Edit

Azure Monitor pipeline extension versions

This article describes the version details for the Azure Monitor pipeline Arc-enabled Kubernetes extension. This extension deploys the pipeline on Arc-enabled Kubernetes clusters in your on-premises, edge, hybrid, or multicloud environments.

  • The team releases pipeline versions once each month. If there are any critical bug fixes or security patches, the team might release additional hotfix versions.
  • The latest version rolls out over a fortnight, and you might see it in some regions before others.
  • You can manually install the release once it's available in your region.

Version details

Version v1.1.1 - April 2026 (General Availability)

  • Added richer pipeline metrics (uptime, throughput, queue depth, processing duration) to help you monitor pipeline health and performance more effectively.
  • Pipeline self-monitoring (telemetry and diagnostics) is now enabled by default for metrics and logs (if diagnostic settings are enabled).
  • Added ARM64 (aarch64) support, enabling deployment on a wider range of infrastructure environments.
  • Optimized processing for common formats like Syslog and CommonSecurityLog for receiver and exporter.
  • Enhanced buffering and processing logic to reduce risk of data inconsistencies under load.
  • Updated dependencies and base images to address known vulnerabilities and maintain compliance.
  • Standardized log attributes such as message, category, and timestamps for better downstream querying and analysis.

Version v0.158.0 - Mar 2026 (Preview)

  • Added change to install and enable the microsoft.extensiondiagnostics extension for collection of Microsoft-internal telemetry, such as usage, diagnostic, and performance data to operate, secure, and improve Azure Monitor pipeline. This extension might create additional pods in the azure-arc namespace.
  • Fixed all known security vulnerabilities and compliance issues.

Version v0.157.0 - Feb 2026 (Preview)

  • Added support for TLS and mutual TLS (mTLS) for TCP‑based ingestion endpoints, improving security and compliance. Learn more.

Warning

If you update from an existing installation, this change is breaking as it now requires the installation of the Certificate Manager extension and gateway. Without these components, the update or deployment fails. See the updated prerequisites for how to install the additional components. You can also disable the default TLS, mTLS configuration.

  • Fixed an issue where RemoteIP and RemotePort fields were incorrectly swapped during Common Event Format (CEF) log processing.
  • Updated the underlying Azure Linux base image to the latest compliant version.

Version v0.155.0 - Jan 2026 (Preview)

  • Added support for pre-ingestion, KQL‑based data transformations in preview, so you can filter, reshape, and aggregate logs (via portal or ARM templates) by using built‑in syntax and schema validation to optimize costs and ensure clean, standardized data. Learn more.
  • Added support for sending Syslog to Log Analytics standard tables, by using built-in schematization for raw Syslog events.
  • Added support for sending Syslog in Common Event Format (CEF) to the Log Analytics standard table CommonSecurityLog used for Microsoft Sentinel, by using built-in schematization for raw events.
  • Improved Syslog normalization by correctly mapping Syslog SeverityText into the expected Log Analytics schema.
  • Fixed collector crash scenarios when multiple OTLP receivers were configured.
  • Moved pipeline images to Azure Linux Core 3.0 as Mariner 2.0 reached deprecation.
  • Added support for new regions.
  • Fixed all known security and compliance issues.
  • Last updated on