AWS Observability v2.13.0

CloudFormation YAML

CloudFormation YAML template can be accessed here: https://sumologic-appdev-aws-sam-apps.s3.amazonaws.com/aws-observability-versions/v2.13.0/sumologic_observability.master.template.yaml

Terraform

AWS Observability Terraform folder in the sumologic-solution-templates GitHub Repo

New Features

• Added tag support for AWS resources created with Terraform based AWS Observability (AWSO) Solution.

Updates

• Enhanced feature for installing apps in the Admin Recommended folder and share it
• Integrated updated EC2, Lambda, and RDS apps with AWSO Solution.
• Upgraded AWS provider version to support >= 5.16.2, < 7.0.0.
• Updated Terraform minimum required version to 1.5.7.
• Addressed CVEs identified in Python and Go modules.
• Upgraded SAM app versions:
  • sumologic-app-utils → 2.0.21
  • sumologic-s3-logging-auto-enable → 1.0.18

Deprecation

• The Global Intelligence for AWS CloudTrail DevOps app is scheduled for deprecation in the near future and, as a result, has been removed from the AWS Observability Solution.

AWS Observability v2.12.0

CloudFormation YAML

CloudFormation YAML template can be accessed here: https://sumologic-appdev-aws-sam-apps.s3.amazonaws.com/aws-observability-versions/v2.12.0/sumologic_observability.master.template.yaml

Terraform

AWS Observability Terraform folder in the sumologic-solution-templates GitHub Repo

Updates

• Updated the SAM Lambda runtime from Node.js v20.x to Node.js v22.x.
• Updated the Lambda runtime to Node.js v22.x in the CloudFormation template for AWS CloudWatch Logs with Dead Letter Queue Support.
• Updated the SecurityHub SAM Lambda runtime from Python v3.11 to v3.13.
• Updated the Lambda runtime to Python v3.13 in the CloudFormation template for Kinesis Metric Collection.
• Updated sumologic terraform provider to v3.x.
• Updated the AWS EC2 app - Events (CloudTrail) Dashboard.
• Updated 9 apps and 4 monitors to accommodate new threat intel feed: AWS Application Load Balancer, AWS API Gateway, AWS Classic Load Balancer, AWS DynamoDB, AWS EC2, AWS Lambda, Amazon RDS, Amazon SNS, Amazon SQS.

Deprecation

• Deprecated support for Sumo Logic Mumbai deployment.
• Deprecated 'Sumo Logic Root Cause Explorer Sources' section, which facilitates the installation of AWS X-Ray Source and AWS Inventory Source via CloudFormation and Terraform solutions.

AWS Observability v2.11.0

CloudFormation YAML

CloudFormation YAML template can be accessed here: https://sumologic-appdev-aws-sam-apps.s3.amazonaws.com/aws-observability-versions/v2.11.0/sumologic_observability.master.template.yaml

Terraform

AWS Observability Terraform folder in the sumologic-solution-templates GitHub Repo

New feature

• Amazon RDS app - Added support to analyze and monitor RDS Oracle CloudWatch and CloudTrail logs.
• Amazon Load Balancer apps - Added support to analyze and monitor Cloudtrail audit event logs for Application Load Balancer, Classic Load Balancer, and Network Load Balancer.
• Added out of the box monitors for RDS Oracle DB, Application Load Balancer, Classic Load Balancer, and Network Load Balancer. Solution now supports 78 out-of-box monitors.
• Added support to collect custom metrics namespaces.
• Added support to subscribe cloudWatch log groups based on AWS tags to Sumo Logic.
• Added support to filter AWS CloudWatch metrics based on AWS tags.

Updates

• Updated cloudformation helper function with Lambda Runtime to python v3.13.
• Updated SAM Lambda runtime to python v3.13 with latest library updates.
• Updated Telemetry Lambda Runtime to python v3.13 with latest library updates.

AWS Observability v2.10.0

CloudFormation YAML

CloudFormation YAML template can be accessed here: https://sumologic-appdev-aws-sam-apps.s3.amazonaws.com/aws-observability-versions/v2.10.0/sumologic_observability.master.template.yaml

Terraform

AWS Observability Terraform folder in the sumologic-solution-templates GitHub Repo

Updates

• All Python Lambda runtimes have been updated to python3.12 along with the required libraries.

AWS Observability v2.9.0

CloudFormation YAML

CloudFormation YAML template can be accessed here: https://sumologic-appdev-aws-sam-apps.s3.amazonaws.com/aws-observability-versions/v2.9.0/sumologic_observability.master.template.yaml

Terraform

AWS Observability Terraform folder in the sumologic-solution-templates GitHub Repo

New feature

• Amazon RDS app - Added support to analyze and monitor RDS MS SQL CloudWatch logs.
• Amazon RDS app - New monitors added for RDS MS SQL CloudWatch logs. Solution now supports 70 out-of-box monitors.
• By default, the solution now sends CloudFormation deployment telemetry to Sumo Logic. Users have the option to opt out of this telemetry.

Updates

• Reduced the installation time for the AWS Observability solution using the CloudFormation template.
• Integrated the latest SAM versions with AWSO v2.9.0 (CF + TF) to address CVEs and updated Lambda runtimes from Node.js v18.x to v20.x.
• Upgraded to Sumo Logic Terraform provider v2.31.0 for CVE fixes.
• Updated Terraform test code written in Go language from v1.18 to v1.22, addressing CVEs associated with the gRPC module.
• Enhanced log group subscriptions limit in the updated SAM app sumologic-loggroup-connector v1.0.12 .

Bug Fixes

• Resolved an issue where updating from versions lower than v2.8.0 to v2.8.0 was not functioning correctly. Users are now recommended to update directly to v2.9.0, bypassing v2.8.0.

AWS Observability v2.8.0

CloudFormation YAML

CloudFormation YAML template can be accessed here: https://sumologic-appdev-aws-sam-apps.s3.amazonaws.com/aws-observability-versions/v2.8.0/sumologic_observability.master.template.yaml

Terraform

AWS Observability Terraform folder in the sumologic-solution-templates GitHub Repo

New feature

• RDS app - Added support to analyze RDS PostgreSQL cloudwatch logs.
• New monitors added for RDS PostgreSQL, RDS MySQL, DynamoDB, EC2, Lambda, and API Gateway.
• Added new dashboards for HTTP and Websocket API which covers use cases based on cloudwatch logs and metrics including enhanced metrics.
• Added support for API Gateway access logs for all three types of APIs - REST, HTTP, and WebSocket API.

Updates

• Optimized time to install AWS observability solution with cloudformation template.
• AccountID tag removed from AWS CloudWatch Metrics sources.
• CVE fixes associated with Sumologic terraform provider and terraform integration module (update >= 2.28.3, < 3.0.0).
• Updated Terraform integration module to AWS terraform provider version 5.x.
• Existing source URL of Classic Load Balancer is integrated with CloudFormation (CF) Solution.

AWS Observability v2.7.0

CloudFormation YAML

CloudFormation YAML template can be accessed here: https://sumologic-appdev-aws-sam-apps.s3.amazonaws.com/aws-observability-versions/v2.7.0/sumologic_observability.master.template.yaml

Terraform

AWS Observability Terraform folder in the sumologic-solution-templates GitHub Repo

New feature

• Amazon RDS app - Added support to analyze RDS MySQL and AuroraMySQL Databases cloudwatch logs.

Updates

• All python lambda runtimes have been updated to python 3.11 along with the latest python libraries supported.
• All nodeJS lambda runtimes have been updated to node.js 18.x along with the latest node.js libraries supported.
• The solution is updated to use AWS terraform provider v5.x
• Updated SAM apps used in solution
  • sumologic-s3-logging-auto-enable - Semantic v1.0.6
  • sumologic-loggroup-connector - Semantic v1.0.9

Bug Fixes

• AWS Lambda app updated - Consistent handling of time-out error messages.
• AWS Application Load Balancer app - Updated metric panel queries to precisely handle available dimensions.
• AWS API Gateway app - Fixed quantisation for sum aggregation in metric queries.

AWS Observability v2.6.1

CloudFormation YAML

CloudFormation YAML template can be accessed here: https://sumologic-appdev-aws-sam-apps.s3.amazonaws.com/aws-observability-versions/v2.6.1/sumologic_observability.master.template.yaml

Terraform

AWS Observability Terraform folder in the sumologic-solution-templates GitHub Rep

Security Fixes and Updates:

• Security fixes (CVE-2022-23491, CVE-2021-33503) for following
  • SAM: sumologic-s3-logging-auto-enable - Semantic v1.0.5
  • SAM: sumologic-loggroup-connector - Semantic v1.0.7
  • SumoLogicAWSObservabilityHelperv2.0.16.zip
• Removed unused permissions (AddTags, RemoveTags) from SAM: sumologic-s3-logging-auto-enable
• Fine tuned IAM role permission to invoke lambda function in SAM: sumologic-loggroup-connector

AWS Observability v2.6.0

CloudFormation YAML

CloudFormation YAML template can be accessed here: https://sumologic-appdev-aws-sam-apps.s3.amazonaws.com/aws-observability-versions/v2.6.0/sumologic_observability.master.template.yaml

Terraform

AWS Observability Terraform folder in the sumologic-solution-templates GitHub Repo

New feature

• Support for Amazon SQS service

Updates

• Updated “AWS Account Overview” and “AWS Region Overview” dashboards to monitor newly added Amazon SQS service and other generic updates
• AWS Lambda Service related dashboard now supports Init Duration in the REPORT log with Lambda extension’s new version, along with updates for trendline color fix and query optimization
• Introduced evaluation delay of 4 minutes for CloudWatch metrics monitors

Bug Fixes

• Bug fixes for “AWS Account Overview” and “AWS Region Overview” dashboards
• AWS Observability's Entity Inspector KPI fixes for supported services
• Updated SNS CloudTrail FER (AwsObservabilitySNSCloudTrailLogsFER)

AWS Observability v2.5.1

CloudFormation YAML

CloudFormation YAML template can be accessed here: https://sumologic-appdev-aws-sam-apps.s3.amazonaws.com/aws-observability-versions/v2.5.1/sumologic_observability.master.template.yaml

Terraform

Terraform folder in the sumologic-solution-templates GitHub Repo

Updates

• Updated runtime of nodeJS 12.x lambdas to nodeJS 16.x.

Bug Fixes

• Fixed FER (AwsObservabilityGenericCloudWatchLogsFER) that was mapping ECS namespace aws/ecs to ecs/containerInsights.