...
- Fixed an issue related to treating the non-English characters event log sources. Due to this issue, Snare might omit the event tracking of non-English character event logs. This issue is fixed in this release and now Snare properly handles the non-English characters event log sources.
- This change affects the warning messages that are display when protocol for destination is set to TCP or TLS for web UI port 6161 as it can slow down the agent receiving log messages, which will be ignored on the web interface. In high volume environments the agent may appear to hang as a result. As it is not a recommended configuration this will now show as a warning if the agent is configured in this way. In general sending logs to the localhost is only used for testing and only used when its UDP protocol so the logs are discarded. Any real destination should use a real hostname or IP address and not localhost. This change does not affect any other functionality.
- There was an issue related to treating the non-English characters event log sources. Due to this issue Snare might omit the event tracking of non-English character event logs. This issue is fixed in this release and now Snare properly handles the non-English characters event log sources.
- During agent uninstall process, the installer attempts to remove the FIM/RIM databases from the host filesystem. On Windows, the installer may not have access to the Snare storage directory. The data can be manually removed after uninstalling from the following location: C:\Windows\System32\config\systemprofile\AppData\Roaming\Snare
...