SmartConnector 8.3 Patch 2

This patch release contains cumulative updates from SmartConnector 8.3 Patch 1.

Support for New Devices and Version Updates

SmartConnector for	Description
All SmartConnectors and Load Balancer	Upgraded Tomcat version to 9.0.62. Upgraded Zulu OpenJDK to 8u332. Upgraded Apache Log4j library version to 2.17.1.

SmartConnector Enhancements

SmartConnector for	Description
Microsoft Azure Monitor Event Hub	The Microsoft product name Azure Security Center has now been rebranded as Microsoft Defender for Cloud. For more information, see Configuration Guide for Microsoft Azure Monitor Event Hub.
Microsoft Azure Monitor Event Hub	All Microsoft support and development for the Azure Active Directory Authentication Library (ADAL), including security fixes, ends in December, 2022. The authorization functionality has now been migrated to Microsoft Authentication Library (MSAL) for token retrieval and authentication in the Azure Monitor Function application.
Microsoft Azure Monitor Event Hub	The upgrade scenario has been enhanced by modifying the PowerShell script. For more information, see Step 7 of the Upgrading the Connector section in Configuration Guide for Microsoft Azure Monitor Event Hub.
Microsoft Azure Monitor Event Hub	The PowerShell script has been enhanced to verify that the key properties exist and contain appropriate values.

Software Fixes

SmartConnector for	Description
Microsoft Azure Monitor Event Hub	The Azure Monitor Function application was unable to start or stop the Cloud Function application. Fix: The Azure Monitor Function application requires the Contributor role on the resource group to start or stop the Cloud Function application. To assign the Contributor role, ensure that the user deploying the cloud Connector has the Owner role on the resource group. For more information, see the Setting User Permissions in Azure section in Configuration Guide for Microsoft Azure Monitor Event Hub.
Syslog NG Daemon	When the Linux Auditd event merging is enabled and the Generate Unparsed Events parameter is set to Yes, the Linux Auditd events were sent as unparsed events along with the parsed merged events. Fix: This issue has been fixed. The unparsed events are no longer sent with the parsed merged events.

SmartConnector for

Description

Microsoft Azure Monitor Event Hub

The Azure Monitor Function application was unable to start or stop the Cloud Function application.

Fix: The Azure Monitor Function application requires the Contributor role on the resource group to start or stop the Cloud Function application. To assign the Contributor role, ensure that the user deploying the cloud Connector has the Owner role on the resource group.

For more information, see the Setting User Permissions in Azure section in Configuration Guide for Microsoft Azure Monitor Event Hub.

Syslog NG Daemon

When the Linux Auditd event merging is enabled and the Generate Unparsed Events parameter is set to Yes, the Linux Auditd events were sent as unparsed events along with the parsed merged events.

Fix: This issue has been fixed. The unparsed events are no longer sent with the parsed merged events.