Changelog

• Unsaved changes indicator in header (yellow dot)
• Session expiry detection with automatic notification on 401/302 responses
• Session keepalive ping every 30 seconds
• Pattern name validation (alphanumeric and underscores only)
• Paginated report list with configurable page size (5/10/15/20)
• Keyboard navigation for report list (arrow keys, Escape to close)
• Inline report preview with header and close button
• Lookback window field inline with schedule day checkboxes
• Report header shows period and generation timestamp
• Compact viewport-locked layout — no page-level scrollbar

• Category and severity fields on custom pattern rules
• PatternCategory and PatternSeverity EMF dimensions for CloudWatch metrics
• Category and severity columns in compliance report

• Cross-account CloudWatch Logs subscription setup script
• Cross-account S3 access log replication setup script
• CrossAccountIds parameter with conditional bucket policy in CloudFormation template

• 14 built-in ingest pipelines: Lambda, JSON, Nginx, Apache, Syslog, Tomcat, Spring, VPC Flow, ALB, API Gateway, RDS Slow Query, EKS, CloudFront, RDS PostgreSQL
• Automated CloudWatch subscription filter management with regex-based log group and log stream matching
• Cross-account log ingestion via Logs Destination
• Cross-account and cross-region S3 access log ingestion
• Configurable Firehose buffering with GZIP compression to S3 datalake
• Configurable retention policies
• Configurable sizing of computational resources and disk space

• OpenSearch with pre-built index templates, ISM retention policies, pipelines and dashboards
• Athena datalake with partition-projected Glue tables and pre-built queries

• Custom pattern rules with regex, category, and severity
• 50+ built-in pattern rules across PII, PHI, FIN, SECRET, SQL, and APP categories
• Three modes: tag (annotate), redact (replace), filter (drop)
• Per-pattern CloudWatch metrics (Advanced tier+)

• Browser-based editor with live validation and regex testing
• Master-detail layout with keyboard navigation
• Version history with diff preview and one-click rollback
• Auto-save drafts every 30 seconds
• Live log group matching (Matches button)
• Pattern rule import/export (JSON)
• Compliance report generation and scheduling
• Log metadata management

• Cognito integration for user management
• FedRAMP/HIPPA compliance
• Monitors itself, providing CloudWatch dashboard and alarms for Lambda errors, SQS dead letters, and OpenSearch health
• Support bundle script for diagnostics collection
• Run more than one instance, e.g. development and production
• Helper scripts for domain setup, users, groups, snapshots, cross-account, and replication

• Five tiers: Basic, Essential, Advanced, Enterprise
• Entitlement-aware processing with grace period on expiry
• Role-based access control (Enterprise tier+)