New Features
Support for SNS integration in S3 ingest is added, allowing users to configure SNS–SQS subscriptions for automated message delivery.
Feature Enhancements
Feed onboarding UI is updated with default entity resolution configuration, full entity support, and proper capitalization of SQS ARN.
CDPs for Device, User and Application are updated with new columns (e.g., application type, type ID, commercial software, line of business, device IMEI list).
The reports user access list is updated to filter out DataBee support users, since they already have full access to all reports. This simplifies the user management view.
API event type–scoped errors are now displayed using the databee_event_type label, providing clearer and more relevant context for alerts and warnings.
The free-text filter is removed from the Feed Health Console widget to reduce confusion and improve user experience.
A navigation guard is added to the Feed Config form with modal options “Save and Exit” and “Exit without Saving,” ensuring proper handling of unsaved changes.
The banner for “entity not found at timestamp” is changed from error formatting to informational.
The state ordering of feeds on the Data Page is updated to: Error, Warning, Healthy, In Progress, Disabled.
A discover_mismatches boolean configuration is added to Entity Management, allowing the Owner Discovery service to find unowned devices or detect potential owner mismatches.
Country and country code fields are updated in the JSON schema to ensure accurate and standardized data.
Feed configuration is updated to allow users to manage the feed_exclusion_list directly during feed setup.
Device View is updated to include IMEI_LIST column, replacing deprecated IMEI field.
Bug Fixes
The issue where feed health alerts may not display in the UI due to error pattern mismatch is fixed.
The issue where Azure ingestion types did not trigger a ContainerNotFound alert after container deletion is fixed.
The issue where the event type was not populating for warning alerts is fixed.
The issue where testing a data feed connection returned errors and blocked feed onboarding is fixed.
The issue where snapshot download URLs showed a token expired exception for snapshots older than a day is fixed.
The issue where testing connections for ServiceNow Tickets and Azure AD sign-in feeds returned errors in the UI is fixed.
The issue where the status bar on the Data page incorrectly showed "Complete First Ingest" after ingestion completion is fixed.
The issue where searching for OCSF.Application returned no results and pivots to entity pages were missing is fixed.
The issue where last_ingest_time was not shown for alert warnings in the production environment is fixed.
The issue where secret/password input field styles were affecting other input fields across pages is fixed.
The issue where the Submit button was not functional when creating an API feed for Workday Learning is fixed.
The issue where duplicate device_product records were sometimes being created in Entity Management is fixed.
The issue where error alerts were not displayed in the UI for Azure Blob ingest type datasources is fixed.
The issue where the Test Connection button failed for certain Qualys VM Feeds is fixed.
The issue where Snowflake Writer failed to publish larger serialized messages is fixed.
The issue where the Sigma Detections processor did not correctly enforce total batch size limits when combining messages is fixed.