Release Note

2.3.7 (9.15 2026) ¶

1. Email provider enhancement for extract 'Service' and 'Status' field from email title
2. Fix preserve alert info not preserve firing info bug
3. Fix SNOW call back not deal with 7 day’s ago alerts issue
4. Not write deduplicate alert info into SNOW notes when assign ticket
5. Some UI loading and query toggle switch enhancement

2.3.6 (8.31 2026) ¶

1. Show instance type (single alert or sub-alert) in exported csv
2. Support assign ticket to group alert and add alert detail notes in the ticket after assign
3. Add alert URL in ticket notes
4. Fix unassigned alerts bug
5. Fix over 7 days sub-alert not query able in group alert bug
6. Fix workflow icon missing bug

2.3.5 (8.1 2026) ¶

1. Support un-assign alert
2. Group alert behavior enhancement:
   • One alert only belong to one Group alert
   • Sub-alerts remain in their current group instead of being correlated again / move to other group
   • New alerts use the first matching correlation rule, ordered by rule name asc
   • Support configure correlation interval (Group created time vs last firing time) in correlation rule
3. Performance issue fix:
   • Add complex CEL validation: if the logic caculator(|| / &&) is more than 15, need add has() for all fields in CEL
   • Fox bug of evaluate complex CEL casue high CPU
4. UI add collapse‌ / expand‌ sub-alert button
5. Two new MCP tools: get alert history and enrich single alert

2.3.4 (6.26 2026) ¶

1. Fix AI execution table missing execution_time
2. Add get_ai_report_by_fingerprint api for MCP

2.3.3 (6.15 2026) ¶

1. PAT for guest user
2. Group alert interval enhance
3. Batch enrich write audit log
4. Pre-formatting mapping save field into alert body
5. Fix group alert severity color mismatch with single alert issue

2.3.2 (5.29 2026) ¶

1. Fix SNOW call back fail due to workflow log been clear issue
2. Fix create SNOW ticket fail to post sub-alert info ticket issue
3. Group Alert detail page show activity
4. Fix maintence editing cel query been cut issue

2.3.1 (5.15 2026) ¶

1. Group Alert enhancement:
   • Sub-alerts will be acked when Group alert been self assign
   • Remove group alert description format
   • All column select able in feed for both group alert and single alert
   • Fix correlation rule table column height issue
2. AI chat dialog style enhancement
3. Append alert info into snow ticket when assign ticket
4. Correlation rule support version control
5. EMS MCP PAT(Personal Access Token) online
6. Mapping / Extraction rule support dry run

2.3.0 (4.29 2026) ¶

1. Group Alert enhancement:
   • Only more than 1 sub-alert will be shown as a group alert
   • Feed page support query based on Group Alert
   • Fix Group Alert detail only show 20 sub-alerts bug
   • Group alert has own facet different with single alert
   • Enhance mouse hover color to deep orange to easier identify alerts among the group
2. Update MCP introduction page for new PAT auth
3. New MCP tool for Group Alert
4. Switch AI agent to new server side agent(replace N8N)
5. Fix some popup dialog close slow issue
6. Fix security issue for backend service

2.2.9 (4.17 2026) ¶

1. EMS support auth via PAT
2. New note_history field store history notes:
3. Adjust Group alert detail page format and make link fields clicked able
4. Add loading mask when clicking some slow response button
5. Enhance group alert status change slow issue
6. Always load latest data when view group alert body and open enrich window
7. Disallow "status" field in enrich API/method payload
8. Correct correlation rule interval calculation base on last firing time
9. Add ai_runbook field when configure correlation rule

2.2.8 (4.10 2026) ¶

1. Enable Workflow version revert
2. Enhance the retention of original alert resolution information in alert history.
3. Fix Alert View Fields function "service" fields cannot load bug
4. Fix UI security issue
5. Fix backend log security issue
6. Fix deduplication rule interval bug

2.2.7 (3.27 2026) ¶

1. Manual run workflow list order by recent used and frequent used.
2. Preserving name, severity, description fields when "resolved" alert come in.
3. Group alert enhancement
4. Fix refresh page will lose cel query bug

2.2.6 (3.20 2026) ¶

1. Group Alert
2. AI report scoring
3. Support for batch changing alert status
4. Optimize performance and user experience when manually changing alert status
5. Fix SNMP provider alert body u0000 issue
6. Add sub-status for each alert: auto_recover/manual_resolved/escalated_resolved/auto_resolved
7. Add flapping_count field for flapping with auto-recover alerts

2.2.5 (3.10 2026) ¶

1. Enhance time line show time range and re-order action
2. Fix history table last receive time format issue
3. Make alert table column width able to change
4. EMS MCP
5. Deduplication rule show history version and revert
6. Enhance deduplication instantiation interval use resolved time
7. Alert API query limit to 15 days
8. Alert drop history support record count number only
9. Change alert status api support changed_by parameter

2.2.4 (2.27 2026) ¶

1. Enhance view alert and enrich always shows the latest data
2. Run workflow enhancement to prevent duplicate trigger
3. Extraction rule fix with support regex
4. User Group with Role
5. Mapping/Extract load slow issue fix
6. Facets bound to preset
7. Enhance cel query exception go back remain the query in the input
8. Support Export ai report as PDF

2.2.3 (2.3 2026) ¶

1. Sync user group from myid group to EMS.
2. Support edit/add/delete role on page.
3. Enhance delete confirm dialog.
4. AI Rule support wait time before trigger AI Agent.
5. AI button support draggable.
6. Fix bug of not able scroll in Timeline.
7. Fix cel append bug when uncheck in facets.
8. Fix pagination not working.

2.2.2 (1.27 2026) ¶

1. Support preset group re-order via drag and drop.
2. Show the operator's profile picture and name on alert timeline.
3. Support unicode character in alert body for Emsv1 provider.
4. Support Emsv1 provider using eventName to match the corresponding severity (for ems1.0 migration).
5. Show caculate duration for feed and preset count.
6. Fix bug of one rule execution fail impact others for mapping and extraction.

2.2.1 (1.21 2026) ¶

1. Enable preset group share to user group.
2. Thousandeyes provider support field "service".
3. Splunk provider support pass "status".
4. EMSV1 provider support level=0 for resolve alert.
5. Snmptrap provider for extract ip/host/port to alert body.
6. Enable multi line in cel query input.
7. Able to resize the width of side bar.
8. Fix view alert detail bug.
9. Fix save preset column selection bug.

2.2.0 (1.9 2026) ¶

1. Remain alert detail pop up page stay after action on it.
2. Extract some key fields out of json to table column for query performance enhance. (schema details)
3. Support user group.
4. Support preset group.
5. Support "has" for query cel.
6. Enhance the loading performance of the mapping rule page.
7. Enhance manual refresh button behaviour, continue show refreshing until query finished.
8. Add convert for unsupported unicode character for Prometheus provider.
9. EMSV1 provider support pass level "0" to resolve alert.
10. Fix cel validation inconsistent bug when save preset.
11. Fix pagination "NaN" bug.

2.1.9 (12.22 2025) ¶

1. Extract the fields from the Alert event as new columns to the lastAlert.
2. Add unit second for AI rule timeframe and set as default.
3. Fix page number bug after cel searching.

2.1.8 (12.09 2025) ¶

1. Alert timeline support load more (1000 records).
2. Preset alerts count change to not display as default.
3. Enhance AI trigger rule cel verification.
4. Enhance multiple selection of correlation rule attributes.
5. Support trigger pagerduty via api key.
6. Fix pagerduty provider api key validation bug.

2.1.7 (12.02 2025) ¶

1. Add workflow trigger based on alerts count and suppression time
2. EMS show alerts data for 30 days only
3. Enhance AI analysis report table default column
4. Enhance preset alerts count calculation job for reduce DB load

2.1.6 (11.25 2025) ¶

1. Support feed pagination jump to specific page
2. Add time selection in date picker
3. Timeline store all status change
4. Remove the limit of snow provider create inc
5. Show "update by" and "create by"for deduplication
6. Last received show real timestamp in history page
7. Fix AI agent position bug

2.1.5 (11.18 2025) ¶

1. Remove the 1 ticket vs 10 alerts limit when auto change alert status from SNOW callback
2. Add share alert button in alert menue
3. Fix bug: show wrong name abbreviation of assignee when batch assign alerts

2.1.4 (11.11 2025) ¶

1. AI report page add passive feedback collection
2. Mapping rule add cel match condition function
3. Subscriber Pending status from SNOW and set Alerts as Pending accordingly
4. Add Pending, Resolve related fields
5. Add fields blocklist function
6. Add alert blocklist function

2.1.3 (10.27 2025) ¶

1. Manual run AI analysis in AI chat bot
2. AI bot support mutilple session
3. Correlation rule page load fields performance enhancement
4. Add alert fingerprint quick search function in alert detail page
5. Webex teams provider support send message with teams card
6. Add AI feedback module in AI analysis report page
7. Add download csv button in mapping rule setting
8. Enable auto/manual failover and failback
9. Bugfix:
   • Fix deduplication rule page provider shown as 'main' bug

2.1.2 (10.14 2025) ¶

1. Enable bulk resolve alerts
2. Enable bulk enrich ticket url
3. Add AI module for auto/manual trigger AI agent Analysis

2.1.1 (9.23 2025) ¶

1. Enable extraction and mapping rule version tracking and rollback
2. Record "assignTime", "resolvedTime" and "resolvedDuration" to alert.
3. Bugfix:
   • Fix portal unexpected repeated auto refresh bug.
   • Fix when alerts come in batches, only the first alert is processed by the deduplication rule.
   • Fix microsoft email provider fail to convert events bugs.

2.1.0 (9.17 2025) ¶

1. Enable alerts simple search.
2. Enhance incidents cel search for enriched fields.
3. Add incident payload page.
4. Persistence column setting per user and preset.
5. Enhance em7 provider severity mapping and event status.
6. Support pre-formatting mapping.
7. Enhance Splunk provider formatting.
8. Enable export alerts to csv.
9. Add notification popup when set page refresh interval and do manual refresh.
10. Enhance deduplication rule:
    • Support set priority for match rule.
    • Support set interval when create a new alert object.
11. Fix bug of data could not be queried over 50,000 alerts.

2.0.9 (8.29 2025) ¶

1. Enable the EM7 Provider.
2. Enable page auto-refresh to replace Websocketi.
3. Enhance sidebar number.
4. Support search function on the incident page.
5. Improve deduplication rules:
   • More accurate deduplication rules with cel match conditions.
   • Added an option "alert_instantiation" to support the recreation of alert objects if the alert is resolved.

2.0.8 (8.18 2025) ¶

1. Batch enrich for ticket assign.
2. Enriched fields select able in column selection.
3. Make Severity bar wider.
4. Invalid json format auto fix for Splunk integration.
5. Fix startAT sort bug.

2.0.7 (8.8 2025) ¶

1. Enhance incident ui in alert sidebar.
2. Report error when enrich alert failed.
3. Pagerduty provider supports inc details
4. Enable new workflow history modal.

2.0.6 (8.1 2025) ¶

1. Support assignee able query via cel.
2. Enable alert detail column configuration in ui.
3. Enable mapping rule edit and add from ui.
4. Enhance table column limit.
5. Fix acknowledge alert status set to firing bug.

2.0.5 (7.21 2025) ¶

1. Enable bulk assign alert to someone.
2. Enhance pre-formatting extraction support bulk alerts.
3. Remain assignee for an alert, not overwrite if new alert come.
4. Order the failed events dropdown list.
5. Show more fields in alert detail page.
6. Add hyper link on build number to release notes.
7. Show alert run workflow records in alert detail page.
8. Bugfix:
   • Fixed "Process CSV" save mapping rule without select matcher bug.
   • Fixed previous matcher field was retained when modifying the mapping rule.

2.0.4 (7.11.2025) ¶

1. New Alerts auto push in UI.
2. Show better format in workflow execute result with n8n.
3. Email provider enabled in Prod.
4. Some internal bug fix:
   • Fix linked provider query bug
   • Email provider add sync lock

2.0.3 (7.4.2025) ¶

1. Enable default "kburl" field (https://ciscowebex.servicenowservices.com/kb_find.do?sysparm_search=" + alertname)
2. Show markdown format on incident workflow execution result details.
3. Add some time related fields for emsv1 provider.
4. Disable posthog.(stop sending hits data to keep)
5. Add payload validation for emsv1 provider.
6. Enhance linked provider calculate logic.
7. Enhance Cel query 400 error.

2.0.2 (6.24.2025) ¶

1. Enable SSO login.
2. Fix CEL query 500 error issue.
3. SNOW ticket callback for resolve incident and alert.
4. Email provider for receive Email events.
5. Fix installed provider / Api key not sync issue.
6. Web style change.

2.0.1 (6.16.2025) ¶

1. Enable Webex Teams Provider for notification.
2. Enable Webex SNOW Provider for ticketing.
3. Fix Workflow template 500 issue.
4. Fix session timeout / signin out go to blank page issue.
5. Some UI enhance: show keep/ems version, re-direct doc link.
6. Enhance EMSV1 provider for alert time and service field.
7. Short DNS and Certs for EMS v2:
   • Prod: csgems.prod.webex.com
   • BTS: csgems.stage.webex.com
8. Bugfix and enhance:
   • Fix history page data export related bug and enhance.
   • Escalation Rule support match with service.