Installation and upgrade notes

Kubernetes version:
- Azure deployments: 1.26 to 1.27
- AWS deployments: 1.26 & 1.27
- On-premises instances (installed by the installer): 1.26
To avoid case ingestion errors, you must use the 5.3 CLI. To manually replace the installed CLI, follow the instructions in the Support Portal article Update the CLI used to upload evidence from AXIOM Examine to Magnet REVIEW.
You must run the CLI or the Upload to Magnet REVIEW tool from a machine running Windows 8 or later.
The upgrade to 5.3 will trigger case updates for all cases. During the update, cases will display an "Update in progress" banner in the UI until all cases are migrated to the new index.
Note: You should pause ingestions prior to upgrading to 5.3 in order to avoid errors and failures.

New and updated features for end users

This release adds the ability to browse artifacts and view search results across all evidences sources.

The dashboard has been redesigned to accommodate viewing evidence from all sources.
You can now access all artifacts from the case dashboard or artifact explorer in chronological order.

A warning banner now displays when the search request times out, but provides the user with an option to continue their search.
You can now choose to continue searching even if no hits are found within a set time.
You can now restart the migration for cases that fail migration or stall. Contact technical support if you encounter this issue.
Selecting an artifact in the Explorer now opens a preview pane with details related to the artifact. Click Go to details page to view all artifact data.
For Magnet AXIOM data, an artifact icon will now display next to the artifact name.
The Details card on the evidence item Details page now includes the evidence source name.
The URL for the Artifact explorer has been updated to accommodate the inclusion of more evidence sources.
When the configuration or schema is updated by an administrator, a status message is now displayed during migration.
The preview status query performance has been optimized for faster load times.

New and updated features for administrative users

You can now configure the RabbitMQ default memory.
On EKS and AKS environments you now have the option in the installer to expand Loki and Prometheus PVC space in hosted environments.
When cases are being migrated, you will now see a banner in the Artifact configuration page that indicates the save function is disabled.

Fixed issues

Sometimes after editing a case, evidence source, or tag from the network tab, the wrong item was being updated and displayed. -RE-4111
Sometimes, when there was significant memory pressure during preview generation for an evidence source, the generation might stall, but the system reported that preview generation was still in progress.
API users were able change passwords for any user regardless of set permissions.

Known issues

During an upgrade on Azure, the installer prints this warning even when the upgrade is successful: Unexpected error while verifying MySQL credentials: Connections using insecure transport are prohibited while --require_secure_transport=ON."
Thumbnails and previews don't display for SVG images.
If Magnet REVIEW is installed on AWS using an EKS public load balancer, users receive an ERR_CONNECTION_TIMED_OUT response when they attempt to access the Magnet REVIEW UI.
Workaround: Register Magnet REVIEW nodes on the load target groups, then add the target group ports to the cluster security group.
If the metadata for a case is changed and the user filters the audit log based on the changed data, nothing shows in the case column in the audit log entries.
In Azure and AWS environments, attachments larger than 5 GB fail to upload, resulting in an "Error while copying content to a stream" message.
Due to timeout errors, video previews fail to generate for large FLV files.
Occasionally, PDF reports may fail to generate when previews are included and the case contains one or more large video attachments.
When deploying on AWS environments, custom and default logo uploads fail.
When upgrading an Azure airgapped environment, the answers supplied for the installer prompts during the previous installation are not shown.
For instances that have a configured Keycloak AD FS integration via SAML, the Manage users page shows "No" in the Active Directory column instead of "Yes".
During an upgrade, the installer should not give the admin user the option to select a different primary storage type from that used in the instance. If this happens, the upgrade fails, and it will rollback and existing cluster data remains intact.
An attempt to generate a system report will fail if there's a case that does not have a hits index (likely due to an issue with ingestion).
Workaround: Find a case on the Dashboard that has "no evidence sources", then delete the case.
In evidence uploaded from Cellebrite Physical Analyzer, duplicate artifact fragments can be generated if an XML element from the Cellebrite export contains a nested element of the same type.
Keyword searches applied by the user don't get highlighted in PDF previews if the content exists in the table of contents, links, or occurs over multiple lines.
Switching to full-screen view in a document preview sometimes causes some UI elements to resize off the screen. This occurs most frequently with larger documents.