xelogstash

• Improve errorlog_written event parsing to populate any error_number, severity, or state that it can parse out
• Add a sampler sink. This writes sample events. It is primarily used during development or pre-deployment to work on JSON format.
• Improve handling bad offsets in event files. Try to read past to the next good event in more conditions.
• File Sink: Clean up old event files at the start
• Additional testing against SQL Server on Linux, SQL Server 2022 CTP2, and SQL Server running in Docker
• Set beta_features to true in the app settings section to add the following calculated fields: cpu_time_sec, logical_reads_mb, physical_reads_mb, writes_mb, and duration_sec. See the Beta Features section for more details.

• Improve errorlog_written parsing to populate any error_number, severity, or state
• Add a sampler sink. This writes sample events. It is primarily used during development or pre-deployment to work on JSON format.
• Improve handling bad offsets in event files. Try to read past to the next good event in more conditions.
• File Sink: Clean up old event files at the start

• Capture Availability Groups in mssql_ag and Listeners in mssql_ag_listener. These are both multi-value fields.
• Fields can be upper or lower case. Use the lowercase=["fld1", "fld2"] to list the fields that should be lower case. Use uppercase for uppercase.
• hadr_trace_message events populate the xe_description field

• Capture Availability Groups in mssql_ag and Listeners in mssql_ag_listener. These are both multi-value fields.
• Fields can be upper or lower case. Use the lowercase=["fld1", "fld2"] to list the fields that should be lower case. Use uppercase for uppercase.
• hadr_trace_message events populate the xe_description field

Updated the README for this version

• BUG: Sources specified in sqlxewriter_source.toml files weren't processing their add, moves, etc
• Comment out unused code
• FEATURE: Handle "attention" events

Update github.com/tidwall/gjson to 1.9.4 to fix potential DOS issue

Added xe_category to group similar events together

• Update to GO 1.16.5
• Update dependencies

• Bump to GO 1.15.8
• Rewrite logstash writer to better handle intermittent issues
• Clean up logging

Improve handling NULL state files

• Handle closing a nil connection

• COALESCE DEFAULT_DOMAIN function to better support Linux

• Minor memory usage clean up

• Add a .vscode directory in the samples with extensions and file mapping support
• Fix the git commit information in the linux build
• Fix the subdirectory in the linux build
• Update the README for first-timers
• Add the server name to the polling message (in addition to being in the field)
• macOS should work now but you'll have to build it yourself on macOS.

• Improves support for trusted connections in Linux. See Linux Support for more details.
• Added the login_failed field. This is populated for errorlog_written (logon) events and error_reported events whose error number indicates a login failed event. Filter Kibana for the existance of this field. See below for more details.
• Unfortunately, adding trusted connections in Linux broke macOS (darwin) support for a bit.
• Fix logging bug

This application now reads past invalid offsets. The most likely cause of invalid offsets is that this service stopped or the files rolled over so fast that the file and offset are no longer valid. In both cases, the extended event files rolled over and the events no longer exist. Previously this application would log the error and wait so we could investigate and fix. Meanwhile, more events were being missed. Now it just logs the error and tries to find the next valid event for the extended event.

• Fix bug that allowed connections to leak when polling a server that didn't exist for the first time
• Clean up the versions in replacements and logging
• Deprecate GITDESCRIBE. Please see the README.

Add GORELEASER support