September 2025

Prev Next

New Features

  • Support for SNS integration in S3 ingest is added, allowing users to configure SNS–SQS subscriptions for automated message delivery.

Feature Enhancements

  • Feed onboarding UI is updated with default entity resolution configuration, full entity support, and proper capitalization of SQS ARN.

  • CDPs for Device, User and Application are updated with new columns (e.g., application type, type ID, commercial software, line of business, device IMEI list).

  • The reports user access list is updated to filter out DataBee support users, since they already have full access to all reports. This simplifies the user management view.

  • API event type–scoped errors are now displayed using the databee_event_type label, providing clearer and more relevant context for alerts and warnings.

  • The free-text filter is removed from the Feed Health Console widget to reduce confusion and improve user experience.

  • A navigation guard is added to the Feed Config form with modal options “Save and Exit” and “Exit without Saving,” ensuring proper handling of unsaved changes.

  • The banner for “entity not found at timestamp” is changed from error formatting to informational.

  • The state ordering of feeds on the Data Page is updated to: Error, Warning, Healthy, In Progress, Disabled.

  • A discover_mismatches boolean configuration is added to Entity Management, allowing the Owner Discovery service to find unowned devices or detect potential owner mismatches.

  • Country and country code fields are updated in the JSON schema to ensure accurate and standardized data.

  • Feed configuration is updated to allow users to manage the feed_exclusion_list directly during feed setup.

  • Device View is updated to include IMEI_LIST column, replacing deprecated IMEI field.

Bug Fixes

  • The issue where feed health alerts may not display in the UI due to error pattern mismatch is fixed.

  • The issue where Azure ingestion types did not trigger a ContainerNotFound alert after container deletion is fixed.

  • The issue where the event type was not populating for warning alerts is fixed.

  • The issue where testing a data feed connection returned errors and blocked feed onboarding is fixed.

  • The issue where snapshot download URLs showed a token expired exception for snapshots older than a day is fixed.

  • The issue where testing connections for ServiceNow Tickets and Azure AD sign-in feeds returned errors in the UI is fixed.

  • The issue where the status bar on the Data page incorrectly showed "Complete First Ingest" after ingestion completion is fixed.

  • The issue where searching for OCSF.Application returned no results and pivots to entity pages were missing is fixed.

  • The issue where last_ingest_time was not shown for alert warnings in the production environment is fixed.

  • The issue where secret/password input field styles were affecting other input fields across pages is fixed.

  • The issue where the Submit button was not functional when creating an API feed for Workday Learning is fixed.

  • The issue where duplicate device_product records were sometimes being created in Entity Management is fixed.

  • The issue where error alerts were not displayed in the UI for Azure Blob ingest type datasources is fixed.

  • The issue where the Test Connection button failed for certain Qualys VM Feeds is fixed.

  • The issue where Snowflake Writer failed to publish larger serialized messages is fixed.

  • The issue where the Sigma Detections processor did not correctly enforce total batch size limits when combining messages is fixed.