---
sourceDocument: Store Version History Release Notes
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/store-release-notes

 Release :

    - store

ft:locale :

    - en-US

ft:publication_title :

    - Store Version History Release Notes

ft:clusterId :

    - rnst

bundleId :

    - rnst


---

# LogRhythm integration release notes

# LogRhythm integration release notes {#ariaid-title1}

Release version: Store  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read  
Version history for the Security Operations
LogRhythm
integration on the ServiceNow Store.
Important:  
For details on system requirements and family compatibility, view the application listing on the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website.

## Version history {#store-secops-rn-logrhythm__section_qgh_qsr_sfb}

Version 11.2.5 - September 2026
:   Fixed: UI Issue in mapping screen.

Version 11.2.3 - June 2026
:   Fixed: Access issues for Security Analyst while querying tables.

Version 11.2.2 - May 2026
:
    * Fixed:
      * SIRs are not created from SIEM ingestion due to "Secure Notes" access issue to the Crypto module since the Yokohama upgrade was fixed.
      * Access issues for Security Analyst on querying tables.
      {#store-secops-rn-logrhythm__ul_qqs_prc_cjc}

Version 11.2.1 - December 2025
:
    * New:
      * Upgraded all dictionary-level read-only fields to Strict Read-Only to improve security and prevent unauthorized changes. This ensures the server consistently enforces read-only behaviour across all UIs, scripts, and integrations.
      * Replaced all occurrences of the admin role within the integration logic with the more restrictive sn_si.admin role to ensure proper access control and adherence to least-privilege principles.
      {#store-secops-rn-logrhythm__ul_vzr_5s1_lhc}
    * Fixed:
      * System property "Max Security Incident can be created in a day" not working.
      * Schedule Script "LogRhythm Data Cleanup" not executing.
      {#store-secops-rn-logrhythm__ul_fbm_5s1_lhc}
    {#store-secops-rn-logrhythm__ul_wnk_ts1_lhc}

Version 11.1.10 - April 2025

:   Fixed:

    * CMDB_CI mapping getting failed for "Configuration Item" field on Logrhythm.
    * Configuring CI Under Mapping Screen SIR Not Getting Created.
    {#store-secops-rn-logrhythm__latest-store-secops-rn-logrhythm}
{#store-secops-rn-logrhythm__latest-store-secops-rn-logrhythm}

Version 11.1.9 - November 2024
:   Changed: Migrated default workflows to flows using Flow Designer.

Version 11.1.8 - April 2024
:   Fixed: Misconfiguration of table/field ACLs is corrected.

Version 11.1.5 - November 2023
:   Changed: Minor UI updates to render the profile mapping page.

Version 11.1.4 - May 2023
:   Fixed: One-Time Retrieval was not working on the scheduling page in LogRhythm profile when we change the date format to DD-MM-YYYY, this is now fixed.

Version 11.1.2 - September 2022
:
    * Fixed:
      * Error while checking and unchecking the Since date checkbox.
      * DeDup changes and Invalidate cache cleanup.
      * If no data is generated within seven days of any rule, then a Warning/Error message should be thrown saying 'No data found' as no alarms were generated recently other than Heartbeat missed.
      * Tooltip for Pull alarm button says 'This gets sample offense data from IBM Qradar server,' which needs to change to 'This gets sample alarms from Logrhythm.'
      * Improve the logging for LogRhythm Event Ingestion.
      {#store-secops-rn-logrhythm__ul_emv_ggj_mxb}

Version 11.1.1 - May 2022
:
    * New: Migration of APIs from REST to SOAP.
    * Changed:
      * Updated the integration tile and introduced alarm By ID API in Profile and Scheduled Job.
      * Removal of alarm rule selection from profile set up.
      * An additional options section has been introduced in the profile.
      {#store-secops-rn-logrhythm__ul_uy4_l2z_3tb}

Version 11.0.9 - November 2021
:   Fixed: Added additional password related policies

Version 11.0.8 - August 2021
:   Fixed: Resolved an issue with the mapping of alarm fields to SIR reference fields, while creating security incidents from alarms.

Version 11.0.7 - February 2021
:   Fixed: The LogRhythm date fields \[YY-MM-DDTHH:MM:SS\] now map correctly in the ServiceNow AI Platform using the Glide DateTime format.

Version 11.0.6 - December 2020
:
    * New:
      * Added Related List on the Security Incident Form containing all raw base events related to the LogRhythm Alarm.
      * Mapping section of the Alarm Profile includes a search function to easily find Alarm Fields by name.
      * Added a navigation link to the LogRhythm Drilldown Event module to view the list of all raw base events.
      * Support for multi-valued field mappings of Configuration Item and Observable when multiple raw base events related to the LogRhythm Alarm contain different values for these mapped fields.
      {#store-secops-rn-logrhythm__ul_jyr_1kt_xnb}
    * Fixed: Mid server routing is maintained based on configured selection(s) even in failure scenarios
    {#store-secops-rn-logrhythm__ul_ohx_zjt_xnb}

Version 5.0.4 - July 2019
:
    * New: Recertified for New York
    * Fixed: Improved exception handling when LogRhythm API returns error code

Version 5.0.3 - November 2018
:
    * Flexibility to create multiple alarm profiles such as phishing and malware
    * Drag-and-drop mapping of LogRhythm alarm field values to associated SIR security incident fields
    * A preview of the SIR security incident layout based on sample alarms to validate configuration set-up
    * Ingest historical alarms as well as ongoing, future alarms on configurable intervals
    * Automated alarm close out upon incident closure, which includes a SIR security incident ID and URL for easy linking