← Back to blog
Changelog 4 min read 炬鲸团队

v2.4 Release Notes: Log Clustering, Alert Silence, DM8 Support and Faster Tracing

v2.4 adds log clustering, alert silence and escalation, and DM8 support; trace hydration is 45% faster, with fixes for timezone drift and duplicate webhook alerts.

New: log clustering

No more paging through a wall of errors by hand. The system groups similar logs into clusters, annotating each with its occurrence count, first seen, and last seen times — so you can spot the high-frequency error at a glance. Clustering ignores fields that change on every line, such as timestamps and request IDs, and groups by the actual template difference, so one class of error isn't split into hundreds of entries just because the parameters differ. You can filter before clustering by service, time range, or keyword, e.g. cluster only the ERROR logs of one service within a given hour.

Example: after a release, the system surfaced two high-frequency clusters — one null-pointer, one connection-timeout. Clicking into either drills down to the specific logs and associated traces, and the debugging direction is clear on the spot. The practical value shows up in triage: instead of reading a thousand near-identical stack traces, the on-call engineer opens two clusters, sees one is a known null-pointer regression and the other is a new connection-timeout pattern, and starts fixing rather than searching. Clustering runs incrementally, so you can diff today's clusters against yesterday's baseline and spot new failure modes as soon as they appear. Clusters can be exported, which is handy for pasting into a post-mortem document or a ticket.

New: alert silence and escalation

  • Silence windows: set by time, service, or label, so releases and maintenance stop paging yourself
  • Escalation: an alert unacknowledged for N minutes escalates to phone or higher priority, so night-time alerts don't go unanswered
  • Suppression chains: a root-cause alert silences its downstream alerts, so a database outage yields one “DB down” instead of forty “connection timeout”

Silence and suppression rules are both editable in the UI and take effect immediately — no service restart required. Before you save a rule, it shows a live preview of how many active alerts it would currently suppress, so you can sanity-check it first.

New: DM8 support

Official support for DM8 in MySQL-compat mode means sovereign environments can deploy directly, covering Kylin V10, UOS, and Kunpeng/Phytium platforms. We also added a database connectivity self-check so you can see the connection test result during deployment, instead of discovering a dead connection only after the service fails to start. Deployments on DM8 run the same functional test suite as MySQL, so behavior parity is verified rather than assumed.

Improved: tracing performance

  • Trace hydration is 45% faster, and long traces (1000+ spans) load more smoothly
  • Metric queries now use pre-aggregation and return in seconds instead of stalling on full-dashboard scans
  • Log search uses index pushdown, making high-frequency field filters faster

Fixes

  • Fixed log timestamps shifting due to a timezone-offset bug
  • Fixed duplicate delivery on some webhook alerts
  • Fixed an occasional timeout when exporting large result sets

Other improvements

  • Alert rules can now be imported and exported, so you can move them between environments instead of recreating them by hand
  • Log search supports mixing regex and fuzzy matching in the same query
  • You can see which alerts each team member has handled, which helps with reviews and handoffs

Why this release is worth the upgrade

Log clustering alone changes how on-call engineers spend their nights: instead of grepping through noise, they open the top cluster and start on the actual problem. Alert silence and escalation close the loop on the second most common complaint after noise — alerts that nobody acknowledges. And if you are mid-migration to a domestic stack, DM8 support removes a blocker that has kept observability out of sovereign environments. The tracing improvements aren't vanity numbers either: a 45% faster hydration is the difference between a trace you actually open during an incident and one you skip because it takes too long. Put together, this release is less about new dashboards and more about making the existing ones actually get used.

Upgrade notes

This release is backward compatible — ingestion tokens, alert rules, and query syntax are unaffected. Private-deployment customers should contact ops for the upgrade package; cloud tenants are updated automatically. We recommend exporting your alert rules as a backup before upgrading, then running the built-in self-check afterward to confirm logs, metrics, and traces are all flowing normally.