What's new in Corner Bowl Log Manager 23.0.0.433

May 2, 2024
  • A recent update to allow agents running an older version to remain connected caused an update bug. This bug has been fixed.

New in Corner Bowl Log Manager 23.0.0.432 (Apr 30, 2024)

  • Previously when applying a blacklist IP to the Syslog, SNMP, or Agent Server, the algorithm did not properly allow IPs through. This bug has been fixed.
  • Previously when an agent connected and the maximum number of agent connections was exceeded or the host is disabled, the log file showed an exception with a stacktrace. These scenarios are expected behavior and a stacktrace not necessary. The messages have been down-graded to critical messages with no stacktrace.
  • Previously the UDP stats found on the dashboard showed the TCP bind address when it should have been showing the UDP bind address. This bug has been fixed.
  • Previously the Security Group Management Report was not applying the user filters. This bug has been fixed.
  • Previously in a multi-domain environment, the User Filters Properties View was not populating the list of inclusion and exclusion users and groups from the selected domain. This bug has been fixed.
  • The Host tree node’s Reports child tree node now includes a Batch Report Properties menu item.
  • An option to display time using the 24-hour clock format has been added to the Miscellaneous Settings View.
  • Previously when attempting to add ‘anonymous’ to the User and Group Filters drop-downs, ‘anonymous logon’ was always added. This bug would occur with any text that was a sub-set of another item. This bug has been fixed.

New in Corner Bowl Log Manager 23.0.0.423 (Apr 24, 2024)

  • Added delimiter selection to all CSV file monitors.
  • Previously when deleting a previously consolidated CSV file, the state was not cleared requiring users to manually click on the Reset State option before all the entries would be re-downloaded.
  • The Windows Agent now supports connecting to multiple servers.
  • A new Template has been added that enables users to consolidate and monitor database logs, for example, SharePoint logs.
  • Previously the Monitor Hierarchy was not firing when a child monitor triggered and the parent group option to suppress was set to any or off. The Monitor Hierarchy has also been updated to include Warning and Critical Triggers along-side Error Triggers.
  • Previously when deleting a log consolidation template, the backend state file was not deleted nor was the log retention policy attached to the template removed from assigned hosts. These bugs have been fixed.

New in Corner Bowl Log Manager 23.0.0.422 (Apr 22, 2024)

  • Added delimiter selection to all CSV file monitors.
  • Previously when deleting a previously consolidated CSV file, the state was not cleared requiring users to manually click on the Reset State option before all the entries would be re-downloaded.
  • The Windows Agent now supports connecting to multiple servers.
  • A new Template has been added that enables users to consolidate and monitor database logs, for example, SharePoint logs.
  • Previously the Monitor Hierarchy was not firing when a child monitor triggered and the parent group option to suppress was set to any or off. The Monitor Hierarchy has also been updated to include Warning and Critical Triggers along-side Error Triggers.

New in Corner Bowl Log Manager 23.0.0.411 (Mar 27, 2024)

  • Previously PowerShell Templates and Actions had a hardcoded 10-minute timeout. Both components have been updated to include a timeout variable.
  • Previously triggered Templates under the root Explorer View’s Hosts node did not always show the triggered message. This bug has been fixed.
  • Fixed several agent-based file system browsing bugs.
  • Previously when using Remote WMI to monitor Event Logs, and the state was reset, the reset line item remained in the Monitor Status View. This bug has been fixed.
  • Previously when using Remote WMI to monitor multiple Event Logs, and one of the log monitors triggered, the line item for the other logs were removed from the Monitor Status View. This bug has been fixed.
  • Previously when creating a File Consolidation Template, the output directory was not initialized to a valid value. The output directory is not initialized to the default Event Log File Backup Directory.
  • The Dashboard’s Host inventory View now updates each host’s agent connect state icon.

New in Corner Bowl Log Manager 23.0.0.409 (Mar 26, 2024)

  • Previously PowerShell Templates and Actions had a hardcoded 10-minute timeout. Both components have been updated to include a timeout variable.
  • Previously triggered Templates under the root Explorer View’s Hosts node did not always show the triggered message. This bug has been fixed.
  • Fixed several agent-based file system browsing bugs.
  • Previously when using Remote WMI to monitor Event Logs, and the state was reset, the reset line item remained in the Monitor Status View. This bug has been fixed.
  • Previously when using Remote WMI to monitor multiple Event Logs, and one of the log monitors triggered, the line item for the other logs were removed from the Monitor Status View. This bug has been fixed.
  • Previously when creating a File Consolidation Template, the output directory was not initialized to a valid value. The output directory is not initialized to the default Event Log File Backup Directory.
  • The Dashboard’s Host inventory View now updates each host’s agent connect state icon.

New in Corner Bowl Log Manager 23.0.0.406 (Mar 20, 2024)

  • Previously after viewing the Log Viewer Settings then closing the view, users were always prompted to save changes even when no changes were made. This bug has been fixed.
  • Previously the Red Hat Audit Log Consolidation Template specified a column with the key ‘HOST’ which was a violation of the base model causing the displayed value to always show as the host that the log was generated from rather than the remote host that caused the audit log entry to be written. The Template’s key has been changed to TARGET_HOST.
  • Previously Red Hat Audit Log “LOGIN” events displayed with a gray informational icon. The icon has been updated to convert the success value of “1” to the Success Audit icon.
  • The Microsoft Graph email has been updated to support the US Government cloud for both Level 4 and Level 5 access.
  • The automated Linux Agent installation has been updated to specify the SSH/SFTP password when prompted after executing the sudo -s command.

New in Corner Bowl Log Manager 23.0.0.399 (Mar 7, 2024)

  • Previously SQLite often threw a database is locked error when under load. Upon extensive testing, it appears the SQLite library does not support concurrent transactions, a common practice in all database base management systems. A Semaphore has been added around the Begin Transaction call which appears to significantly minimize or even eliminate the SQLite library bug.

New in Corner Bowl Log Manager 20.0.0.367 (Feb 6, 2024)

  • Two new sample Templates have been added called, Local Active Accounts (90 Days) and Local Enabled Accounts.
  • A recent bug was introduced that caused the File Integrity Monitor to improperly display within the detail view. This bug has been fixed.
  • A new column has been added to Dashboard’s Host Inventory View to displays the current state of the Agent when the view is refreshed. This value is not currently subscribed to and required a refresh to get the current value.

New in Corner Bowl Log Manager 20.0.0.364 (Feb 3, 2024)

  • Previously when running PowerShell scripts and commands, if the script or command threw a user interface prompt, execution would hang for 10 minutes waiting for the response. The -NonInteractive flag is now passed to all scripts and commands.
  • Previously when flagging a text log monitor template to ignore files not found, the files not found would still display in the Explorer View and the Monitor History Status View. The files are no longer displayed. If no files are found, a single entry displays shown no files were found for the entire template.
  • Previously when monitoring a text log for missing entries and the file was not found, an object reference not found error was thrown. This bug has been fixed.
  • The Host Agent Properties Tab has been updated to include the last connected time, last disconnected time and current connection status.
  • The Management Console has been updated to subscribe to agent connection status enabling users to quickly identify by way of a different icon which machines are connected.

New in Corner Bowl Log Manager 20.0.0.358 (Jan 27, 2024)

  • Previously on heavily loaded systems the internal server.log file was logging MBs of data every minute. Several messages have been removed and now, when the CBSAudit Event Logging is enabled for a Template, the log entries that used to be written to the server.log file during the Template’s execution are now dropped.
  • The Agent Installer Service and Agent Server have both been updated to limit the number of current Agent installations which can be configured via the Agent Server Setting view.
  • The Agent Server has been updated so legacy Server 2008 machines running the .Net 4.72 compiled Agent are updated using the latest version from the Corner Bowl Software website. This feature required Internet access.

New in Corner Bowl Log Manager 20.0.0.321 (Dec 6, 2023)

  • Fixed another schedule exclusion rule bug.
  • The X-Axis on Line Charts have been updated to provide better tick marks.
  • Previously when saving a batch of Templates that had no hosts assigned, the prompt continued to display to confirm saving with out any assignments. The prompt has been removed.
  • Previously when attempting to attach a PDF to Monitor Email Notifications, an error was thrown and the PDF not emailed. This bug has been fixed.
  • The Executable Status History Delete Toolbar Icon has been updated to use the Clear Icon.

New in Corner Bowl Log Manager 20.0.0.476 (Oct 13, 2021)

  • The Event Log Backup Template now includes the option to run the template
  • on the Log Manager Agent.
  • The user interface now changes color depending on the type of license
  • installed. If you do not like the default color theme, you have the option
  • of setting the color theme manually via the Miscellaneous Options view.
  • The terminology Push Logs has been replaced with Agent Server.
  • The Service-to-Service Event Log Consolidation has been removed and
  • replaced with the Log Manager Agent.
  • The Email Settings now supports sending email un-authenticated.

New in Corner Bowl Log Manager 18.0.0.205 (Sep 30, 2021)

  • Previously when attempting to manually run a Directory Size Watcher
  • Monitor from the Console, the service crashed. This bug has been fixed.
  • Depending on the method of manual execution, the real-time monitor is
  • either ignored or a message is displayed stating real-time monitors cannot
  • be manually executed.

New in Corner Bowl Log Manager 18.0.0.144 (Mar 4, 2020)

  • While fixing the event logon report detail I accidentally broke the event logon summary report. this bug has been fixed.
  • The logon sessions report was missing the Client IP column. the column has been added.

New in Corner Bowl Log Manager 18.0.0.143 (Mar 4, 2020)

  • Critical bug fix

New in Corner Bowl Log Manager 18.0.0.140 (Mar 3, 2020)

  • Last October I added some debug information to the server monitor
  • functions. The update caused some error triggers to fail. This bug has
  • been fixed.

New in Corner Bowl Log Manager 18.0.0.137 (Feb 25, 2020)

  • Previously when consolidating log entries to MySQL when attempting to view
  • entries by date a syntax error was thrown. This bug has been fixed.

New in Corner Bowl Log Manager 18.0.0.136 (Feb 22, 2020)

  • Fixed a critical compliance report bug

New in Corner Bowl Log Manager 18.0.0.135 (Feb 21, 2020)

  • Fixed a critical compliance report bug
  • I previously attempted to fix a bug in the login sessions report related
  • to changes Microsoft made to entry 4624 in Server 2016 which caused Corner
  • Bowl to fail parsing the entries. Although the fix I implemented allowed
  • the reports to run I erroneously removed the Caller IP field thinking that
  • it had been removed when in fact my truncate function (which removes the
  • help content from the entries) was simply removing it since the updates
  • made my Microsoft simply added a more detailed section. I have fixed this
  • critical bug and will be sending notification emails. This is a critical
  • bug fix which everyone is advised to download and install.

New in Corner Bowl Log Manager 18.0.0.134 (Feb 19, 2020)

  • Fixed a critical thread leak bug

New in Corner Bowl Log Manager 18.0.0.132 (Feb 12, 2020)

  • Previously when viewing an event log in the real-time viewer, in some
  • cases the time written was displayed incorrectly. This bug has been fixed.

New in Corner Bowl Log Manager 18.0.0.131 (Feb 12, 2020)

  • Fixed several bugs
  • Previously when testing SNMP gets for a hostname rather than an IP address, the first discovered IP address was used. I verified, in my case, that the IP address returned was not addressable. I have updated the code to sort the IP addresses by lowest number then try each address. In my case, this solved the issue with hostnames not being accessible.
  • Previously the Logon Sessions report included the caller IP address in the report. Microsoft has removed the value from Server 2016 and Windows 10. Moving forward this value is no longer available. I have updated the HTML alert so it no longer includes the now missing value.
  • Previously when attempting to modify an existing Message Box Action twice in a row, the Apply button did not enable itself after the first save. This bug has been fixed.

New in Corner Bowl Log Manager 18.0.0.130 (Feb 4, 2020)

  • Added username option to Account Lockout alerts
  • Account locked and unlocked alerts now support including the username in the email subject fieldTo include the username in Active Directory or WMI account lockout alerts type the {USER} tag in the subject line.

New in Corner Bowl Log Manager 18.0.0.128 (Feb 3, 2020)

  • Back in November of last year a bug was reported which did not allow email
  • to be sent in rare cases when sending plain text over SSL. At the time I
  • did not realize the .Net SmtpClient did not support SMTP over SSL only SMTP
  • and SMTP with STARTTLS. I have left the change I made to the SMTP
  • authentication type, however, I have rolled back to use my own SMTP client
  • for SSL.

New in Corner Bowl Log Manager 18.0.0.127 (Feb 3, 2020)

  • Fixed a critical monitor failure rate bug and a minor UI bug
  • Previously when a template was configured to support failure rate, the execution frequency set to once a minute or higher and the failure execution rate set to more than once every minute, for example every 15 seconds, upon recover the monitor did not shutdown the failure rate execution frequency. If the template was also configured to shut down during a maintenance window, the monitor would not shutdown causing the monitor to trigger during the maintenance window.
  • Previously when configuring Event Log based templates the log selection dialog was slow to respond when communicating with wide area networked computers.

New in Corner Bowl Log Manager 18.0.0.126 (Jan 31, 2020)

  • Fixed a critical auto configuration bug

New in Corner Bowl Log Manager 18.0.0.125 (Jan 23, 2020)

  • Previously when shutting down the service while a log entry retention
  • policy was executing the service failed to cancel the running policy
  • causing the service to timeout while shutting down. This same bug existed
  • when attempting to manually cancel the policy from the running monitors
  • view. This bug has been fixed.

New in Corner Bowl Log Manager 18.0.0.124 (Jan 17, 2020)

  • Fixed an account lockout monitor bug:
  • Previously the Account Lockout Monitor template configuration view did not
  • save the monitor local accounts options. This bug has been fixed.

New in Corner Bowl Log Manager 18.0.0.123 (Jan 17, 2020)

  • Added TLS 1.2 support to FTP and Throughput monitors
  • The FTP Monitor and Throughput Monitors now both support FTPS also known
  • As FTP over TLS 1.2.

New in Corner Bowl Log Manager 18.0.0.122 (Jan 11, 2020)

  • Fixed several file system monitoring bugs
  • Previously the Directory Cleaner, Directory Size Monitor, Directory SizeWatcher, Directory Watcher and the File Count Monitor did not properly exclude configured sub-directory exclusions. This bug has been fixed.

New in Corner Bowl Log Manager 18.0.0.120 (Dec 31, 2019)

  • Previously when consolidating event logs from a remote server that was
  • temporarily unavailable, there was no option to retry the event log
  • download until the next configured schedule. Like many of the other
  • monitors I have added the option to apply a failure schedule. Now once an
  • event log download fails, if the user has configured the failure schedule,
  • the download will retry using the failure schedule. For example, if the
  • download is configured to run every hour but upon failure every 10 minutes
  • the software will now attempt to download every 10 minutes until the event
  • logs have been successfully downloaded. Once downloaded, the original
  • schedule of one hour will be re-applied.

New in Corner Bowl Log Manager 18.0.0.119 (Dec 28, 2019)

  • Previously Active Directory Account Lockout Monitor alerts configured to
  • export to an HTML file were failing because the installed HTML template
  • file contained underscores in the name rather than dashes. This bug has
  • been fixed.

New in Corner Bowl Log Manager 18.0.0.116 (Dec 8, 2019)

  • Added SFTP private key file support
  • Previously users were unable to specify a private key file when connecting to an SSH endpoint. This limitation has been resolved.

New in Corner Bowl Log Manager 18.0.0.115 (Nov 28, 2019)

  • Added an HTTP monitor enhancement and fixed an email bug
  • The HTTP/S monitor now supports checking a page for multiple lines of
  • content.
  • Previously when sending email without STARTTLS the software was sending
  • the email via a client I wrote which in some cases was unable to agree on
  • an authentication type. I have modified the code to instead use the same
  • .Net SMTP Client that is used when authenticating with STARTTLS.

New in Corner Bowl Log Manager 18.0.0.114 (Oct 29, 2019)

  • Fixed several critical summary report bugs"
  • Previously summary reports that were configured to display detailed graphs
  • for performance monitors such as CPU and Disk Monitor history were not
  • updating the date and time ranges causing the graphs to display old data.
  • This bug has been fixed.
  • Previously the some of the summary report template options were not
  • properly enabling the Apply button when the date range criteria was
  • changed. Also if the user canceled out the configuration dialog any
  • changes made remained in the Console's memory rather than being discarded.
  • The bugs effected the Disk Monitor, Directory Size Monitor, CPU Monitor,
  • Memory Monitor, File Size Monitor, Performance Monitor and Ping Monitor.
  • These bugs have been fixed.

New in Corner Bowl Log Manager 18.0.0.112 (Oct 25, 2019)

  • Fixed a critical directory watcher bug and several Windows SSL Certificate monitor bugs
  • Previously the directory watcher was locking sub-directories causing user
  • Renames and deletes to fail. This bug has been fixed.
  • Previously the Windows SSL Certificate monitor did not include the issued
  • To value in the short notification message. This information has now been
  • Added.
  • Previously the Windows SSL Certificate monitor set the error state instead
  • Of the critical state when a certificate had a chain error. This bug has
  • Been fixed.
  • Previously the Windows SSL Certificate monitor's detail view did not set
  • The state icon or error message when there was a chain error. This bug has
  • Been fixed.

New in Corner Bowl Log Manager 18.0.0.110 (Oct 24, 2019)

  • Per customer request I have added support to send SMS messages through
  • Twilio.

New in Corner Bowl Log Manager 18.0.0.104 (Oct 16, 2019)

  • Previously if a text log monitor configuration was configured to include
  • previous entries with the alert and the number of entries to include was 0
  • the monitor would fail to process the filter. This bug has been fixed.

New in Corner Bowl Log Manager 18.0.0.100 (Sep 12, 2019)

  • Previously when searching for a computer in the Object Explorer the search
  • function expanded templates which in some cases caused the software to make
  • network calls. The search function has been updated to skip expanding
  • monitors when searching for a computer. The result is a fast search for
  • computer function.

New in Corner Bowl Log Manager 18.0.0.99 (Sep 2, 2019)

  • Added several UI enhancements
  • Previously the log report views did not specify the type of log in the
  • header which often led to confusion. The Event Log, Syslog and Text Log
  • Report views now contain the log type in the header.
  • Previously when attempting to view the top 1000 log entries for a log that
  • has not been downloaded resulted in SQL Server and MySql specific errors
  • that did not provide much information. The error message has been updated
  • to better explain the problem and provide a solution.

New in Corner Bowl Log Manager 18.0.0.98 (Jun 28, 2019)

  • Previously the new Directory Real-Time Size Watcher monitor was not
  • clearing the previously logged files when automatically clearing causing
  • the alerts to continue to grow in size while repeating files from previous
  • alerts in the current alert. This bug has been fixed.

New in Corner Bowl Log Manager 18.0.0.97 (Jun 21, 2019)

  • Previously if a text log file was not flagged internally as Unicode but
  • the file contained Unicode content, the text log monitor was unable to
  • parse the file. A new option has been added that enables users to
  • explicitly open files as Unicode.
  • Previously when canceling a change on the Text Log Monitor entry pattern
  • recognition screen the UI failed to backout the entry pattern recognition
  • from memory. This bug has been fixed.
  • The system requirements listed in the help file have been updated to
  • include Windows Server 2016 and Windows 10.

New in Corner Bowl Log Manager 18.0.0.86 (May 20, 2019)

  • Previously when monitoring a directory for created, modified, moved and
  • deleted files the trigger action threw an object reference error. This bug
  • has been fixed.

New in Corner Bowl Log Manager 18.0.0.85 (May 13, 2019)

  • Updated installer to include prompt for installation directory
  • Previously users were unable to set the installation directory during the
  • initial installation.
  • The installer now provides this option.

New in Corner Bowl Log Manager 18.0.0.84 (May 9, 2019)

  • Previously Disk Space Monitors that were configured to monitor specific
  • disks that included a disk that was not found and ‘Ignore disk not found
  • errors’ was selected the entire monitor would trigger an error alert.
  • This bug has been fixed.
  • Previously when re-opening a Disk Space Monitor Template that was
  • configured to monitor specific disks the configured disks did not display
  • on the Disk and Shares tab until after a machine was selected in the
  • Servers/Workstations drop-down list. This bug has been fixed.

New in Corner Bowl Log Manager 18.0.0.83 (May 7, 2019)

  • Previously the Log Manager, Disk Monitor and Internet Server Monitor
  • import functions were attempting to load the legacy configuration files
  • from the wrong directory. This bug has been fixed.

New in Corner Bowl Log Manager 18.0.0.80 (Apr 22, 2019)

  • Previously when shutting down the service, if an Account Lockout Report
  • was running the report did not shutdown. In cases where numerous servers
  • were assigned to the report this caused the service to appear as though it
  • hung during shutdown. This bug has been fixed.
  • Previously when displaying consolidated logs host names that had aliases
  • assigned to them did not display the alias in the log viewer header but
  • instead displayed the actual hostname or IP. This bug has been fixed.

New in Corner Bowl Log Manager 18.0.0.73 (Apr 17, 2019)

  • Previously when manually backing up the configuration if the previously
  • backed up directory is on a disk that is no longer accessible, the backup
  • function threw an 'Access to the path' error. This bug has been fixed.

New in Corner Bowl Log Manager 18.0.0.72 (Apr 15, 2019)

  • Fixed a Server 2016 Logon Session Report bug Fri, 12 Apr 2019 08:16:56 MDT
  • Thanks to several customers for reporting a bug in the Windows Server 2016 Logon Sessions report I have fixed the report. Microsoft changed the format of Event 4624 on Server 2016. The parsing code has been updated to support Server 2016 - 2003.

New in Corner Bowl Log Manager 16.0.0.40 (Sep 5, 2017)

  • Fixed - Unable to compress files larger than 4GBs.
  • Fixed - The daily range schedule updates everytime the service is restarted causing some templates to be rescheduled to the next day.
  • Fixed - When backing up Windows Event Logs on some Server 2008 R2 servers, Windows creates very large temporary files on the remote server.
  • Fixed - Syslog Retention Policy fails to schedule when multiple syslog consolidation templates are assigned.

New in Corner Bowl Log Manager 11.0.0.227 (Oct 15, 2013)

  • Unable to view some messages from malformed evt files.
  • Users that created syslog templates using build 9.0.0.143 or earlier were unable to delete those templates when running the latest version.
  • The syslog servers (UDP and TCP) cache DNS lookups for one hour potentially causing events written to the wrong consolidated log. The software has been updated to include an option disable DNS lookups when packets are received. To disable DNS lookups, select Edit -> Server Manager Properties -> Syslog Server. Finally, un-check Enable DNS lookup.

New in Corner Bowl Log Manager 11.0.0.212 (May 1, 2013)

  • Fixed several Windows 2012 related bugs
  • Fixed bug 8357 - When installing to Server 2012 the installer requires the
  • Application Server Role be installed. The installer has been updated to
  • use a new .Net Framework 3.5 SP1 (Windows Feature) prerequisite which
  • enables the installer to automatically install the .Net Framework 3.5 SP1
  • without user interaction.
  • Fixed bug 8706 - The list control used throughout the Console does not
  • display column headers on Server 2012 when default display theme is used.

New in Corner Bowl Log Manager 11.0.0.211 (May 1, 2013)

  • Fixed entry pattern UI bug
  • Fixed bug 8572 - Entry pattern test function does not always work correctly.

New in Corner Bowl Log Manager 11.0.0.205 (Dec 17, 2012)

  • Updated EULA formatting.

New in Corner Bowl Log Manager 11.0.0.134 (Dec 17, 2012)

  • The product name has been changed from Corner Bowl Log Manager to
  • SpectorSoft Log Manager.
  • Several graphics throughout the application have been updated.
  • Previously when attempting to consolidate or import event log entries that
  • contained an invalid level such as 0 and saving to SQL Server, MySQL or
  • Oracle a foreign key constraint error was thrown. The software now
  • defaults invalid levels to Informational.

New in Corner Bowl Log Manager 11.0.0.100 (Sep 8, 2012)

  • Previously when truncating the text log repository, when a table contained no more entries, the table was deleted, however the index was not cleaned up. These bugs have been fixed.

New in Corner Bowl Log Manager 11.0.0.99 (Sep 7, 2012)

  • Previously when consolidating text log files that contained the date or time within the filename and the logical name was not set and consolidating to the file system rather than a database out of date logs were not removed from the log repository. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.98 (Aug 29, 2012)

  • Fixed text log monitor bug

New in Corner Bowl Log Manager 11.0.0.97 (Aug 19, 2012)

  • Fixed mysql connection leak when deleting a consolidated log
  • Added some extended debug information into the data management functions.

New in Corner Bowl Log Manager 11.0.0.96 (Jul 6, 2012)

  • Previously filters did not properly escape the "]" character. This bug has been fixed.
  • Updated several error messages.

New in Corner Bowl Log Manager 11.0.0.95 (Jun 14, 2012)

  • Users can now include an entry's message within the subject line of real-time alerts. To include the message within the subject add the {MESSAGE} tag to the subject line.
  • The log viewers have been updated to resolve several minor drawing issues.
  • Several tab order bugs were fixed within the log viewers.
  • Previously when exporting previously consolidated entries to EVT, the entries were saved out of order. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.93 (May 18, 2012)

  • Previously there was a DNS call prior to each Event Log download. This call was unnecessary and has been removed.
  • Previously when viewing the top 10000 consolidated Event Log entries the viewer threw an error when the user attempted to change the entries per page to a value greater than 0xFFFF. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.92 (Apr 10, 2012)

  • When using MySQL to store consolidated log entries, when a user set an entries notes field the viewer was no longer able to view the top 10000 entries. This bug has been fixed.
  • Fixed several help file bugs.
  • Users can now save configurations to template from within the Verify page of any log management wizard.

New in Corner Bowl Log Manager 11.0.0.91 (Mar 26, 2012)

  • Previously the installer failed when run on Windows Home Server 2011. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.90 (Mar 21, 2012)

  • Previously when viewing a host or device's syslog properties the first page to load was the Consolidated Log page. If the consolidated log contained a significant amount of data the page took a period of time to load and blocked the application. The Monitoring page is now the default page and when the Consolidated Log is viewed the database query has been moved to a background thread enabling users to dismiss the dialog without waiting.
  • Previously when consolidating logs to Oracle and viewing the Top Events controls via the Event Log Properties page the maximum number of items to display was off by 1. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.89 (Mar 6, 2012)

  • Previously when re-configuring multiple servers for event log management when prompted to select the logs some logs displayed once for each server. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.88 (Feb 20, 2012)

  • Previously when exporting logs or entries to a CSV file data columns that contained embedded double quotes were not properly escaped. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.87 (Jan 20, 2012)

  • Recently we introduced a bug into the list view control which rendered the custom column popup box useless. This bug has been fixed.
  • Previously when setting up SQL Server or MySQL users were required to create the database manually. The software now automatically creates the database if it does not exist. Please note this function requires sa or root access to the database.

New in Corner Bowl Log Manager 11.0.0.86 (Jan 16, 2012)

  • Previously when using the Actions Manager or Filters Manager the currently selected object was not assigned to the combo-box which was associated with the opening of the form. This was quite annoying and required the user to manually select a newly created filter or selected filter within the combo-box. The object is now automatically selected within the combo-box.

New in Corner Bowl Log Manager 11.0.0.85 (Jan 12, 2012)

  • Users can now notify the service to truncate any configured consolidated log via the Properties or Log Management Wizard. From the Log Retention Policy tab or Entry Retention Polices page click the 'Queue the service to Truncate Now' button.

New in Corner Bowl Log Manager 11.0.0.84 (Jan 5, 2012)

  • Previously users were unable to copy text log filter criteria to another filter. This bug has been fixed.
  • Previously when appending complex filter criteria to another complex filter the closing parenthesis was not created. This bug has been fixed.
  • Previously the Event Log and syslog real-time email alerts did not contain the filter name in the header. The HTML template files have been updated to include the filter within the header.
  • Previously when viewing the Syslog Properties dialog and the log repository was off line the configuration pages did not populate. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.83 (Dec 15, 2011)

  • Previously there were several bugs in the schedule distributor algorithm as well as the user interface. These bugs have been fixed.
  • The Start Process action now includes the option to set the maximum execution count when the command-line has a variable tag such as {HOST} or {MESSAGE}. The default and previous value was 20. Users can increase the value to as high as 0xFFFF however a value of 2000 should never be exceeded.

New in Corner Bowl Log Manager 11.0.0.82 (Oct 25, 2011)

  • In an effort to enable users to quickly resolve WMI Quota Violation errors users can now increase WMI Quota settings via the Options dialog of Log Manager.
  • Previously when attempting to view the Windows Event Log Properties page within the Event Log Properties dialog from a Server 2003 computer to a Server 2008 computer the application would thrown an "Operation is not supported on this platform" error. This bug has been fixed.
  • The Troubleshooting section of the help file has been significantly updated.

New in Corner Bowl Log Manager 11.0.0.81 (Oct 20, 2011)

  • Quite a while a go several menu items were renamed however the help documentation and tutorials where not updated to reflect the changes. The help and tutorials have now been updated.

New in Corner Bowl Log Manager 11.0.0.80 (Sep 23, 2011)

  • Previously when truncating or archiving a log within the log repository if an error was thrown the Error Report did show the sub-component that failed. The Error Report now shows the truncate/archive function failed followed by the error.

New in Corner Bowl Log Manager 11.0.0.79 (Sep 22, 2011)

  • Previously text log consolidation was inefficiently consolidating entries. The algorithm has been updated to resolve these issue.

New in Corner Bowl Log Manager 11.0.0.78 (Sep 22, 2011)

  • Previously if a remote server returned an Event Log entry outside the requested date/time range the download would immediately stop if consolidating to the file system or post consolidation filters were assigned. The software now works around this WMI bug.

New in Corner Bowl Log Manager 11.0.0.77 (Sep 7, 2011)

  • Users can now share filter configurations between installations. To enable sharing search your application data directory for a file called filters.dat. On Windows Server 2008 this is typically c:\programdata\CornerBowl\Log Manager\filters.dat. Create a new file called filters.dat.redirect. Open the new file in a text editor such as notepad and type the UNC path that contains the target location. For example, \\servername\c$\Log Manager. Save the file then restart both the Corner Bowl Log Manager service and user interface.

New in Corner Bowl Log Manager 11.0.0.76 (Aug 13, 2011)

  • Upon further review we found several dialogs that did not properly draw when running Windows 7 with the display set to 125%. These bugs have been resolved.

New in Corner Bowl Log Manager 11.0.0.75 (Aug 11, 2011)

  • Previously the Event Log viewer was limited to a minimum of one day per page. When attempting to view large logs such as those on 2008 domain controllers where 100s of thousands of entries are generated each day this caused the view to display very slowly. A new view has been added so users can page through 10000 entries at a time.
  • Previously the Manual Event Log Management Output window displayed a new tree node every 1000 entries that were downloaded. When downloading large logs the tree view would become virtually impossible to read. When appropriate the tree view now replaces the similar nodes with the latest stats.
  • Previously on Windows 7 if a user changed the display to 125% some of the wizards did not display correctly. These bugs have been fixed.

New in Corner Bowl Log Manager 11.0.0.74 (Aug 5, 2011)

  • Users can now open any Event Log Repository file (.elf) from the File menu item.
  • Previously when setting a computers clock back in time and saving Event Logs to the Log Repository using Corner Bowl's file format entries may have been stored out of order specifically when the next download contained entries written prior to and after the clock change.

New in Corner Bowl Log Manager 11.0.0.73 (Jul 26, 2011)

  • Previously if a state file was created with no content the both the service and user interface would throw an IO error while reading the file. We are continuing to look into how a zero byte state file could be created however the software now properly handles the error situation.

New in Corner Bowl Log Manager 11.0.0.72 (Jul 19, 2011)

  • Previously on certain systems when adding a new text log monitor to a computer which already contains another text log monitor, all pre-existing text log monitors were removed. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.71 (Jul 14, 2011)

  • Previously if error notification was disabled the errors were not propagated to the Error Report. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.70 (Jul 13, 2011)

  • 2 new tutorials have been added to the help file.
  • Previously when installing this software or rebooting the server, the service may have failed to start on some systems. We thought we had fully resolved this issue by removing the code signature from the service binary however it appears all dependent dlls must also be unsigned. This issue has been worked around.

New in Corner Bowl Log Manager 11.0.0.69 (Jul 5, 2011)

  • Several updates have been made to the troubleshooting section within the help file.

New in Corner Bowl Log Manager 11.0.0.68 (Jul 1, 2011)

  • Previously when monitoring Unicode text log files such as SQL Server's Error log the file was incorrectly opened in UTF8 format. The initial read works as expected, however subsequent reads fail. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.67 (Jun 28, 2011)

  • Previously when installing to Server 2008 R2 if the Application Server Role was not installed the service would fail to start and the installation would fail. The installation now checks for the existence of the Application Server Role when installed to Server 2008 R2 or higher.

New in Corner Bowl Log Manager 11.0.0.67 (Jun 28, 2011)

  • Previously when installing to Server 2008 R2 if the Application Server Role was not installed the service would fail to start and the installation would fail. The installation now checks for the existence of the Application Server Role when installed to Server 2008 R2 or higher.

New in Corner Bowl Log Manager 11.0.0.66 (Jun 28, 2011)

  • Previously when saving large log entries there was a very small window which could cause the consolidation to fail. This error occurred when the message exceeded the maximum column size. In this case the message was escaped prior to truncating the message. If the last character within the truncated message was an escaped character such as ' the insert would fail. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.64 (Jun 24, 2011)

  • Previously adding groups and moving criteria was extremely difficult when attempting to create complex filter criteria. The user interface has been updated so criteria can be moved into child groups. A button has been added enabling the selected criteria to be wrapped within a group. The logical and Not operators can now be changed by selecting the target group, changing the logical or Not operands then clicking Apply. Finally when the dialog is closed if a criteria has been created but not applied the criteria is automatically applied.

New in Corner Bowl Log Manager 11.0.0.62 (Jun 22, 2011)

  • Previously when browsing for the file to remote execute when configuring a start process action an error was thrown. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.61 (Jun 20, 2011)

  • Previously users were required to create a log monitor anytime they wanted to open and review a log file. The user interface has been modified so users can now open a text log file from the File -> Open menu item. When opened users are prompted to specify the entry pattern recognition rules. Once specified the file is opened for review.
  • Users can now open .log and .txt files from within Windows Explorer. From Windows Explorer, right click on the log file and select Open With. Navigate to 'c:\program files\corner bowl software\log manager' then select cblmui.exe.

New in Corner Bowl Log Manager 11.0.0.60 (Jun 18, 2011)

  • Previously when exporting Failed Logon or Success Logon reports to XML several attributes contained spaces within the name which caused a validation error. This bug has been fixed.
  • Previously when right clicking on an archived consolidated log and selecting Properties -> Consolidated Log, the properties displayed were for the primary consolidated log. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.59 (Jun 17, 2011)

  • All Security Event Log Reports can now be exported and printed on-demand.
  • In an effort to remove noise from the service log file we removed the 'previous download is already running' message from Event Log consolidation algorithm. The message will appear when run in verbose mode. The Event Log consolidation algorithm was also updated to reduce the download status output from every 250 messages to every 1000 messages.

New in Corner Bowl Log Manager 11.0.0.58 (Jun 11, 2011)

  • Previously the service may have failed to start after a reboot if the Cryptographic Service was slow to start. According to Microsoft this occurs because the service binary is digitally signed. The solution Microsoft has provided to the community is to exclude code signing from all Windows Services. The service binary is no longer signed.

New in Corner Bowl Log Manager 11.0.0.57 (Jun 10, 2011)

  • Made several significant performance enhancements
  • Previously the download algorithm always sorted the entries prior to executing post consolidation filters. This often caused out of memory error to get thrown. With minor modifications we were able to remove the sort requirement to after the entries are filtered. Entries are still sorted, however, if using the file system to store entries. Assuming a non-blank filter this format should significantly reduce the download overhead.
  • Several Server 2008, Windows 7 and Vista Security Log Entries are now parsed prior to saving them. Once parsed extra generic informational data that resides at the bottom of the entry is removed. Our testing showed a net effect of approximately a 40% savings in required disk space and a slightly faster consolidation speed.
  • The list view controls we use throughout the software did not properly redraw the embedded scrollbars when the control was not visible and the application was resized. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.56 (Jun 3, 2011)

  • Previously the idle file monitor page with the text log directory monitor wizard had the incorrect header strings. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.55 (Jun 2, 2011)

  • Previously configured error alert suppression did not properly clear when the monitor was scheduled to run at a frequency faster than the auto clear frequency. This caused alerts to continually be suppressed. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.54 (Jun 1, 2011)

  • Users can now import a lists of hosts from either a text or CSV file and assign Event Log, Syslog, Text Log and Text Log Directory Templates. To import a list of computers select Tools -> Import Computer List.
  • Previously when downloading Event Logs and saving to SQL Server using Windows Authentication if the account the service was running under did not have access to the database a logon failure error was thrown. The error was somewhat confusing because it did not explicitly callout which function (Database or remote WMI request) threw the logon error. The error includes more information that should be quite a bit more helpful.

New in Corner Bowl Log Manager 11.0.0.53 (May 21, 2011)

  • Previously the schedule distributor did not properly distribute minutes and every X hour schedules where X is > 1. These bugs have been fixed.

New in Corner Bowl Log Manager 11.0.0.52 (May 12, 2011)

  • Previously when changing the text log entry delimiter for a directory monitor the user interface did not properly update. This bug has been fixed. Please note whenever an entry delimiter is updated all dependent log views must be re-opened for changes to take effect.

New in Corner Bowl Log Manager 11.0.0.51 (May 6, 2011)

  • Previously when archiving to SQL Server from a SQL Server log repository the data was ordered. The order is not necessary and has been removed.
  • Previously after adding the Event Log and Syslog property pages the right click popup menu items failed to open within the Event Log and Syslog Error Reports. This bug has been fixed.
  • The help popup controls found through the UI have been updated to only display the popup after the mouse hovers for more than 200 milliseconds.

New in Corner Bowl Log Manager 11.0.0.47 (Apr 5, 2011)

  • Previously Logon/Logoff reports incorrecly reported the caller domain instead of the domain when displaying the reports from Server 2003, Vista, XP, 2000, and NT computers. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.46 (Mar 31, 2011)

  • Previously if FIPS compliance was enabled the service failed to start. This typically manifests itself during installation as a service start failure. Upon inspection of the service log file the following error is written: This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.45 (Mar 24, 2011)

  • Previously when importing an EVT file, but not an EVTX file, and using our file system format to store consolidated logs the data was inserted in the wrong sort direction. This rendered the software unable to properly display and report against the data. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.43 (Mar 17, 2011)

  • In build 41 we added the ability to assign a group to a report however when configuring a Standard or Frequency Event Log Report the wizard did not display the available logs for the group. This bug has been fixed.
  • In build 41 we added an Idle File Monitor however this monitor's configuration was not added to the Text Log and Text Log Directory Template configuration pages. This bug has been fixed.
  • There were several annoying scroll issues related to the list control. These bugs have been resolved.

New in Corner Bowl Log Manager 11.0.0.42 (Mar 15, 2011)

  • Build 36 introduced a bug which potentially corrupts the text log monitor and text log directory monitor internal state files. This build detects the potentially corrupt files and recreates them.

New in Corner Bowl Log Manager 11.0.0.41 (Mar 15, 2011)

  • Log Manager now includes an idle file monitor enabling system administrators to get notified when an application server shuts down, hangs or crashes. To create an idle file monitor select New Monitor from the File menu item. Configure a new Text Log or Text Log Directory monitor. Click through to the Configure Idle File Monitor page.
  • Previously when clearing a file size monitor for a text log directory monitor the Configuration Explorer pane was not properly updated. This bug has been fixed.
  • Previously when viewing an Event Log and attempting to append an entry to an existing filter the Filter Selected Entries dialog incorrectly listed our canned security log filters. Only simple and complex Event Log filters can be appended too. This bug has been fixed.
  • Previously when configuring a database action users were able to erroneously select the default file system log repository. The UI now only permits database configurations to be selected.
  • Previously when mapping a computer to monitor a text log file the map computer dialog incorrectly attempted to access Event Logs on the remote computer. The dialog now attempts to read the available shares using Windows Networking.
  • Users can now assign groups to reports enabling computers automatically added to reports when added to a new group.

New in Corner Bowl Log Manager 11.0.0.40 (Mar 7, 2011)

  • Log Manager now includes an idle file monitor enabling system administrators to get notified when an application server shuts down, hangs or crashes. To create an idle file monitor select New Monitor from the File menu item. Configure a new Text Log or Text Log Directory monitor. Click through to the Configure Idle File Monitor page.
  • Previously when clearing a file size monitor for a text log directory monitor the Configuration Explorer pane was not properly updated. This bug has been fixed.
  • Previously when viewing an Event Log and attempting to append an entry to an existing filter the Filter Selected Entries dialog incorrectly listed our canned security log filters. Only simple and compleEvent Log filters can be appended too. This bug has been fixed.
  • Previously when configuring a database action users were able to erroneously select the default file system log repository. The UI now only permits database configurations to be selected.
  • Previously when mapping a computer to monitor a text log file the map computer dialog incorrectly attempted to access Event Logs on the remote computer. The dialog now attempts to read the available shares using Windows Networking.
  • Users can now assign groups to reports enabling computers automatically added to reports when added to a new group.

New in Corner Bowl Log Manager 11.0.0.36 (Feb 20, 2011)

  • Users can now create, view and delete configuration templates from within the configuration wizards and the Auto Configurator.

New in Corner Bowl Log Manager 11.0.0.35 (Feb 12, 2011)

  • We have added a text log monitor properties page dialog enabling users to re-configure text log monitors using property pages.
  • The text log size monitor wizard page has been updated to include the current file size as well as all size state information recorded during the previous scan. Users can also now clear triggered size alerts from within the wizard.
  • Several menu bar commands have been added, moved, icons updated and text updated.
  • Previously when a file size alert was fired the threshold value was typically displayed incorrectly. This bug has been fixed.
  • Previously when displaying a consolidated directory monitor log that has been removed from the Configuration Explorer an object reference error was thrown. This bug has been fixed.
  • Previously the user interface based actions would not fire for text log size monitor alerts. This bug has been fixed.
  • Previously when an Event Log was assigned to an Account Management or Logon/Logoff Security report the Assigned Reports page within the Event Log Management Wizard and Event Log Property Tabs dialogs did not show the assignment. This bug has been fixed.
  • Previously when restoring a configuration to a new computer the monitor dependent state files were not immediately created. This caused several significant errors that may or may not self-resolve depending on how the monitors are configured. The most common issue discovered was all scheduled functionality was immediately executed regardless of the schedule. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.31 (Feb 2, 2011)

  • Previously the Event Log Account Management reports would only run when manually executed. This bug has been fixed.
  • Previously Event Log backups failed if the final backup directory did not exist. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.30 (Feb 1, 2011)

  • In an effort to simplify Syslog management users can now re-configure Syslogs using a new Syslog Property Pages dialog.
  • Added a clear option to the Syslog Backup function enabling users not interested in retaining data to the log repository to immediately remove the data once backed up, compressed and encrypted.
  • Updated several of the configuration validation error messages.

New in Corner Bowl Log Manager 11.0.0.29 (Jan 30, 2011)

  • Previously several internal variables such as friendly name required the service to restart for the changes to take effect. This bug has been fixed.
  • Made several usability changes to the Schedule Distributor.

New in Corner Bowl Log Manager 11.0.0.28 (Jan 30, 2011)

  • Users can now create filters that only include or exclude specific days of the week.
  • Users can now filter entries from reports based on the day of week. To add day of week criteria, open the Report Properties Wizard. Click through to the Day and Time Exclusions page. Add as many exclusions as necessary.
  • Previously when monitoring a directory that contained date information (e.g. c:\logs\2011_01\) when the directory no longer matched the mask (e.g. when the next month starts) the previously monitored files were not read prior to shutting down the directory monitor. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.26 (Jan 30, 2011)

  • Users can now copy and append existing filter criteria to other pre-existing filters. To copy criteria from one filter to another, select Tools | Configure Filters. From the Filters Manager select the simple or complex Event Log filter, syslog filter, or text log filter and click Copy To. When prompted select the target filter. The currently selected filter's criteria will be appended to the target filter.

New in Corner Bowl Log Manager 11.0.0.25 (Jan 13, 2011)

  • Users can now assign multiple computers to a group from within the Configuration Explorer. To assign multiple computers to a group select the Configuration Explorer pane from within the Navigation view, choose Sort by Computer, select the computers to assign, right click and then select Assign Group.

New in Corner Bowl Log Manager 11.0.0.24 (Jan 8, 2011)

  • The Browse Active Directory dialog now enables users to recursively scan and apply an Active Directory filter to each discovered computer.
  • Previously the Auto Configurator did not properly assign computers to groups. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.23 (Jan 4, 2011)

  • Previously when attempting to run a report against a consolidated text log that resides within a date based directory the report would fail with an Illegal characters in path error. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.22 (Dec 28, 2010)

  • Uses can now configure the Auto Configurator to include a single filter to apply when scanning an Active Directory tree. When applied only computers that pass the filter are configured.
  • Previously the Logon report did not properly apply the day of week and time of day filter exclusion rules. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.21 (Dec 15, 2010)

  • Previously when re-configuring Event Logs, users were required to navigate through the entries wizard until they reached the page of interest. An Event Log Properties Tab form has been added to the software which now enables users to simply select the tab of interest rather than clicking through the wizard.
  • Previously when right clicking on a Log Repository node and selecting Properties, nothing happened. The user interface now loads a properties dialog which contains configuration information along with log counts.
  • Users can now test scheduled reports immediately by selecting an option within the General Page of the Report Wizard.
  • Previously the command timeout and connection timeout values found within the Data Providers tab within the Options dialog used Spin Controls. These controls are difficult to use and have been replaced by simple Text Box controls.
  • The Auxiliary (Backup) log repository tree node icons have been changed from bright blue to white and gray.
  • Previously scheduled reports that were configured to display the last x hours of data did not display the correct date range within the header. This bug has been fixed.
  • Previously Security Event Log reports dropped entries that existed in the last second of the date and time range. This bug has been fixed.
  • Previously the Security Event Log Properties Wizards did not check the file backup option when enabled. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.19 (Dec 7, 2010)

  • Previously the Group was not saved to the configuration templates. This bug has been fixed.
  • Users can now include a description when creating a template.
  • When assigning a template, the template details are now displayed enabling users to more easily identify the settings they are applying prior to committing the changes.

New in Corner Bowl Log Manager 11.0.0.18 (Nov 27, 2010)

  • Log Manager is now offered with a native 64-bit installer.
  • Previously SNMP traps did not fire on Server 2008 and Vista. This bug has been fixed.
  • Previously when exporting Security Event Log reports to a directory using the {DATE} tag, the export failed to create the path. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.16 (Nov 25, 2010)

  • Created 64-Bit Installer:
  • Log Manager is now offered with a native 64-bit installer.
  • Previously SNMP traps did not fire on Server 2008 and Vista. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.15 (Nov 23, 2010)

  • Fixed object reference error in Event Log Management Wizard
  • Previously if a user specified an illegal filename, such as \\servername\logs, when configuring EVT/X file backup an object reference error was thrown. This is now caught and a meaningful error thrown.

New in Corner Bowl Log Manager 11.0.0.14 (Nov 17, 2010)

  • Previously when right clicking on a Text Log Monitor and selecting properties, an error was throw stating an Oracle client library could not be loaded. This bug has been resolved.
  • Previously the desktop shortcut would reinstall itself during a patch even if the user had deleted the shortcut from the desktop. This bug has been fixed.

New in Corner Bowl Log Manager 11.0.0.13 (Nov 16, 2010)

  • Previously users were unable to target specific days of the week and times of the day when running Event Log Security reports. Per user requests, all Event Log Security reports can not exclude specific days of the week and/or times of the day. For example a success logon report can be generated for every Wednesday between at 10:00 PM and Thursday at 2:00 AM.
  • When importing Event Log backups (.evt and .evtx) files uses can now apply a filter to limit the entries imported. Once complete, the results are now displayed within the status dialog.
  • When managing a high number of machines, for example 1500 computers or devices, the user interface was very slow to load and update after a configuration change. The user interface has been optimized for high numbers of Event Logs and Syslogs. We are still looking into a solution for text logs.

New in Corner Bowl Log Manager 11.0.0.10 (Nov 15, 2010)

  • We added a popup help control to the text log and text log directory configuration wizards to provide users with inline help that will hopefully help users better understand how to configure the software to meet their requirements.

New in Corner Bowl Log Manager 11.0.0.9 (Nov 9, 2010)

  • Added an Error Report that shows all monitors that have errored.
  • Event Log Management error notifications have been updated to use an HTML templates for email alerts and now includes the ability to fire other action types.
  • The log management components have all been updated to include error alert functionality. For example, if the database is down while attempting to save a syslog entry, you can now receive an email notification.
  • The Syslog Servers (UDP and TCP) now save entries that are out of RFC3164 specification.
  • Previously when monitoring a UTF-8 or Unicode text log file, the first entry may not have been saved correctly. This bug has been fixed.
  • The default read method for Text Log Monitors has been changed from end of file (EOF) to beginning of file (BOF).
  • Several validation bugs were resolved within the configuration wizards.
  • Previously when deleting an action, referencing Text Log Directory Templates were not updated. This bug has been fixed.
  • Previously if using a database to consolidate log entries and the database was down, the dashboard views continued to display the running image. This bug has been fixed.
  • Several updates were made to the help file.

New in Corner Bowl Log Manager 11.0.0.7 (Nov 4, 2010)

  • Previously when adding a new text log monitor or directory monitor the Text Log Management Wizard automatically selected (All) if other logs or directories were already configured. This lead to users accidentally overwriting their previously created log monitor configurations. The wizard now automatically selects the newly added log. If multiple logs are added, (All) logs are still selected.

New in Corner Bowl Log Manager 11.0.0.6 (Nov 3, 2010)

  • Previously users were only able to create or append to a filter from a single selected entry. The log views now enable users to multi-select entries and apply them to a new filter or append them to an existing filter.
  • Previously when saving entries to SQL Server 2000 an overflow message was thrown when the sum of all the Event Log columns inserted exceeded 8060 bytes. When this error is thrown, the software now truncates the message content to 2048 bytes and attempts to save the entry again. If the entry still overflows the row, a message is written to the service log file and the download resumes.
  • Previously when monitoring a CSV file an error was thrown within the monitor when multiple filters were assigned to the same file. This bug has been fixed.
  • Previously when modifying a filter that is applied to a standard Event Log, syslog or text log report the filter's criteria was not properly pushed to the service or the user interface causing the reports to continue using the old filter. This bug has been fixed.
  • Previously when upgrading from version 2009, if the installation directory was changed the HTML templates were not updated. The software now sets each HTML template value to the default when ever the assigned value is invalid.

New in Corner Bowl Log Manager 11.0.0.1 (Nov 3, 2010)

  • This new release fixes several installation bugs that required a major update in order to resolve.
  • The Log Manager 2011 installation now requires .Net Framework 3.5 Service Pack 1.
  • Previously if the user deleted the desktop shortcut icon it would re-appear after a patch installation. This bug has been fixed.
  • Updated the MySQL and SQL Server configuration tutorials
  • Please continue to update your installation as we will be releasing many new updates that include usability enhancements and monitor upgrades.

New in Corner Bowl Log Manager 9.0.0.173 (Oct 22, 2010)

  • Previously when saving filtered Event Log entries to a user defined table within a MySQL database an error was thrown stating the syntax was incorrect. This bug has been fixed.
  • Previously when importing multiple Event Log backups data was duplicated. This bug has been fixed.
  • Previously when importing an Event Log backup into SQL Server and checking the option to delete previously saved entries, the index table was not properly updated causing the Log Repository view to remove the log from the tree even though the data was present. This bug has been fixed.

New in Corner Bowl Log Manager 9.0.0.171 (Oct 20, 2010)

  • Added Help | Renew menu item enabling users to easily determine or purchase the next appropriate maintenance contract.

New in Corner Bowl Log Manager 9.0.0.170 (Oct 7, 2010)

  • Log Manager now includes a function to import previously archived Event Log files. To import archived files select Tools | Event Log Backups | Import Backed up Event Log.
  • Users can now encrypt email packets using TLS.
  • Previously if a user attempted to manually add an malformed Event Log name via the Event Log Management wizard, the user interface could crash when attempting to download the Event Log. This bug has been fixed.
  • Previously the CDYNE SMS gateway action always resulted in an error even when the action was properly fired. This bug has been fixed.
  • Previously when displaying a standard event log report within the user interface, rather then when emailed, and the hide duplicate option was selected, the report displayed without hiding the duplicates. This bug has been fixed.

New in Corner Bowl Log Manager 9.0.0.167 (Sep 21, 2010)

  • In an effort to increase usability, the Event Log Monitor wizard pages have been moved to the end of the Event Log Management Wizard.
  • The consolidated log views now display the total number of entries and the filtered entry count within the status bar at the bottom of the view.

New in Corner Bowl Log Manager 9.0.0.166 (Sep 18, 2010)

  • We recently modified the Logon As dialog and accidentally pasted the text from Disk Monitor into the informational control. This bug has been fixed.

New in Corner Bowl Log Manager 9.0.0.165 (Sep 16, 2010)

  • The On-Demand Security Event Log Reports have been updated to use our latest multi-threaded background report generation forms enabling users to identify report generation issues as well as re-run reports with all the available options.

New in Corner Bowl Log Manager 9.0.0.164 (Sep 11, 2010)

  • Previously complex Event Log filters did not properly handle the "Event" criteria. The "Event" criteria only worked if set to an equals statement. For example Event=1000. = and != did not return the expected results. This bug has been fixed.
  • Recently we added support for CDYNE SMS gateway. While adding this function an obfuscation bug was introduced disabling users from adding new SMS actions. This bug has been fixed.
  • The log properties dialogs now display the consolidated log's file or table size depending on the type of log repository.
  • Previously the Top Events report used a pie chart to list the top events which depending on the data returned was difficult to read. A column chart is now displayed.
  • Several dialog resize bugs were resolved.
  • Reports can now be configured to only send email or output when the report contains results. In other words empty reports can be dropped.

New in Corner Bowl Log Manager 9.0.0.163 (Sep 9, 2010)

  • Previously complex Event Log filters did not properly handle the "Event" criteria. The "Event" criteria only worked if set to an equals statement. For example Event=1000. = and != did not return the expected results. This bug has been fixed.
  • Recently we added support for CDYNE SMS gateway. While adding this function an obfuscation bug was introduced disabling users from adding new SMS actions. This bug has been fixed.
  • The log properties dialogs now display the consolidated log's file or table size depending on the type of log repository.
  • Previously the Top Events report used a pie chart to list the top events which depending on the data returned was difficult to read. A column chart is now displayed.
  • Several dialog resize bugs were resolved.

New in Corner Bowl Log Manager 9.0.0.162 (Sep 6, 2010)

  • SQL Server and MySQL now enable users to consolidate entries from computers running non-ASCII languages such as German, Italian and Japanese.
  • The File System Log Repositories now use UTF-8 encoding by default enabling all languages to be saved. The Unicode option has been renamed to UTF-16 and should continue to be used when saving Japanese or Chinese logs.
  • Previously if consolidating to MySQL, the syslog date column index was not created. This bug has been fixed.
  • Previously when consolidating from a database to the file system, entries were stored in the files out of order. This bug has been fixed.
  • Previously if consolidating to SQL Server or MySQL and viewing Event Log entries that have identical date/time values, the entries were displayed in reverse order. This bug has been fixed.
  • Previously if consolidating to Oracle the software may have throw an error when saving text log and syslog entries. This bug has been fixed.
  • Previously the recordNumber column found within the Oracle Log Repository Event Log tables was too wide. The column has been narrowed to NUMBER(10). Users should either manually alter the column or delete the log from the repository and re-download.

New in Corner Bowl Log Manager 9.0.0.161 (Aug 30, 2010)

  • Added Oracle support;
  • Log Manage now includes support for Oracle database. To consolidate logs to an Oracle server, first download and install the latest version of the Oracle client libraries from Oracle's website. At this time they are named:
  • Oracle Database 11g Release 2 Client (11.2.0.1.0) for Microsoft Windows (32-bit)
  • Oracle Database 11g Release 2 Client (11.2.0.1.0) for Microsoft Windows (x64)
  • Once installed select Options from the Tools menu item. Select the Data Providers tab and create a new Oracle data provider. Lastly, set the type to Log Repository. If archiving data, you must point the archive to another database. The log repository and archive can not reside within the same database.
  • Please note you now have the option to store log content in single byte or Unicode format.

New in Corner Bowl Log Manager 9.0.0.160 (Aug 24, 2010)

  • Users can now generate Account Management reports on the fly or on a scheduled basis.
  • Users can now create account management filters enabling easier configuration for real-time monitoring of account updates. Account management filters support grouping entries by user or account enabling system administrators, for example, to receive notification when an account is changed more than 3 times in an hour.

New in Corner Bowl Log Manager 9.0.0.159 (Aug 13, 2010)

  • Previously the configuration wizards did not display hostname alias values when set. The list and combo-boxes now display as "[ALIAS] ([HOST])" when appropriate.
  • When emailing text formatted reports and alerts hostname alias values did not display in the content. This bug has been fixed.
  • The configuration and report error configuration pages have been updated to include a browse for email addresses button.
  • Fixed several tab order bugs within the configuration wizards.

New in Corner Bowl Log Manager 9.0.0.158 (Aug 10, 2010)

  • The last build introduced a serialization bug that caused issues when specifying logon as credentials.
  • Fixed a bug seen rarely on Windows XP workstations where a bogus empty domain appeared within the network object discover tree controls.
  • All the computer selection dialogs have been updated to be more user friendly.

New in Corner Bowl Log Manager 9.0.0.157 (Aug 5, 2010)

  • Users can now specify an alias via the Map Computer Dialog. When used, the hostname or IP address is replaced with the alias throughout most of the user interface. The log management configuration wizards and log detail views continue to use the actual hostname or IP address.
  • Previously the several of the tree views did not properly sort. The tree views are now sorted after refreshed.
  • Previously when consolidating to MySQL if the target event log name was greater than 55 characters consolidation would fail. This bug has been fixed.

New in Corner Bowl Log Manager 9.0.0.156 (Aug 4, 2010)

  • Previously throughout the user interface time values did not display correctly for locales, such as Sweden, that do not use AM/PM within time. These bugs have been fixed.

New in Corner Bowl Log Manager 9.0.0.155 (Jul 30, 2010)

  • Corner Bowl Log Manager now includes support for the Microsoft Application Logs found in Server 2008, Windows 7 and Windows Vista. To configure Microsoft's Application Logs, select File | Log Management Wizard | Event Logs. Click through to the Select Event Logs page. Form this page you have the option to select or manually add Microsoft Application Logs.
  • Previously the Archive Now button was anchored bottom right within the Options dialog causing the button to display in the incorrect location when the dialog was resized. This bug has been fixed.
  • Fixed an installation bug that enabled expired users to install the latest version only to be later prompted by the user interface that they must update their maintenance contract to run the latest version.

New in Corner Bowl Log Manager 9.0.0.153 (Jul 30, 2010)

  • When backing up Event Logs WMI returns prior to the file actually being written to the disk. The timeout was previously 3 seconds and has now been increased to 30 seconds.

New in Corner Bowl Log Manager 9.0.0.152 (Jul 30, 2010)

  • Error messages now include a stacktrace when the user interface is run from the command-line with the -d parameter.

New in Corner Bowl Log Manager 9.0.0.151 (Jul 1, 2010)

  • Previously when using the Select Specific Logs function users were required to specify a specific log. The dialog has been updated so the user can simply select Event Logs to select all event logs and Text Logs to select all text logs.
  • After adding the logical filename for text log directory monitors the Select Log dialog that is displayed when creating a report did not list the logical filename until after at least one entry was consolidated. The dialog now lists the logical filename regardless.
  • The Auto Configurator Wizard now includes a browse button to select known email accounts to send the results too.
  • Previously the Auto Configurator would add more computers than licensed. When this occured the user was unable to re-configure computers until after they manually removed the excess computers. The Auto Configurator no longer adds computers once the license limit is reached.
  • Previously if the clock on the localhost was advanced and then restored, when re-configuing schedules the next time may not have been updated correctly. This bug has been fixed.
  • Previously when adding a list of emails addresses to send an alert to on error or when the Auto Configurator was complete multiple email addresses were not properly validated. This bug has been fixed.

New in Corner Bowl Log Manager 9.0.0.150 (Jun 30, 2010)

  • Previously when creating a new Standard Event Log Report if the user disabled the schedule they were unable to set the filter. This bug has been fixed.
  • When consolidating text logs, each time a text log directory monitor discovered a new file the entry retention policy was immediately run against the newly created consolidated log. This bug has been fixed.
  • Previously when saving a Test Log Directory monitor template, the drop down combo-box was not populated. This bug has been fixed.
  • A serialization bug was introduced in the last build that caused the Text Log Directory monitor templates to corrupt. This bug has been fixed.
  • When the MAC address changes the software now offers the option to automatically return and re-register. Previously the user was required to contact Corner Bowl Software to have their license reset.

New in Corner Bowl Log Manager 9.0.0.148 (Jun 28, 2010)

  • Text Log Directory monitors now include a logical filename option enabling date based filenames to be saved to a single log within the repository. This functionality enables users to run automated reports against the date based filenames.

New in Corner Bowl Log Manager 9.0.0.147 (Jun 24, 2010)

  • Users can now save text log monitor configurations to template for later application.
  • Previously if monitoring numerous text log files and directories, the server is offline, and then the service is restarted, the service stop may timeout. This bug has been fixed.

New in Corner Bowl Log Manager 9.0.0.145 (Jun 19, 2010)

  • Previously Security Event Log Entries that were missing documented key
  • value pairs caused the report to prematurely return. This bug has been
  • fixed.

New in Corner Bowl Log Manager 9.0.0.144 (Jun 19, 2010)

  • Users can now receive text log monitor alerts that include a number of
  • previous and following entries. For example, you can include the previous
  • 3 entries every time an entry passes your filter for a total of 4 entries
  • that will be included in your alert. To set this value, open the Text Log
  • Management Wizard. Click through to the Optionally Assign Filters and
  • Actions page. Click the Add button. Specify the number of previous and
  • following entries to include.

New in Corner Bowl Log Manager 9.0.0.143 (Jun 17, 2010)

  • Previously when configuring the pattern recognition for a text log monitor, if the user configured the pattern recognition to ends with without first setting the delimiter value, the monitor did not properly recognize the entries. This bug has been fixed.
  • Previously if a user wanted to re-download all Event Log entries for a particular log the user was required to either disable the Log Retention Policy prior to downloading or increase the maximum number of days to retain from within the log retention policy page. If archiving entries, the maximum days to retain within the archive is now applied causing the re-download to use the greater of, the initial days to download or the maximum number of days to retain in the archive.
  • Previously when removing log configurations, the logs were not removed from referenced reports. All reports are now updated. For technical reasons there is one exception to this rule. When deleting a single Event Log configuration from within the Configuration Explorer the reports are not cleaned up. Please note only the primary log repository and archive log repository logs are removed from the report. If you have a report setup to access backup, alternate or WAN repositories the report remains untouched.
  • All the Syslog views have been updated to include a priority icon column.

New in Corner Bowl Log Manager 9.0.0.142 (Jun 7, 2010)

  • We have added 3 tutorials to our help file.

New in Corner Bowl Log Manager 9.0.0.141 (Jun 4, 2010)

  • Previously sorting by certain columns within the Security Event Log Reports may have caused a crash. This bug has been fixed.

New in Corner Bowl Log Manager 9.0.0.140 (Jun 2, 2010)

  • Previously our Security Event Log Reports and monitors were only able to parse English Security Entries. We have significantly changed our parsing algorithm enabling CBLM to parse non-English Security Events.
  • The About Box now includes the number of license computers being monitored and when not an Unlimited license, the remaining # of computers that can be monitored.
  • The Logon/Logoff reports now include an option to only show the last successful logon for each user and logon type.

New in Corner Bowl Log Manager 9.0.0.137 (May 25, 2010)

  • The real-time text log monitor HTML templates were updated to include the name of the applied filter.
  • When mapping computers using an IP address, users may have seen an error stating the host could not be resolved. This bug has been fixed.
  • Previously the Filter Manager rarely threw a dictionary error when adding a new criteria. This bug has been fixed.

New in Corner Bowl Log Manager 9.0.0.135 (May 20, 2010)

  • Previously if running a Real-Time Event Log Monitor the service could crash if configured to email on error, the remote server is off-line or denies access, and Log Manager is unable to send the email.
  • Previously the service had a very small window in which the program could hang. This could occur if the service was not run for a significant amount of time, there were 100s of configurations, and the service was restarted 2 times very quickly. This bug has been fixed.

New in Corner Bowl Log Manager 9.0.0.134 (May 19, 2010)

  • Per a customer request we have added an index for the date column reducing the load on the log repository database when retrieving entries.
  • Previously when consolidating to SQL Server or MySQL in very rare cases Event Log entries could have been duplicated in the log repository. This bug has been fixed.
  • Previously when viewing an Event Log's properties, if access was denied an error was thrown, however, the user was not provided the option to specify logon as credentials. The user is now prompted to supply logon as credentials.
  • Previously when changing the log repository type, for example from the file system to SQL Server, the dashboards did not update with the new information. The dashboards are now immediately updated.
  • Previously when deleting multiple logs from the repository or clearing multiple Event Logs the user was not prompted with a list of selected logs. The user is now prompted with the first 20 selected logs.
  • Previously when restoring a backed up configuration the Sort by Computer view within the Configuration Explorer did not remove computers that were not contained within the backup. This bug has been fixed.

New in Corner Bowl Log Manager 9.0.0.133 (May 18, 2010)

  • The Security Event Log Reports now include user include/exclude filters as well as an Active Directory lookup option.
  • Previously several of the Security Event Log reports failed to show the detail records if the summary report items were not checked. These bugs have been fixed.

New in Corner Bowl Log Manager 9.0.0.132 (May 15, 2010)

  • Previously the logon/logoff report may have thrown a key not present in
  • dictionary error causing the report to error out. This bug has been fixed.

New in Corner Bowl Log Manager 9.0.0.131 (May 12, 2010)

  • Previously when watching Event Logs or Syslogs in real-time within the user interface, when the user clicked the Clear button to reset the screen, the entries were removed from the view but remained in memory. When the user applied a filter or modified the current filter the once cleared entries would resurface in the updated view. This bug has been fixed.
  • Users can now return their own licenses enabling them to move installation locations without notifying our support team. To return your license, select Help | About | Return License.

New in Corner Bowl Log Manager 9.0.0.130 (May 5, 2010)

  • Users can now generate logon/logoff reports. From the Log Repository view, check the Security Event Logs to run the report against, right click and select Reports | Logon/Logoff.
  • Previously the text log monitor did not properly re-initialize after an exclusion period when polled every x minutes or longer. This bug has been fixed.
  • Previously the report wizards for frequency reports (counts of entry types) did not save the date range when the only change made was to the date range field. This bug has been fixed.
  • Previously manually run log entry frequency reports displayed the count in a column which could not be resized. If more than 99 entries were present users would typically see "...". This bug has been fixed.

New in Corner Bowl Log Manager 9.0.0.126 (May 5, 2010)

  • All scheduled functions now include an enhanced exclusion period algorithm. For example, users can now configure a monitor to shutdown Sunday from 8:00 - 12:00.

New in Corner Bowl Log Manager 9.0.0.125 (Apr 20, 2010)

  • Users can now assign Event Logs and Syslogs to existing reports from within the Log Management Wizard. Report assignment is now always included when saved to a template. Lastly, the Auto Configurator will now use the report assignment found within the templates to automatically add computers and logs to existing reports.
  • Previously consolidated Security Event Log views did not update when a user changed an already applied Success or Failed Logon filter via the Filters Manager. These bugs have been fixed.
  • Users are now asked if they would like to re-scan the current consolidated view when clearing an applied filter while on a page other than the first.

New in Corner Bowl Log Manager 9.0.0.124 (Apr 20, 2010)

  • Users can now assign Event Logs and Syslogs to existing reports from within the Log Management Wizard. Report assignment is now always included when saved to a template. Lastly, the Auto Configurator will now use the report assignment found within the templates to automatically add computers and logs to existing reports.

New in Corner Bowl Log Manager 9.0.0.122 (Apr 19, 2010)

  • Users can now select the initial date they would like to see prior to viewing consolidating logs. This option significantly reduces the time it takes to review entries that fall on a page other than the default.
  • Previously when scrolling a list of entries using either the down or up arrow buttons the dependent views were not redraw until after the key was released. The view has been modified to refresh the message text, hex view, and notes views (where applicable) after each focus changed event.

New in Corner Bowl Log Manager 9.0.0.121 (Apr 16, 2010)

  • Users can now configure a backup email server. If the primary is down or is unable to send your message, the software will
  • All text based actions including but not limited to text emails, message boxes, and SMS messages can now parse and display
  • The Event Log Entry action has been updated to enable the action to dynamically insert the host name the entry was generated
  • The LATEST_ENTRY and OLDEST_ENTRY tags displayed the wrong entries when used for text email based reports.
  • We added a new tutorial that shows users how to configure Gmail as a backup email server.
  • The Event Log Management tutorial has been updated to include information and screen shots for poll monitoring and EVT and
  • The documentation for replacement tags has been updated.

New in Corner Bowl Log Manager 9.0.0.120 (Apr 10, 2010)

  • In many cases the Event Log backup function would fail with an error stating the file could not be moved. The error occurred because WMI returns prior to the file being written to the disk. The function now waits up to 3 seconds for the existence of the file. In all our tests this resolved the issue.
  • Users are now promoted to select display filters when viewing an Event Log or syslog in real-time.
  • Previously check boxes with an intermediate state were unchecked when clicked. This behavior caused any dependent settings to be lost. The behavior has been changed so the state changes to checked which in turn preserves dependent settings.
  • Previously after selecting another computer or all computers from the Logon As page within the Event Log Management Properties Wizard all modified values for the previously selected computer were lost. This bug has been fixed.
  • The 'Event' column values for all Event Log views are now right aligned.
  • The Event Log Entry Properties dialog can now be resized and the assigned font is applied message text box.

New in Corner Bowl Log Manager 9.0.0.119 (Apr 1, 2010)

  • Fixed Event Log poll monitor bug:
  • Installations prior to build 9.0.0.96 would have been unable to schedule the poll monitor due to a file versioning bug. This bug has been fixed.

New in Corner Bowl Log Manager 9.0.0.118 (Mar 31, 2010)

  • Previously when monitoring an event log in real-time, the success logon filter ignored the LogonType flag. This bug has been fixed.
  • Previously when using the Auto Configurator computers added to Active Directory in lower case were re-added during every scan. This bug has been fixed.

New in Corner Bowl Log Manager 9.0.0.117 (Mar 27, 2010)

  • Previously the list control we use through out the application had a bug that caused the items to re-sort when the user changed the size of the columns. This was very annoying even with small amounts of data. This bug along with several other minor bugs with the control have been resolved.
  • Since the inclusion of the TCP syslog server the log nodes did not show the correct status when the TCP server was disabled. This bug has been fixed.
  • Fixed another bug within the real-time Success Logon filter.

New in Corner Bowl Log Manager 9.0.0.115 (Mar 26, 2010)

  • Fixed several UI annoyances:
  • Previously the list control we use through out the application had bug that caused the items to re-sort when the user changed the size of the columns. This was very annoying even with small amounts of data. This bug along with several other minor bugs with the control have been resolved.

New in Corner Bowl Log Manager 9.0.0.114 (Mar 25, 2010)

  • Fixed Success/Failed Logon filter bug:
  • Previously the Success and Failed Logon filters did not work within the consolidated or real-time viewers unless one of the sub-fields (user, client workstations, reason, or logon type) was selected. This bug has been fixed. Users can now right click on an event or syslog message within the real-time and apply the entry to a filter.

New in Corner Bowl Log Manager 9.0.0.113 (Mar 22, 2010)

  • Previously when re-configuring different monitoring schedules for multiple logs an object reference error may have been thrown when dismissing the Assign Schedule without selecting a new schedule.
  • Since the TCP syslog server was added, syslog nodes displayed the incorrect status within the configuration explorer when the TCP syslog server was disabled.

New in Corner Bowl Log Manager 9.0.0.112 (Mar 11, 2010)

  • Previously Event Logs that contained a reserved character (/, :, “, , |) were unable to be backed up. The special characters are now replaced with an underscore (_).
  • Made several minor updates to the help file.

New in Corner Bowl Log Manager 9.0.0.111 (Mar 9, 2010)

  • Fixed a significant bug in the TLM importer.

New in Corner Bowl Log Manager 9.0.0.110 (Mar 4, 2010)

  • Text Log Monitor users can now import their text log monitors into Corner Bowl Log Manager.

New in Corner Bowl Log Manager 9.0.0.109 (Mar 3, 2010)

  • This build includes a new filter type called Event Log (Success Logon). Use this filter to limit entries within the viewer or generic reports to success logon events. Users can also filter on user, client workstation, and logon type message parameters. For example, use this filter to get a list of all interactive logons.
  • Per several user requests we have added a TCP syslog server. To enable the TCP syslog server, select Options from the Tools menu item. Select the Syslog tab. Enable the TCP syslog server and set the port.
  • Previously the failed logon report incorrectly included some success audit events. This bug has been fixed.
  • Previously when re-configuring multiple computers, the logon as domain field did not populate correctly when the configured domain was different than the default domain. This bug has been fixed.
  • The SQL Server database connection string now includes the application name enabling easy identification when running a trace against the database.
  • Previously the real-time syslog viewer enabled users to de-select all priorities toolbar toggle buttons. The viewer now throws an error message when the last priority is de-selected and then re-selects the priority.

New in Corner Bowl Log Manager 9.0.0.108 (Feb 10, 2010)

  • Fixed minor memory leak:
  • In previous builds there was a small memory leak that occurred every time a user logged off or the tray icon was closed. This bug has been fixed.
  • Updated the information message that is shown when a user chooses to schedule the stand-alone Event Log Monitor.
  • Several icons were updated.
  • Typically applications open and lock log files until the application is terminated. In response we have changed the default text log monitor read schedule from real-time to scheduled.
  • Made several wording and control position changes within the Text Log and Text Log Directories Properties Wizard pages.

New in Corner Bowl Log Manager 9.0.0.107 (Feb 9, 2010)

  • In previous builds there was a small memory leak that occurred every time a user logged off or the tray icon was closed. This bug has been fixed.
  • Updated the information message that is shown when a user chooses to schedule the stand-alone Event Log Monitor.
  • Several icons were updated.

New in Corner Bowl Log Manager 9.0.0.106 (Feb 2, 2010)

  • The start process action now includes support to remotely execute a process.
  • Previously the flag filter criteria value was obfuscated (e.g. a, b, c). This bug has been fixed.

New in Corner Bowl Log Manager 9.0.0.104 (Jan 15, 2010)

  • Users can now target the account they want to run processes under.
  • We made several minor UI changes to several action configuration dialogs. The most significant change was the addition of a Test button on the Event Log action configuration dialog.

New in Corner Bowl Log Manager 9.0.0.103 (Jan 14, 2010)

  • When adding our new Event Log Poll Monitor we incorrectly serialized in the event log monitor templates causing the template to fail on load. This bug has been fixed.

New in Corner Bowl Log Manager 9.0.0.102 (Jan 13, 2010)

  • In previous builds the Success Logon report only worked when consolidating Event Logs to our file system. There was a bug in both the SQL Server and MySQL commands preventing entries from being returned. This bug has been fixed.
  • Users can now rename reports directly from within the Reports and Views view.
  • When using the Actions Manager, when a user selected an existing action, attempted to change the type to Start Process, left the arguments field blank, then saved the changes, a null reference error was thrown. This bug has been fixed.

New in Corner Bowl Log Manager 9.0.0.101 (Jan 9, 2010)

  • Fixed a minor validation bug within the EVT/X backup page of the Event Log Management Wizard.
  • In previous builds when creating a text log report the Select Consolidated Log dialog in some cases displayed each log file twice. This bug has been fixed.
  • When opening a text log the Select Filter dialog did not show the available text log filters. This bug has been fixed.
  • Previously when the user changed the name of a filter, each displayed log view that was using the filter would automatically de-select the filter and show all entries. This bug has been fixed.
  • Added diagnostic message to text log monitor.

New in Corner Bowl Log Manager 9.0.0.99 (Jan 8, 2010)

  • Previously when monitoring rolling text log files that contained the current date within the filename some entries may have been dropped during the rolling transition. This bug has been resolved.
  • The Start Process action now logs a message just prior to execution showing the command and arguments being executed.
  • Previously in very rare cases the user interface would throw a fatal error after closed. This bug has been fixed.

New in Corner Bowl Log Manager 9.0.0.97 (Jan 4, 2010)

  • Previously the Successful Logon Report obfuscated the LogonType values. This bug has been fixed.
  • When exporting a consolidated Event Log from within the Active Directory Event Log Explorer view an object reference error was thrown after the logs were successfully exported. This bug has been fixed.

New in Corner Bowl Log Manager 9.0.0.96 (Jan 1, 2010)

  • Users can now schedule to receive notification of critical Event Log entries without saving the entries to the log repository. Use the Event Log Monitor page within the Event Log Management Properties Wizard to schedule Event Logs for scheduled monitoring. Please note the scheduled monitor is only intended to be used when not saving entries to the log repository. If saving entries to the log repository use Post Consolidation Filters and Actions instead.
  • Previously our SMTP client code threw an object reference exception if the target SMTP server did not respond to the connection attempt. This typically manifested itself when the SMTP server does not allow connections or relay from the server CBLM is installed. This bug has been fixed.
  • In one case we saw our SMTP server receive an ‘Invalid domain name’ error which was caused when the Log Manager Windows Service was running under the SYSTEM account. In this case a malformed EHLO command was sent causing the error. This bug has been fixed.
  • Users can now open zipped EVT/X files directly from the user interface.
  • Saved Syslog entries can now be automatically backed up, compressed and encrypted.
  • While doing some MySQL testing we noticed MySQL does not properly interface with the Windows Event Log system. Because of this bug MySQL Administrator messages did not appear when EVT export support was disabled. Upon further review we learned Windows was not returning then generic message that embeds the insertion strings as it typically does when an application fails to interface with the Event Log system properly. In this scenario the insertion strings are saved to the to the log repository enabling the viewer to display the insertion strings.
  • A few builds ago while fixing a few sizing issues with our base wizard control we accidentally introduced a bug to the Auto Configuration. The Add and Remove buttons did not display. This bug has been fixed.
  • Previously when forwarding messages to another syslog server, if the remote server name could not be resolved an object reference error was logged to the service log file. The message now correctly logs the name resolution issue.
  • Previously when forwarding messages to another syslog server, user added replacement tags were ignored. This bug has been fixed.
  • Previously when importing a NEV log repository that only contained archived entries an error was thrown stating there were no logs to import. This bug has been fixed.

New in Corner Bowl Log Manager 9.0.0.91 (Dec 3, 2009)

  • Users can now override the WMI block size option used when downloading Event Log entries. Increasing or decreasing the value may increase or decrease download speed at the cost of remote CPU load.
  • The Syslog Entry Properties dialog now applies the same font to the message text box as defined within the Options dialog. The dialog can also be resized.
  • Several minor drawing issues were resolved within our list view control.

New in Corner Bowl Log Manager 9.0.0.90 (Dec 2, 2009)

  • Users can now override the WMI block size option used when downloading Event Log entries. Increasing or decreasing the value may increase or decrease download speed at the cost of remote CPU load.
  • The Syslog Entry Properties dialog now applies the same font to the message text box as defined within the Options dialog. The dialog can also be resized.
  • Several minor drawing issues were resolved within our list view control.

New in Corner Bowl Log Manager 9.0.0.89 (Nov 30, 2009)

  • In previous builds the newly added Server 2008 account logon event IDs handled within the Security Event Log Reports were not handled when an Event Log (Failed Logon) filter was applied to a real-time or scheduled monitor. This bug has been fixed.
  • Several updates were made to the tree view node check and selection algorithm that will hopefully benefit users.

New in Corner Bowl Log Manager 9.0.0.88 (Nov 30, 2009)

  • Made several minor drawing enhancements to the List Control.
  • Added several debug messages to startup code.

New in Corner Bowl Log Manager 9.0.0.87 (Nov 20, 2009)

  • Users can now generate successful login reports. Use the Report Wizard and select Event Logs (Success Logon). You have the option to display several different summary and detail reports.
  • Previously when importing NEV configurations, mapped computers that did not have login credentials assigned caused the import function to fail with an object reference error. This bug has been fixed.

New in Corner Bowl Log Manager 9.0.0.86 (Nov 15, 2009)

  • When displaying consolidated Event Logs, EVT files or EVTX files users can now hide duplicate entries. Duplicate entries are defined as entries with the same source and event ID regardless of message content. To hide duplicates, toggle the 2 arrow to 1 arrow toolbar button. The viewer adds a column which lists the count of entries with the same source and event ID.
  • When running a standard Event Log report users can now choose to hide duplicate entries. Duplicate entries are defined as entries with the same source and event ID regardless of message content. To hide duplicates check the option from within the wizard. If sending an email, the count of entries with the same source and event ID is listed in the first column.

New in Corner Bowl Log Manager 9.0.0.85 (Nov 11, 2009)

  • The host name fields within actions can now be replaced by IPv4 or IPv6 values. To include the IP address instead of the hostname replace the {HOST} tag with {IPv4} or {IPv6}.
  • Added several data management configuration helper routines to the Log Management Wizard to aid users.
  • Fixed several validation errors within the Report Wizards.
  • Removed a startup error message that displayed when running 2 instances of the user interface from the different RDP sessions on behalf of the same user account.

New in Corner Bowl Log Manager 9.0.0.84 (Nov 9, 2009)

  • In previous builds entries could be lost while archiving the consolidated logs. The bug occurred because of a race condition that existed when replacing a log repository file with an updated file. We have resolved these issues.
  • The Message Box alert has been updated to include a Clear button within the message box dialog. When clicked, all the messages within the history are removed and the current message cleared.
  • When viewing the Event Log Properties dialog the title now includes the data provider when not primary log repository. For example, if you right click on an archived log within the Log Repository view the property dialog includes the name given to the archive data provider.
  • Previously when restarting the service, the Event Log backup configurations were incorrectly re-scheduled to the next download schedule rather than the next backup schedule. This bug has been fixed.
  • Previously the service shutdown was very slow due to a delay in Microsoft’s IPC close code. We now call the close method asynchronously which significantly decreases the shutdown time.
  • Previously the application failed to remove all temporary files from the temporary file directory. This bug has been fixed.

New in Corner Bowl Log Manager 9.0.0.82 (Nov 5, 2009)

  • Fixed several Linq issues throughout the application that caused sequence errors to be thrown.
  • When opening EVTX files a Sequence contains no elements error may have been thrown when parsing the XML. This bug has been fixed.
  • A sequence contains more than one element error may have been thrown if the groups.dat file erroneously had a host pointing at 2 different groups. This bug has been fixed.
  • After startup the licensing code may have caused a crash when the About box or another function that must wait for the licensing to complete was run. This bug has been fixed.
  • When viewing a Failed Logon Report the logon type values were obfuscated meaning the values displayed as letters a-i instead of the actual values. This bug has been fixed.
  • When we added the SNMP support the setup was incorrectly modified setting some registry keys that caused the all of the initial startup wizards to fail to open. This also caused the auto update from Network Event Viewer to be ignored.
  • The Event Log, Syslog and Text Log Management Wizards now include a verification page that enables users to copy the configuration and save it to a text file for easy reading.

New in Corner Bowl Log Manager 9.0.0.79 (Nov 4, 2009)

  • Previously users had to add each directory entry they wanted to scan for new computers. We have added an option which is set by default, unless previously configured, that enables the scan to recursively drill into each sub-directory entry. Use the Auto Configuration to set this option.
  • Previously when manually downloading Event Logs the download function would fire off a new thread for every selected log. If 100s of logs were selected this could cause the system to run out of system resources. By default no more than 20 threads are now used. You can increase or decrease the number of threads via the WMI tab within the Options dialog.
  • A Print Selected Entries menu item was added to the popup menu bar for all the log views except the real-time Syslog and real-time Event Log views.
  • In previous builds when attempting to select specific computers such as domain controllers or servers from within the Browse Active Directory Computers dialog the computer type was not queried causing the search criteria to fail. This bug has been fixed.
  • Users can now overwrite the default Active Directory configuration enabling them to display a deep organization unit in place of the root.
  • The Event Log Explorer had a major bug that caused the discovery to simply get a list of the local Event Logs.
  • Added refresh buttons to the overview dashboard.
  • The EVT and EVTX file readers have been optimized to cache user and message file information where applicable decreasing the overall load time.

New in Corner Bowl Log Manager 9.0.0.78 (Nov 3, 2009)

  • When fixing the startup delay present in build 69 and earlier we introduced a bug that occurred during startup when the computer was offline. At startup an error was thrown and the application exited. We have resolved this bug.

New in Corner Bowl Log Manager 9.0.0.75 (Oct 29, 2009)

  • A few builds ago we changed the Syslog priority Emerg value to Emergency. This caused the database initialization to fail because the maximum width was 8 characters. We have increased this value to 16 characters.

New in Corner Bowl Log Manager 9.0.0.73 (Oct 28, 2009)

  • Corner Bowl Log Manager can now read EVTX files.
  • The previous Dashboard was simplified. To account for the simplification an Event Log and Syslog Dashboard have been included. To automatically display the Event Log and Syslog Dashboards check the options via the User Preferences page within the Options dialog.
  • Help was added to the Select Computers page within the Report Wizards where appropriate.
  • Previously when viewing an EVT file, the export function did not output the computer name, log name or the date range. This bug has been fixed.
  • The Network Explorer and Configuration Explorer were consolidated into a single view now selectable through a drop-down combo-box.