Maintenance release 3.4.6#

Product	EclecticIQ Intelligence Center
Release version	3.4.6
Release date	May 2025
Time to upgrade	~40 minutes to upgrade an instance with 2.67 million entities, 1.85 million observables. From the previous release Using the installation script For an instance running on one machine
Time to migrate	For an instance with 2.67 million entities, 1.85 million observables: PostgreSQL migration: 13m30s Elasticsearch migration: 18m40s

eclecticiq-extension-commons deprecated in 3.3, removed in 3.4

If you have written your own extension or modified an existing extension, that extension may contain references to the eclecticiq-extension-commons package.

In particular, if your extension:

depends on eclecticiq-extension-commons
imports from extension.common

Use our migration guide to remove or change those references in your extension before upgrading to release 3.4.

Fixes#

MITRE ATT&CK updated to v17

We’ve updated the MITRE ATT&CK version used in EIQ IC to 17.

Outgoing feed maintenance

The Outgoing feeds received the fixes listed:

Setting the execution schedule to None now guarantees the feed doesn’t run (whereas before it would default to Every 30 minutes while appearing disabled).
Including more Reports in an Outgoing feed then the number set for Number of entities to be included in a package no longer results in an error.
EclecticIQ HTML Report Digests will no longer include broken links that were caused by missing “/”.
Fixed images pasted into Reports

Pasting images into Reports from your clipboard or saving a Report with images as a non-admin user will no longer result in errors.

Entity detail pane scrolls breaking

Fixes issues where, on the Entity detail pan, the Remove from Entity button on the Observables tab and the Edit button on Relationship lines on the Neighborhood tab would become unreachable.

Public API compatibility#

From EclecticIQ Intelligence Center 2.12.0 onward, the public API is packaged together with EclecticIQ Intelligence Center.

The following reference table lists the versions of the public API package and EclecticIQ Intelligence Center versions they are compatible with:

Intelligence Center version(s)	Public API package version(s)	Public API version
2.11 - 2.12	`eclecticiq-extension-api==1.0.*`	v1
2.13.0	`eclecticiq-extension-api==1.*`	v1
2.14.0 and newer	Now follows EclecticIQ Intelligence Center versioning scheme. E.g., EclecticIQ Intelligence Center 2.14 is now compatible with `eclecticiq-extension-api==2.14.*`	v1
3.0.0 and newer	EclecticIQ Intelligence Center 3.0 and newer uses Public API v2. Follows EclecticIQ Intelligence Center versioning scheme. E.g., EclecticIQ Intelligence Center 3.0.2 is compatible with `eclecticiq-extension-api==3.0.`, EclecticIQ Intelligence Center 3.1.0 is compatible with `eclecticiq-extension-api==3.1.`, etc.	v2

Download#

For more information about setting up repositories, refer to the installation documentation for your target operating system.

EclecticIQ Intelligence Center and dependencies for Rocky Linux and RHEL	Platform packages: https://downloads.eclecticiq.com/platform-packages-centos/ Platform dependencies: https://downloads.eclecticiq.com/platform-dependencies-centos-2.9/ Note The Intelligence Center dependencies URL for versions 2.9 and later is `https://downloads.eclecticiq.com/platform-dependencies-centos-2.9/`. It contains packages that are incompatible with versions 2.8 and earlier.
EclecticIQ Intelligence Center extensions	Platform extensions: https://downloads.eclecticiq.com/Extensions/

Upgrade#

In order to upgrade to EclecticIQ Intelligence Center 3.0 and later, you must:

Be running one of the supported operating systems.

When upgrading an EclecticIQ Intelligence Center (EIQ IC) instance on hosts running older operating systems (such as CentOS 7 or RHEL 7), you must upgrade the operating system to Rocky Linux 8 or 9, or RHEL 8 or 9 before attempting to upgrade to EIQ IC 3.0 and newer.

See:
- Rocky Linux’ documentation:
  - for migrating to Rocky Linux
  - for upgrading Rocky Linux
- RHEL’s documentation:
  - for upgrading 7 > 8
  - for upgrading 8 > 9
Upgrade from EclecticIQ Intelligence Center 2.14.

If you are running an older version of EclecticIQ Intelligence Center, you must upgrade to 2.14 before attempting to upgrade to EclecticIQ Intelligence Center 3.0.

See Manage | Install, Configure, and Upgrade.