Diskover 2.5.1 Release Notes

Release Date: May 2026

Overview

Diskover 2.5.1 is a maintenance release focused on reliability in large-scale deployments. It resolves Analytics and dashboard failures that occurred when many indices were selected, prevents in-progress scans from surfacing incomplete data in the UI and API, adds an SSO-only login option for OAuth deployments, reduces noisy scan logging, and makes RPM upgrades safer and more predictable.

Security Enhancements

SSO-Only Login Option

[DEV-845]

When OAuth single sign-on is enabled, administrators can now hide the local username and password fields on the login page so that only the single sign-on button is presented. This provides a clean, SSO-only login experience for deployments whose security policies require disabling local login prompts. The behavior is controlled by a new OAUTH2_HIDE_LOCAL_LOGIN setting and is disabled by default, so existing login pages are unchanged unless explicitly enabled.

Bug Fixes

Analytics

[DEV-839]

Resolved a failure that prevented Analytics features — Tags, Smart Searches, Reports, and User/Cost Analytics — from loading when a large number of indices were selected (for example, with Always Use Latest Indices). Previously, the combined index list could exceed Elasticsearch/OpenSearch request-size limits and return an error. Diskover now stores large selections server-side and, when a selection would exceed safe request limits, automatically uses an Elasticsearch alias that represents the selected indices so requests remain within limits.

[DEV-848]

Fixed a follow-on issue from the large-index-selection work where the Heatmap and Treemap pages could fail to load when many indices were selected, and made the underlying fix durable so it is preserved across dependency reinstalls. These analytics pages now resolve the correct set of indices for large selections.

Indices & API

[DEV-849]

Indices that are still being scanned are no longer treated as available before the scan completes. Previously, in-progress indices could appear on the Indices and Space Info pages, in File Search, and in API responses, leading to errors or incomplete results. An index is now considered available only once its scan has finished. The /list API endpoint returns only completed crawls by default, with a new optional parameter to include in-progress indices when needed (see Upgrade Notes).

[DEV-810]

The web interface now detects when indices are added or removed and refreshes its cached index information accordingly. Previously, stale index data could persist, causing removed indices to linger or newly added indices to be missed until a manual refresh.

Scanning & Logging

[DEV-768]

Routine Diskover log output is no longer written to the system error log. On Linux hosts running Diskover under systemd, application log messages were being routed to the system journal (and /var/log/messages). Console output now goes to standard output and remains in the configured Diskover log file.

[DEV-854]

Resolved a log-flooding issue when scanning Windows-accessed SMB/CIFS shares with timestamp restoration (restoretimes) enabled. When the share denied timestamp changes, Diskover previously logged a warning for every affected file and directory, which could overwhelm the scan log and, on Windows, trigger secondary log-rotation errors. These warnings are now rate-limited and consolidated into a single summary at the end of the scan. The scan still completes with a warning status, so the failures are not hidden.

Packaging & Installation

[PLAT-268]

The Diskover Admin package now verifies that the required Python virtual environment exists before applying an upgrade, and stops the installation early with clear guidance if it is missing — preventing partially-applied upgrades. The package also keeps Diskover Admin and Diskover Web on matching versions during upgrades.

[PLAT-269]

The Diskover task worker (diskoverd) package received the same safeguards: a pre-installation check that the required Python virtual environment exists, early failure with guidance if it is missing.

Upgrade Notes

• API — /list and /latest default change: Both endpoints now return only completed crawls by default. To include in-progress indices in /list, add include_incomplete=1 (also accepts true, yes, or y). Integrations that rely on seeing in-progress indices should add this parameter.

• SSO-only login: The new OAUTH2_HIDE_LOCAL_LOGIN option is disabled by default; enable it in Diskover Admin only if you want to hide the local login fields.

• RPM prerequisite: Diskover Admin and diskoverd upgrades now require the Python virtual environment at /opt/python-venv-diskover to exist; the installer stops early if it is absent.