Installation and upgrade notes
- Kubernetes version:
- Azure deployments: 1.24 to 1.26
- AWS deployments: 1.24
- On-premises instances (installed by the installer): 1.24
- To avoid case ingestion errors, you must use the 5.1 CLI.
To manually replace the installed CLI, follow the instructions in the Support Portal article Update the CLI used to upload evidence from AXIOM Examine to Magnet REVIEW.
- You must run the CLI or the Upload to Magnet REVIEW tool from a machine running Windows 8 or later.
New and updated features for end users
- View large URLs in a more user friendly format.
- For a faster and more robust attachment viewing experience, Magnet REVIEW selectively skips preview generation for an individual file having contents that would exhaust resources. Some PowerPoint, Word, and text files might be affected. To view a file, download it from the document details page.
- Access the case dashboard, case overview, and reports page from an updated tabbed interface.
- When assigning users to a case, you can now search for user names.
- Export the tags and comments you added to your case in Magnet REVIEW, then merge them into the original AXIOM Examine case.
- The Details card on the evidence item Details page now includes the evidence source name.
New and updated features for administrative users
- Previews generate more quickly during ingestion due to improvements in the underlying architecture.
- Previews generate more quickly and robustly due to new strategic HTML sanitation policies. Magnet REVIEW no longer performs HTML sanitization on files (such as PowerPoint, Word, and Text files) that contain a large number of HTML tags. Additionally, it no longer generates previews for these files.
- View the new Grafana preview dashboard to monitor the status of preview generation and content extraction for your case.
- Obsolete Grafana Case Ingestion and Function Queues dashboards are now removed. They illustrated metrics from microservices that were removed with the architecture improvements.
Fixed issues
- When the user's timezone was offset from UTC, the date/time filter would not apply to the correct date and time. -RE-2848
- When users uploaded a case, occasionally the following error message was recorded in the log file: "Retrying message in "00:05:00 with path : Connection timed out". -RE-2354
- When the maximum number of video requests was set to more than 2, the Filmstrip previewer service could cause previewer pods to exceed their memory limits, which led Kubernetes to terminate the pods. -MR-2207
Known issues
- During an upgrade on Azure, the installer prints this warning even when the upgrade is successful: Unexpected error while verifying MySQL credentials: Connections using insecure transport are prohibited while --require_secure_transport=ON."
- Thumbnails and previews don't display for SVG images.
- If Magnet REVIEW is installed on AWS using an EKS public load balancer, users receive an ERR_CONNECTION_TIMED_OUT response when they attempt to access the Magnet REVIEW UI.
Workaround: Register Magnet REVIEW nodes on the load target groups, then add the target group ports to the cluster security group.
- If the metadata for a case is changed and the user filters the audit log based on the changed data, nothing shows in the case column in the audit log entries.
- In Azure and AWS environments, attachments larger than 5 GB fail to upload, resulting in an "Error while copying content to a stream" message.
- Due to timeout errors, video previews fail to generate for large FLV files.
- Occasionally, PDF reports may fail to generate when previews are included and the case contains one or more large video attachments.
- When deploying on AWS environments, custom and default logo uploads fail.
- When upgrading an Azure airgapped environment, the answers supplied for the installer prompts during the previous installation are not shown.
- For instances that have a configured Keycloak AD FS integration via SAML, the Manage users page shows "No" in the Active Directory column instead of "Yes".
- During an upgrade, the installer should not give the admin user the option to select a different primary storage type from that used in the instance. If this happens, the upgrade fails, and it will rollback and existing cluster data remains intact.
- An attempt to generate a system report will fail if there's a case that does not have a hits index (likely due to an issue with ingestion).
Workaround: Find a case on the Dashboard that has "no evidence sources", then delete the case.
- In evidence uploaded from Cellebrite Physical Analyzer, duplicate artifact fragments can be generated if an XML element from the Cellebrite export contains a nested element of the same type.
- Keyword searches applied by the user don't get highlighted in PDF previews if the content exists in the table of contents, links, or occurs over multiple lines.
- Switching to full-screen view in a document preview sometimes causes some UI elements to resize off the screen. This occurs most frequently with larger documents.