We are excited to announce the release of ASGARD Analysis Cockpit v4.1, a substantial upgrade from version 4.0. This latest version introduces significant improvements and new features designed to enhance performance, usability, and stability. 
ASGARD Analysis Cockpit v4.1 strives to provide a more efficient and robust user experience, addressing the evolving technical requirements of our users. Read on for detailed information about the latest updates learn how these changes can enhance your workflow.

Major Changes

• Custom Event Dashboards: Create personalized dashboards in the Baselining and All Events sections.  

• Event Insights by ChatGPT: Automatically analyze THOR events with assessments and recommendations and ask ChatGPT to explain THOR events or terms within an event.  

• Matched Signatures Section: View all matched signatures chronologically in the new ‘Matched Signatures’ section.  

• File Collection via Management Center: Collect files from an asset through the Management Center.  

• Data Retention Policy: Retain events for a specified period and automatically delete them afterwards.  

• Graphs and Statistics: Added to the Overview Dashboard for enhanced data visualization.  

Improvements

• Bug Fixes
  Addressed and resolved various bugs to improve overall system performance. 

• UI Enhancements
  A fresh, improved look and feel, making the UI more intuitive and user-friendly. 

• Elastic search Indexing Overhaul
  The indexing structure for events in Elasticsearch has been completely revamped, significantly improving performance.  

• Case Sensitivity Adjustment
  Conditions in cases are now case-insensitive, and existing conditions will be converted automatically. 

Stability in Key Areas

• API Communication
  The API interface remains unchanged for seamless integration. 

Elasticsearch: Enhanced Performance and New Indexing Structure

We have changed the way events are indexed in Elasticsearch. The new index structure significantly improves performance but increases disk space usage by 30%-40%.
After the upgrade, all events will be reindexed, which can take several hours depending on the number of events in your system. The system remains usable during this process, but we recommend performing the upgrade during off-peak hours.
If the Analysis Cockpit reaches its disk space limit during reindexing, the process will pause until more disk space is available. The Analysis Cockpit will guide you on how to free up or increase disk space, and the reindexing process will automatically resume once enough disk space is available.

FAQs

How long does the update take? 

The update itself only takes a few minutes. The analytics cockpit needs additional time to re-index the events, which can take hours to days depending on the number of events. We recommend performing the upgrade outside of peak business hours. 

Will the system restart during the update process?  

The system does not restart during the update. Once the first update is complete, you will need to log in again. 

Can I continue to work during the restructuring? 

Yes, you can continue to work during this time, as the latest events will be re-indexed first and will be available immediately. The status of the re-indexing can be tracked on the system status page. Re-indexing gives the ASGARD Analysis Cockpit an immense performance boost. This speeds up queries and makes work more efficient. 

Further Information

For more details, please refer to our manual or our ASGARD Analysis Cockpit Youtube-Playlist, which provides comprehensive guidance on all the new features and changes. You can also contact our support for further assistance.

If you cannot see the embedded video, here is a direct link. 

Aimed at delivering a more stable and efficient experience, v3.0 is built to better meet the technical needs of our users. Read on for details about what’s new and how these changes can benefit you.

Improvements

• Bug Fixes
  Addressed and resolved various bugs to improve overall system performance.
• UI Enhancements
  A fresh, improved look and feel, making the UI more intuitive and user-friendly.
• Sync Performance Boost
  We’ve enhanced the synchronization between the Analysis Cockpit and Management Center for quicker and more reliable data transfer.

Major Changes

• Update Server Switch
  The new version uses update-301.nextron-systems.com instead of update3.nextron-systems.com. Please adjust your firewalls to allow connections to the new server.
• Operating System Upgrade
  We’ve upgraded the underlying Debian operating system, ensuring a more robust and secure environment.
• Time Service Transition
  Switching from Ntp to timesyncd for time synchronization. It’s simpler to set up and manage.

Stability in Key Areas

• API Communication
  The API interface remains unchanged for seamless integration.
• Agents
  Our agents continue functioning smoothly without requiring any re-deployment or updates.

FAQs

How long will you support version 2?
We will provide bug fixes and security updates for version 2 until June 2024.

Is the upgrade to version 3.0 an in-place upgrade?
Yes, the upgrade to version 3.0 doesn’t require a new system. It can be completed in-place by running the upgrade utility from an elevated command line.

How long does the upgrade take?
The upgrade typically takes between 15 to 30 minutes. The Analysis Cockpit will require additional time to synchronize with the new Management Center and may display a “red” status temporarily. This is normal and indicates ongoing synchronization. If this status persists for more than 2 hours, please contact support@nextron-systems.com for assistance.

Will the system reboot during the upgrade process?
Yes, the system will reboot multiple times during the upgrade process. No additional action is required after a reboot; the update will automatically continue until it is complete.

Are there other things to consider before performing the upgrade?

Ensure that there is at least 20% free disk space on your device. For instructions on freeing up space on your Management Center, please refer to this link. The upgrade requires connections to both the old and the new update server.

Is there a problem when using several Management Centers or Master ASGARD with different versions?
Yes, an ASGARD 2.x cannot be controlled via the Master ASGARD 3.x, so it is advisable to upgrade Master ASGARD and Management Center at the same time if possible.

Further Information
For more details, please refer to our manual, which provides comprehensive guidance on all the new features and changes.

Nextron announces the end-of-sale and end-of-life dates for the ASGARD Analysis Cockpit version 3. Customers with active service contracts will continue to receive support until September 30, 2024, as shown in the table below.