A recent announcement states, “Humio is excited to announce the general availability of several new features in the Humio platform, for on-premise and Humio Cloud users. Some of our most-requested features have been newly-added: Joins, Query Quotas, and an update to our visualization engine… With the new join() filter, Humio makes it easy to update a dashboard or perform a single search with combined data from one or more repositories… Inner joins return the intersection of matching values between the primary query and the subquery. For example, for the two data sets above, it would returns a list of IP addresses that accessed the system that were also assigned to employees, along with the employee name. Left joins return everything in the primary result, along with everything that matches the subquery. In this example, it would lists every IP address that accessed the system during a certain period (whether an employee matched the IP address or not) — plus the employee name listed for those that with a matching IP address.”

The release goes on, “Query quotas can limit the amount of CPU, memory, and I/O resources available to any one user when searching. Usage is tracked continuously as queries are executed. Whenever a user exceeds their quota, the query is stopped and the user is notified. As long as the quota is exceeded, any new queries arewill be rejected as soon as they are initiated until they get an override… Quotas can be specified in a number of different time intervals in order to allow the Cluster Administrator to protect against both short-term accidental heavy queries and longer-term general heavy queries. Default query quotas apply to all users of the Humio cluster. Individual users can be assigned unique quotas, or have default quotas overridden.”

Read more at humio.com.

Image used under license from Shutterstock.com