-
Update to OpenSearch 1.2.3
CVE-2021-45105 for Log4j was issued after the release of OpenSearch 1.2.2. This CVE advises upgrading to Log4j 2.17.0. While there has been no observed reproduction of the issue described in CVE-2021-45105 in OpenSearch, we have released OpenSearch 1.2.3 which updates Log4j to version 2.17.0.
Read More -
Partner Highlight: Oracle offers OpenSearch as a service
Oracle Cloud Infrastructure - Welcome to the OpenSearch community! We are excited to see Oracle Cloud Infrastructure’s (OCI) announcement of a fully managed search service based on OpenSearch. As Rob Walters, Vice President, Data Management at Oracle, puts it;
Read More -
Update to OpenSearch 1.2.2
As indicated in the previous blog post, CVE-2021-45046 was issued shortly following the release of OpenSearch 1.2.1. This new CVE advises upgrading from Log4j 2.15.0 (used in OpenSearch 1.2.1) to Log4j 2.16.0. Out of an abundance of caution, the team is releasing OpenSearch 1.2.2 which includes Log4j 2.16.0. While there has been no observed reproduction of the issue described in...
Read More -
Introducing Data Prepper 1.2.0 with Log Pipelines
Development teams are using Data Prepper and OpenSearch to better understand their applications through Trace Analytics. Now teams can use Data Prepper and OpenSearch for log analysis as well. You can start using Data Prepper 1.2.0 for log ingestion today. This release enables log collection into OpenSearch from Fluent Bit, supports Logstash configuration files, and provides other improvements.
Read More -
Important: Update to OpenSearch 1.2.1
Update Dec 14, 2021: The new CVE-2021-45046 affecting Log4j 2.15.0 was published earlier today, and OpenSearch 1.2.1 includes that version of Log4j. As with the previous issue, the team has not been able to reproduce this issue, nor any patterns thought to trigger this issue. Out of an abundance of caution, and, as indicated in the advisory, we will release...
Read More