Skip to Content
Release Notes2026January

Release notes for January 2026

Grepr released these feature updates, improvements, and bug fixes in January 2026.

New features and improvements

Parse key-value pairs in Grok patterns with configurable separators

January 9, 2026

The Grok parser now supports extracting key-value pairs from log messages and converting them into structured attributes. You can configure separators between keys and values, delimiter characters between pairs, quote characters, and allowlists for special characters in values. This feature also handles edge cases like empty values, duplicate keys, and nested quotes.

See The Grok key-value transformer.

Reduce data scan sizes by directly querying raw logs

January 9, 2026

Log searches now support querying raw log tables directly from the data lake without joining with the pattern lookup table. This new query mode provides faster query execution when pattern information is not needed. You can use this option in the Data Explorer UI or the Grepr REST API.

January 9, 2026

This release adds link sharing, previously supported only by the Data Explorer, to more of the Grepr UI. You can share direct links to pipelines, templates, datasets, integrations, and teams, making it easier to collaborate and reference specific configurations or results.

Add tags to log events by defining column names in SQL statements

January 9, 2026

The SQL transform now provides a special column-naming syntax to add tags to output log events directly from your SQL queries. By defining columns with the tags. prefix, such as tags.service or tags.environment, the SQL transform automatically adds the column name as a tag along with the assigned values. You can assign scalar values, use SQL expressions, or add multiple tag values using SQL arrays.

See Add tags to a LOG_EVENT using a special column syntax.

Collect values into an array using a specified sort order in SQL statements

January 9, 2026

The SQL transform now supports the ORDERED_ARRAY_AGG() function, which allows you to collect values into an array sorted by one or more specified keys. This function is useful for tasks that require reconstructing a sequence of events, such as log messages ordered by time.

See the ORDERED_ARRAY_AGG function in Collection functions.

Additional severity level aliases for improved log parsing

January 9, 2026

This release includes more labels when parsing severity levels from log events. INFO now includes success and pending, and ERROR includes failure, failed, and failing. This improves severity classification for logs from different systems.

Bug fixes

Fix for Splunk HEC events getting dropped

January 9, 2026

This release fixes an issue that caused events to be dropped from Splunk logs when forwarded with HEC.

Fix for Datadog tag merging during log ingestion

January 9, 2026

This release fixes an issue where the host, source, and service tags extracted from a Datadog log event were overridden by host, source, and service values added as ddtags. This update merges and retains all values associated with these tags to ensure all data is captured and available for forwarding to destination systems.

Fix for empty tags in Datadog log ingestion

January 9, 2026

This release fixes an issue where consecutive commas or blank segments in Datadog tag strings caused parsing errors during log ingestion. The Datadog integration now skips empty tag entries, ensuring logs with malformed tag formatting are processed reliably.

Improved Datadog dashboard widget exception handling

January 9, 2026

This release fixes an issue that caused the dropping of some exceptions that were imported from Datadog dashboards.

Fix for missing column values causing Data Explorer UI issues

January 9, 2026

This release fixes an issue that made the Data Explorer UI unusable when records have empty identifier columns.

Fix for pattern ID filtering in Data Explorer

January 9, 2026

This release fixes an issue where filtering logs by pattern ID was not working correctly in the Data Explorer. Pattern ID filters from URL parameters are now applied correctly to search results, and the pattern ID column shows automatically when filtering by pattern ID.

Fix for table header overlap when scrolling

January 9, 2026

This release fixes an issue in the Data Explorer UI that caused table headers to overlap with table content when scrolling.

Last updated on