0

Added

• csv_parser (PR123)
• multiline, encoding, and max_log_size options to udp_input (PR127)
• file_input now has include_file_name_resolved and include_file_path_resolved settings which produce attributes file.name.resolved and file.path.resolved, respectively (PR189)
• GoSec workflow added to GitHub Actions (PR154)
• CodeQL workflow added to GitHub Actions (PR153)

Changed

• file_input's default encoding is now utf8 (PR147)
• file_input's include_file_name and include_file_path settings now produce attributes file.name and file.path, respectively (PR189)

Fixed

• file_input can now track files that are rotated out of the include pattern matches (PR182)
• Noisy log message in file_input (PR174)
• Issue where failed parse operation could duplicate log entry (PR188)

Removed

• Parsers will no longer process []byte data type (PR149)

v0.18.0

Added

• file_input now supports multi-level directory globs (i.e. /var/**/logs/**/*.log) (PR97)
• add, remove, move, copy, retain, and flatten operators, as alternatives to the restructure operator.
• add_attributes option to tcp_input and udp_input, for capturing network attributes (PR108)
• multiline, encoding, and max_log_size options to tcp_input (PR125)

Removed

• Database package. The same functionality is supported via a Persister interface, passed to Start methods (PR93)

Fixed

• Issue where tcp_input could panic or spam logs (PR130)

v0.17.0

Added

• Trace fields added to entry.Entry, and an accompanying trace parser (PR76)
• Severity parser can parse whole numbers formatted as float64 (PR90)
• Support for mapstructure to most configs

Changed

• Rename entry.Record to entry.Body (PR88)

v0.16.0

Changed

• syslog_input config embeds syslog_parser at the top level, rather than under a syslog key (PR43)
• Rename entry.Label to entry.Attribute (PR51)

Removed

• Several unused packages, including flusher, buffer, k8smetadata, hostmetadata, and ratelimit (PR53)

v0.15.1

Added

• Optional max_buffer_size parameter to tcp_input operator (PR35)
• TLS support to tcp_input operator (PR29)

Fixed

• Data race in syslog parser (PR32)

v0.15.0

Added

• syslog_input operator, which combines tcp_input, udp_input, and syslog_parser into a single operator. (PR24)
• Syslog operator RFC 3164 location parameter (PR11)
• uri_parser operator (PR12)

Removed

• forward_input and forward_output, which were previously intended for use in the standalone agent (PR27)

v0.14.0

Removes standalone agent functionality, and prepares the new repo for…