Data flow
DPXL support in TCO Optimizer
TCO Optimizer now supports DPXL expressions — Write TCO policies using DataPrime Expression Language (DPXL) to match on any log or trace field, including metadata, labels, and user data fields. The Builder remains available for common use cases and generates DPXL automatically. Priority levels are now named High (Frequent Search), Medium (Monitoring), and Low (Compliance) to reflect their storage model and use case. Learn more
Pipeline Analyzer streaming and rule filters
Streaming enhancements and rule-filtering in the Pipeline Analyzer for clearer pipeline visibility. Learn more
Schema Manager field mapping visibility
Schema Manager — See if fields are fully mapped, unmapped, or partially mapped, right inside Schema Manager. Learn more
Pipeline Analyzer and Quota Rules
See inside your data with Pipeline Analyzer — Pipeline Analyzer gives you real-time visibility into your log pipeline. Instantly inspect logs as they're ingested, view parsing rules in execution order, and capture live log streams. Learn more
Take control with Quota Rules — Quota Rules let you set precise usage limits across your telemetry pipeline. Enforce automated blocks, control costs, prevent noisy data spikes. Learn more
Predefined field types for data cleanliness
Protect data cleanliness — Predefine field types, maintain structured data, and eliminate ingestion order dependencies for more accurate and efficient monitoring. Learn more
Kafka Forwarders for external pipelines
Integrate Coralogix with your data pipelines with Forwarders — Seamlessly send parsed and enriched log data from Coralogix to an external kafka cluster with Forwarders. Learn more
Custom enrichment and log normalization
Custom log enrichment is now even more intuitive — Enrich logs from specific columns in your CSV file, download enriched files, and use them as data sources in DataPrime queries. Learn more
Log normalization for simplified data analysis — Leverage new log normalization feature to standardize keys for commonly occurring values across various security log types. Learn more
Archive tags for multiple retention periods
Set Multiple Retention Periods with Archive Tags — Control the length of archive retention for different groups of logs. Define different lifecycle policies in the Setup Archive page. View Documentation >. Learn more
JSON parsing rules
New Parsing Rules — Introducing Stringify JSON Field and Parse JSON Field rules to parse escaped JSON values within a field to a valid JSON object and vice versa. Learn More >. Learn more