Release 4.0.1
June 5, 2024
Support for Monitoring Symlinks
With this release, FIM now supports Symlink or symbolic links within the specified directories on Linux assets.
Symlinks provide flexibility and convenience by serving as a pointer or reference to another file or directory. They provide easy access, simplified data management, and reduced redundancy.
Prerequisites
Cloud Agent for Linux 6.3 is required
To enable monitoring Symlinks, select Symlink as the Rule Type for the Symlink directory path and events to be monitored in the FIM monitoring profile for Linux operating system.
CIPS Support for FIM Data
File Integrity Monitoring (FIM) now supports the Cloud Integration Platform Service (CIPS). CIPS retrieves data from FIM and pushes it to multiple cloud interfaces.
In FIM, CIPS retrieves data only for Events.
Increased Event Count in an Incident
With this release, we have increased the number of manual incidents and bulk ignoring of the events to 500 thousand. Earlier, the limit was 100 thousand.
New Value for Profile Rule Type Token
With this release, we added a new value symlink to the token profile rule type to search Symlink events. You can find this token value in the Events tab.
Example: profile.rule.type: symlink
API Changes
We have added validation and removed support for a few fields for the existing FIM APIs.
To learn more about the API enhancements, refer to API Release Notes.
Enhancements
We have enhanced the FIM Online help explaining when you can update the incident filter. For details, refer to FIM Online help.