Security fix​

• Upgraded io.netty packages to 4.1.132.Final to address known security vulnerabilities (CVE-2026-33871 and CVE-2026-33870).
• Upgraded io-netty:netty-codec-http to 4.1.132.Final to resolve an HTTP header parsing issue.

Bug fix​

• Fixed an issue on Windows installation where duplicate registry entries with suffixed App IDs could be created, which could cause stale information to be retained.
• Fixed an issue that caused Windows event reset after a Windows upgrade by auto-detection and collection recovery.

These filters help you narrow down collectors more efficiently, reduce time spent searching through large catalogs, and simplify day-to-day collection management. Learn more.

Security fix​

• Upgraded io.netty:netty-codec-http to version 4.1.129.Final to address known security vulnerability (CVE-2025-67735).
• Upgraded com.fasterxml.jackson.core packages to use patched version 2.18.6 to address known security vulnerability (GHSA-72hv-8253-57qq).

Refer to the following documentation to view the updated URLs in the UI.

• Ansible
• Chef
• Puppet

These filters help you narrow down templates more efficiently, reduce time spent searching through large catalogs, and simplify day-to-day source template management. Learn more.

Security fix​

• Upgraded collector JRE to Amazon Corretto Version 17.0.18.8.1.
• Upgraded the software.amazon.awssdk:s3 to version 2.31.44.

Bug fix​

• Fixed an issue with forwarded Windows event collection that occurred on systems running with latest Windows version.

December 15, 2025 (OpenTelemetry Collector)​

New Log Severity Fields​

We’ve added two new severity fields, SeverityNumber and SeverityText, to the OpenTelemetry Collector. These fields provide more comprehensive log data with minimal operational risk, enabling deeper insights and more accurate workflows.

December 11, 2025 (Installed Collector)​

Version 19.534-2​

In this release, we've enhanced the security and stability of the Collector with added support for security patches.

• Upgraded collector JRE to Amazon Corretto Version 17.0.17.10.1.
• Upgraded com.tanuki:wrapper to version 3.6.3.
• Upgraded org.bouncycastle:bc-fips to version 1.0.2.6 to address known security vulnerabilities (CVE-2024-8885).
• Known issues when upgrading to this version:
  • Collector running as non-root user. Collector running as non-root user (run as mode) cannot be upgraded through the API/Web UI. It displays an error message indicating that the upgrade is not possible. The upgrade must be performed manually on your machine. Follow the steps to upgrade manually.
  • Collector running on Mac. Collector running on a Mac operating system cannot be upgraded through the API/Web UI. The process will stop, and the collector will need to be restarted manually on your machine if upgraded using API or Web UI. Use the below code to manually restart.

    sudo ./collector start
    

December 03, 2025 (OpenTelemetry Collector)​

OpenTelemetry Collector​

We’re pleased to announce the following updates for OpenTelemetry collectors:

• Collectors can now be installed on Windows using Ansible, Chef, and Puppet.
• Remote management is now supported for Ansible, Chef, and Puppet collectors, offering improved flexibility and customization.

November 20, 2025 (OpenTelemetry Collector)​

Remote Management for OpenTelemetry Collector​

We're happy to announce that Sumo Logic now enables you to remotely update the collector name for OpenTelemetry collectors through the UI in the OpenTelemetry collector edit flow. Learn more.

October 20, 2025 (Installed Collector)​

Version 19.533-5​

In this release, we've added two important updates to Installed Collectors to enhance performance, security, and ensure long-term support.

Java upgrade and end of support for legacy versions​

With Java 8 reaching its end of public updates in January 2019, and with newer Java versions offering significant improvements in both performance and security, we are upgrading our Installed Collectors to Java 17. This change applies differently depending on how your collectors are configured:

• For collectors using default Sumo Logic bundled Corretto JRE. This deprecation will not affect you as the upgrade to JRE 17 happens automatically when you update your collector to version 19.533-5. No immediate action is required.
• For collectors with custom JRE setups. If you're using a custom JRE configuration, including binary installer-based deployments, custom deployment scripts, or containerized collectors with JRE 8 or 11, you must manually upgrade to JRE 17 to maintain compatibility and support. After January 31, 2026, your existing collectors will continue to run. However, you will not be able to upgrade or download new collector versions using JRE 8 or 11.

End of support for Windows 32-bit (WIN 32) systems​

To align with Microsoft’s end-of-life for Windows 32-bit systems and ensure a secure, stable platform for all users, Sumo Logic will end support for Installed Collectors running on WIN 32 machines from January 31, 2026. After this date, the collectors on WIN 32 will no longer be supported and upgrades and new collector downloads for WIN 32 will be disabled.

To maintain support and access to the latest features, migrate your collectors to Windows 64-bit or another supported operating system as soon as possible.

Learn more.

October 03, 2025 (OpenTelemetry Collector)​

Download a collector using the CDN URL​

We’re pleased to announce a new method for downloading the latest version of our OpenTelemetry collectors for Linux, macOS, and Windows. While the static URL method is still available, you now have the option to use a CDN URL via UI for better performance.

September 30, 2025 (Installed Collector)​

Version 19.525-63​

In this release, we've resolved the JRE upgrade issue that occurred during collector upgrades.

September 10, 2025 (OpenTelemetry Collector)​

Remote Management for OpenTelemetry Collector​

We're happy to announce that Sumo Logic now enables you to remotely update the collector timezone for OpenTelemetry collectors through the UI in the OpenTelemetry collector edit flow. You can select the timezone of your choice while editing the collector. If you do not make a selection, the timezone will be set to (UTC) Etc/UTC by default.

Learn more.

September 09, 2025 (OpenTelemetry Collector)​

Remote Management for OpenTelemetry Collector​

We're happy to announce that Sumo Logic now enables you to add the collector timezone for OpenTelemetry collectors through the UI in the OpenTelemetry collector create flow. You can select the timezone of your choice while creating the collector. If you do not make a selection, the timezone will be set to (UTC) Etc/UTC by default.

Learn more.

September 02, 2025 (Installed Collector)​

Version 19.525-59​

In this release, we've upgraded the collector JRE to Amazon Corretto Version 8.462.08.1 to enhance security and optimize performance for faster execution.

September 02, 2025 (OpenTelemetry Collector)​

Download a collector using the CDN URL​

We’re pleased to announce a new method for downloading the latest version of our installed collectors. While the static URL method is still available, you now have the option to use a CDN URL via UI for better performance.

July 02, 2025 (Installed Collector)​

Version 19.525-44​

In this release, we've enhanced the security and stability of the Collector with added support for security patches and a bug fix.

Security Fix​

• Upgraded collector JRE to Amazon Corretto Version 8.452.09.1.

Bug Fix​

• Fixed the collector crash issue due to sigar-amd64-winnt.dll after Windows update.

May 14, 2025 (Installed Collector)​

Version 19.525-42​

In this release, we've enhanced the security and stability of the Collector with added support for security patches and a bug fix.

Security Fix​

• Upgraded com.google.crypto.tink to version 1.16.0 to address protobuf-java DOS vulnerability (CVE-2024-7254).

Bug Fix​

• Fixed the improper filtering of AD objects when Exclude Distinguished Name Suffixes filter is configured.

February 18, 2025 (Installed Collector)​

Version 19.525-1​

In this release, we've upgraded the collector JRE to Amazon Corretto Version 8.442.06.1 to enhance stability and optimize performance for faster execution.

January 08, 2025 (OpenTelemetry Collector)​

Remote Management for OpenTelemetry Collector​

The Sumo Logic Distribution for OpenTelemetry Collector now supports remote management, enabling you to configure and manage data collection directly from the Sumo Logic UI. With this feature, you can:

• Simplify configuration. Set up and manage data collection for multiple collectors without server access.
• Streamline workflows. Use tags to group collectors and apply centralized data source templates, reducing redundancy and manual effort.
• Enhance automation. Automatically monitor new servers by tagging them during setup.
• Accelerate time to value. Start collecting data in minutes with an intuitive UI and no need to manage configuration files.

This release provides a faster, more efficient way to manage large-scale data collection, supporting scalable and automated operations. Learn more.

November 26, 2024 - Version 19.516-1​

In this release, we've enhanced the security and stability of the Collector with added support for security patches.

Security Fixes​

• Upgraded Tanuki version to version 3.5.60 to fix the collector intermittently crashing issue.
• Upgraded collector JRE to Amazon Corretto Version 8.432.06.1.

Troubleshooting​

When upgrading this collector version, the collector running as a non-root user (run as mode) or on a Mac operating system cannot be upgraded through the API/Web UI. To resolve these issue, follow the respective steps below:

• Collector running as a non-root user. An error message will be displayed indicating that the upgrade is not possible. The upgrade must be performed manually on your machine. Refer to Upgrade Collectors in Sumo Logic to upgrade the collector manually.
• Collector running on Mac. The process will stop while upgrading, and the collector will need to be restarted manually on your machine. Use the code below to restart manually.

  sudo ./collector start
  

October 31, 2024 - Version 19.514-1​

In this release, we've enhanced the security and stability of the Collector with added support for security patches and bug fixes.

Security Fixes​

• Upgraded com.fasterxml.jackson.core to version 2.15.4 to address jackson-core vulnerability (CVE-2023-0067).
• Upgraded org.apache.avro:avro to version 1.11.4 to address ion-java vulnerability (CVE-2024-47561).

Bug Fix​

• Fixed the intermittent collector crash issue for AD source.

August 23, 2024 - Version 19.506-1​

In this release, we've enhanced the security and stability of the Collector with added support for security patches and bug fixes.

Security Fixes​

• Upgraded collector JRE to Amazon Corretto Version 8.422.05.1.
• Upgraded com.amazonaws:aws-java-sdk-s3 to version 1.12.767 to address ion-java vulnerability (CVE-2024-21634).

Bug Fix​

• Fixed the Docker duplication data re-ingestion issue.

July 03, 2024 - Version 19.500-2​

In this release, we've enhanced the security and stability of the Collector with added support for security patches and bug fixes.

Security Fixes​

• Upgraded collector JRE to Amazon Corretto Version 8.412.08.1.
• Upgraded Install4j to version 10 for macOS.
• Upgraded com.tanuki:wrapper to version 3.5.56.
• Upgraded org.apache.commons:commons-configuration2 to version 2.11.0 to address known security vulnerabilities (CVE-2024-29133 and CVE-2024-29131).
• Upgraded org.bouncycastle:bc-fips to version 1.2.5.0 to address known security vulnerabilities (CVE-2024-29857).
• Upgraded org.apache.commons:commons-compress to version 1.26.1 to address known security vulnerabilities (CVE-2024-26308 and CVE-2024-25710).
• Upgraded org.bouncycastle:bctls-fips to version 1.0.19 to address known security vulnerabilities (CVE-2024-30171).
• Upgraded org.bouncycastle:bcpkix-jdk18on to version 1.78 to address known security vulnerabilities (CVE-2024-30172, CVE-2024-30171, and CVE-2024-29857).
• Known issues when upgrading to this version:
  • Collector running as non-root user. Collector running as non-root user (run as mode) cannot be upgraded through the API/Web UI. It display an error message indicating that the upgrade is not possible. The upgrade must be performed manually on your machine. Follow the steps to upgrade manually.
  • Collector running on Mac. Collector running on a Mac operating system cannot be upgraded through the API/Web UI. The process will stop, and the collector will need to be restarted manually on your machine if upgraded using API or Web UI. Use the below code to manually restart.

    sudo ./collector start
    

Bug Fix​

• Fixed the collector start issue by cleaning the temporary files on Windows.
• Fixed the issue with starting the collector on Linux RHEL OS (version 8.3 and above) with OS-level FIPS mode enabled.

March 18, 2024 - Version 19.484-2​

In this release, we've upgraded the collector JRE to Amazon Corretto Version 8.402.08.1 to enhance stability and optimize performance for faster execution.

March 07, 2024 - Version 19.484-1​

In this release, we've enhanced the Amazon Corretto back-end support for minor version updates.

January 25, 2024 - Version 19.478-2​

In this release, we've enhanced the security and stability of the Collector with added support for security patches and bug fixes.

Security Fixes​

• Upgraded collector JRE to Amazon Corretto Version 8.402.06.1.
• Upgraded Install4j to version 10.0.6 for Linux arch.
• Upgraded org.json:json to version 20231013 to address known security vulnerabilities (CVE-2023-5072).
• Upgraded org.apache.avro:avro to 1.11.3 to address known security vulnerabilities (CVE-2023-39410).
• Upgraded bcprov-jdk15on to bcprov-jdk18on to address known security vulnerabilities (CVE-2023-33201).

Bug Fix​

• Fixed the issue with Docker Stats Source that was causing metrics to be missing in particular cases.

December 18, 2023 (OpenTelemetry Collector)​

Auto Discovery​

We're excited to announce our new Auto Discovery for OpenTelemetry feature, which automatically detects the services that can be installed to monitor the data collected from the server on which the collector is running. Learn more.

November 13, 2023 - Version 19.467-2 (Installed Collector)​

In this release, we've enhanced the security and stability of the Collector with added support for security patches and bug fixes.

Security Fixes​

• Upgraded collector JRE to Amazon Corretto Version 8.392.08.1.
• Upgraded org.apache.commons:commons-compress to version 1.24.0 to address known security vulnerabilities (CVE-2023-42503).
• Upgraded org.xerial.snappy:snappy-java to 1.1.10.4 to address known security vulnerabilities (CVE-2023-43642).
• Upgraded org.bouncycastle:bc-fips to 1.0.2.4 to address known security vulnerabilities (CVE-2022-45146).
• Upgraded com.google.crypto.tink:tink to 1.11.0 to address known security vulnerabilities (CVE-2022-3510 and CVE-2022-3509).

Bug Fixes​

• Fixed the AWS archive temporary files clean up issue on Windows. If you are facing this issue while upgrading from a previous collector version then a collector restart might be necessary after the upgrade.
• Fixed temporary files issue in Windows installation.

October 26, 2023 - Version 19.461-1 (Installed Collector)​

In this release, we've resolved the collector start issue that was occurring after the Windows feature update. For collectors running as custom user, refer to the Advanced UI Installer Settings to provide full access to custom user.

August 22, 2023 - Version 19.456-3 (Installed Collector)​

In this release, we've enhanced our Collector security and stability by adding support for security patches and bug fixes.

Security Fixes​

• Upgraded collector JRE to Amazon Corretto Version 8.382.05.1.
• When installed collector sends data to the backend receiver use zstd compression to improve the speed and compression rate.
• Upgraded org.xerial.snappy:snappy-java to version 1.1.10.1 to address the known security vulnerabilities (CVE-2023-34455, CVE-2023-34453, and CVE-2023-34454).

Bug Fixes​

• Fixed the Docker duplication issue.

July 11, 2023 - Version 19.451-1 (Installed Collector)​

• Bug fix. Log level for message AppendStringInfo is updated from info to debug.
• Security fix. Upgraded org.json:json to version 20230227 to address known security vulnerabilities (CVE-2022-45688).

May 23, 2023 - Version 19.441-2 (Installed Collector)​

In this release, we've upgraded the collector JRE to Amazon Corretto Version 8.372.07.1 to enhance reliability and stability, and optimized performance for faster execution.

May 5, 2023 - Version 19.441-1 (Installed Collector)​

In this release, we've enhanced the security and stability of Collector with added support for security patches and bug fixes.

Bug Fixes​

• Resolved a Windows event ingestion issue that occurred after a Windows upgrade.

Security Fixes​

• Upgraded org.bouncycastle to Version 1.0.2.3 to address known security vulnerabilities (CVE-2020-26939 and CVE-2020-15522).
• Upgraded com.fasterxml.jackson.core:jackson-databind to version 2.14.1 to address known security vulnerabilities (CVE-2022-42003 and CVE-2022-42004).
• Upgraded jersey-common to version 2.38 to address a known security vulnerability (CVE-2021-28168).
• Resolved an issue where sourcehost for installed syslog did not display the hostname for some hosts.
• Upgraded docker-java to the latest version to ensure product security.
• Added new docker images specifically for the arm64 architecture.

April 20, 2023 - Version 19.418-8 (Installed Collector)​

We're pleased to announce that the bridge version now offers enhanced support for the BCTLS FIPS upgrade.

March 28, 2023 (OpenTelemetry Collector)​

Sumo Logic Distribution for OpenTelemetry​

New - We’re happy to announce a release that saves you configuration time. Our new and improved OpenTelemetry collector data onboarding workflow that gets you up and running with infrastructure monitoring in minutes. With this update, you can start monitoring host and process data, web servers (like IIS, Nginx), databases (like MySQL, Redis, Cassandra), and other sources out of the box - no manual configuration required. Learn more.

The Sumo Logic Distribution for OpenTelemetry, a single unified agent to send Logs, Metrics, Traces, and Metadata, helps simplify and streamline Observability and debugging to improve overall system reliability and efficiency. Learn more.

March 15, 2023 - Version 19.418-7 (Installed Collector)​

In this release, we've enhanced the security and stability of Collector with added support for security patch and bug fix.

• Security Fix. Upgraded collector JRE to Amazon Corretto Version 8.362.08.1.
• Bug Fix. JSON special characters in Active Directory objects are now properly represented in JSON format for reliable application performance.

December 14, 2022 (19.418-5)​

• Security fix. Updated collector JRE to Amazon Corretto 8.352.08.1
• Bug fix. Supports resilient connectivity to Collector when a pod change occurs.
• Bug fix. Introduced error handling to certain types of forwarded events that caused the collector to crash.
• Bug fix. Resolved Collector installation issues on Mac machines.

November 4, 2022 (19.415-6)​

• Security fix. Avro-util updated to 0.2.118, fixes CVE-2022-42889

October 26, 2022 (19.415-4)​

• Security update. apache commons version updated to 1.10, fixes CVE-2022-42889
• Security update. ant version updated to 1.10.11 fixes CVE-2021-36373, CVE-2021-36374

October 12, 2022 (Introducing Sumo Logic Open Source Docs)​

Welcome to the Sumo Logic Collector Release Notes on our new docs site! We're now open source and encourage you to contribute. We welcome all contributions, from minor typo fixes to brand new docs. Your expertise and sharing can help fellow users learn and expand their knowledge of Sumo Logic.

• Collector Release Notes archive

Here you'll find new Collector features and relevant bug fixes for each release.

To use Collector features mentioned in the Release Notes, you'll need to upgrade your Installed Collector software in one of the following ways:

• Using Static URLs
• From Sumo Logic
• Using the Command Line
• Using Collector Management API

September 26, 2022 (19.409-3)​

• Security fix. Upgrade Collector JRE to Corretto 8.342.07.4
• Security fix. CVE-2022-31159 - com.amazonaws:aws-java-sdk-s3
• Security fix. CVE-2022-33980 - org.apache.commons:commons-configuration2
• Bug fix. Stop Collector service if sumojni dll fails to load.

July 20, 2022 (19.403-1)​

• Feature. Collector support for Linux ARM/Aarch64 based instances, such as AWS Graviton.
• Security update. Ant updated to 1.9.16. Fixes CVE-2021-36373 and CVE-2021-36374
• Security update. Mina-statemachine updated to 2.1.4. Fixes CVE-2021-41973
• Security update. Netty updated to 4.1.77.Final. Fixes CVE-2021-37136, CVE-2021-37137, CVE-2021-21409, CVE-2021-21295, CVE-2021-21290, CVE-2021-43797 and CVE-2021-21290
• Bug Fix. Collector not properly escaping double quotes present in Active Directory objects
• Bug Fix. Retry with skipping events introduced for windows event collection for certain scenarios where bad events were resulting in retry timeouts
• Known issues when upgrading to this version:
  • Collector running as non-root user. Collector running as non-root user (run as mode) cannot be upgraded through the API/Web UI. It will run and give an error message that the upgrade is not possible. It needs to be upgraded manually on your machine. Steps to manually upgrade.
  • Collector running on Mac. Collector running on a Mac operating system cannot be upgraded through the API/Web UI. It will stop. It needs to be restarted manually on your machine if upgraded using WEB API or UI. Steps to manually restart.

July 7, 2022 (19.392-13)​

• Bug Fix. Upgrade Manager fixes were made to avoid a manual restart after a Collector upgrade.

May 11, 2022 (19.392-6)​

• Security. Upgraded the Collector JRE to 8.332.08.1 to address several CVEs:

For details, see the changelog.

March 18, 2022 (19.392-4)​

• Security. Removed a writeable zero-byte file that was previously included in Debian and RPM installers.
• Bug Fix. Source configuration requests were not sent to the correct deployment.
• Bug Fix. Duplicate Windows events ingested after upgrading to version 19.386-16 and the Windows API returning an incorrect order of events.
• Bug Fix. The Docker Log Source did not retain the indentation of log messages.
• Bug Fix. Nullpointerexception resulted in duplication of events.
• Bug Fix. Log4j vulnerability found during installation via RPM method and Docker image.
• Bug Fix. Local File Source multiline boundary regex had an idle timeout issue.
• Bug Fix. Better handling of Active Directory Inventory.

March 3, 2022 (19.386-16)​

• Security. Bundled JRE version upgraded to 8.322.06.2.
• Bug fix. Memory leak in Windows Events, record number logic for standard event channels.
• Bug fix. Local Windows Event Log Source ingested in legacy format during upgrade when JSON format selected.
• Bug fix. Collector upgrade failure resulting in collector service stopping.
• Bug fix. Log4j vulnerability in RPM and Debian packages.
• Bug fix. Windows Active Directory Source has more default attributes.
• Bug fix. Security fix for Script Source.