Open Collector 2025.07 Release Notes
July 2025 Release Details
The 2025.07 release of Open Collector requires Knowledge Base version 7.1.719.0 (or above).
Software Component | Version Number | New Version? |
|---|---|---|
Open Collector | 5.6.20 | |
LRCTL Script | 6.0.1 | |
LRCTL Container | 6.6.0 | Yes |
LRJQ | 5.1.4 | |
Metrics | 6.0.7 | |
OC Pipeline | 5.1.7 | |
OC-Admin | 6.0.15 | |
OC-DB | 6.0.2 | |
AWS S3 Beat | 6.2.2 | |
Azure Event Hubs Beat | 6.0.10 | |
Carbon Black Cloud Beat | 6.0.8 | |
Cisco AMP Beat | 6.1.6 | |
Darktrace Beat | 6.0.0 | |
Duo Authentication Security Beat | 6.0.5 | |
Exabeam Case Beat | 6.0.0 | |
Generic Beat | 6.2.0 | |
Gmail Message Tracking Beat | 6.0.5 | |
GSuite Beat | 6.0.5 | |
Kafka Beat | 6.0.7 | |
Microsoft Graph API Beat | 6.0.9 | |
Mimecast SIEM Beat | 6.0.0 | Yes |
Okta Beat | 6.0.5 | |
Prisma Cloud Beat | 6.0.2 | |
Proofpoint Beat | 6.0.3 | |
PubSub Beat | 6.0.3 | |
Qualys FIM Beat | 6.0.5 | |
Salesforce Beat | 6.0.2 | |
SentinelOne Beat | 6.0.1 | |
Sophos Central Beat | 7.0.0 | Yes |
Symantec WSS Beat | 6.0.3 | |
Webhook Beat | 6.1.7 |
New Features/Beats
Feature or Beat | Description | Relevant Documentation Updates |
|---|---|---|
Mimecast SIEM Beat | A new beat has been added for the Mimecast Beat, allowing continued collection of logs after Mimecast’s update to API 2.0. |
Improvements
Feature or Beat | Description | Relevant Documentation Updates |
|---|---|---|
Sophos Central Beat | Because Sophos retired the token authentication method, Sophos Central Beat implementation was updated to require API authentication (Client ID and Client Secret). | |
Google Workspace Beat (formerly GSuite) | To reflect changes to the Google naming convention, the GSuite Beat and all related documentation has been updated to Google Workspace Beat. Due to other changes to the Google Workspace collection method, some customers may no longer be able to collect certain logs with this beat. As outlined in the Troubleshoot the Google Workspace Beat topic, these customers should use the PubSub Beat to collect these logs. |
Resolved Issues
Bug ID | Release Notes |
|---|---|
ENG-62671 | Updated GMail Message Tracking beat documentation to reflect changes in the required steps for beat setup on Google’s side. |
ENG-73003 | Updated Duo Authentication Security Beat documentation to reflect the fact that Duo Federal users cannot collect Telephony logs. |
ENG-63513 | As discussed in the Improvements section, the Sophos Central Beat documentation has been updated to reflect changes in the authentication process on Sophos' side. |
Security-Related Issues
Resolved security-related issues are available for customers to review on the Community.