UTMStack v11.2.8 Release Notes

This release brings expanded log source compatibility, better visibility into alert activity, and a range of fixes across integration guides, alerts, and data exports.

## What's New

• Added support for the CEF log format in the Fortinet/FortiGate integration, making it easier to ingest logs from more FortiGate configurations.
• Alerts now display a "last echo" timestamp, so you can see at a glance the most recent activity related to each alert.

## Improved

• Refreshed the ESET integration guide with updated screenshots.
• Updated the JSON input integration guide with clearer instructions.
• Adjusted the Log Explorer layout so the selected fields sidebar and available filters menu share space more evenly.
• CSV exports now include composed columns (such as Adversary) for more complete reports.
• Stronger, automatically generated password for OpenSearch during installation.

## Fixed

• Email configuration test now correctly sends the parameters you entered when running a check.
• Authentication errors now return the correct status, improving login reliability.
• The "echoes" column in the alerts view is now read-only and no longer triggers unintended sorting.
• Tagging rule conditions are now validated correctly when creating or editing rules.
• Linux agent no longer reports an error when the audit subsystem is unavailable — it is now correctly skipped.
• Removed the noisy "Office 365 Impossible Travel Login Detection" rule that was generating low-value alerts.