Nuix Investigate v100.2.0

This section highlights the updates implemented in Nuix Investigate for this release.

Shared services installer

Before installing Nuix Automation, Nuix Investigate, or Nuix ECC, you must run the Shared Services installer to install Keycloak for authentication and PostgreSQL for database management. PostgreSQL replaces MariaDB.

Created a Shared Services installer that installs the latest versions of both Keycloak and PostgreSQL.

Provided meaningful error resolutions when validation fails occur during installation.

Shared Services installer sets password requirements and creates a Nuix realm in Keycloak.

Shared Services selected install language sets the default language for Nuix Investigate users.

A default set of Keycloak group privileges are included with installation.

If not already installed, a current version of the Microsoft Visual C++ (MSVC) 2015 Redistributable DLL is installed automatically as a requirement to run PostgreSQL.

Keycloak and PostgreSQL can be uninstalled.

Web apps installer

The Web Applications installer is needed to install Nuix Investigate and Nuix Automation. ECC uses its own installer.

Created a Web Applications installer that installs both Nuix Investigate and Nuix Automation.

Nuix-MariaDB installer was removed.

Included Enable Remote Connections option to allow PostgreSQL to be installed on a separate machine.

Keycloak authentication

Users authenticate using a single sign on capability with Keycloak rather than signing in to individual applications. Once you are logged in to Keycloak, you have access to your different Nuix applications.

Added the ability to configure SSL for Keycloak.

The multimedia queue is now managed by Keycloak.

API tokens used for promoting items to Nuix Discover are stored in Keycloak.

User management is performed in Keycloak.

Users are associated with groups in Keycloak.

The Privacy message is now displayed before entering licensing and language preferences.

Added the ability to edit the landing page after logging out.

Resetting a user's password is performed using Keycloak.

Added Keycloak connection information window to Investigate Installation Wizard.

Password policy and Brute force protection has been moved from UMS to Keycloak.

Nuix Investigate can function from any configured Keycloak realm.

Restructured and streamlined list of remaining UMS group privileges in Keycloak.

A Nuix Investigate client JSON file can be imported into Keycloak via the Admin Console.

Database migration is supported when upgrading from v9.4.x.

Keycloak Admin Console now captures all events in Keycloak event logs.

Accessibility

It is important to continually strive for accessible products.

Added alt. text to all user interface image elements to improve accessibility.

Rearranged and updated user interfaces to be more user accessible.

Chat improvements

We continue to enhance the Chat Bubble experience with enhancements.

We now escape email addresses when we build queries to avoid syntax errors during chat bubble view.

In the Chat Preview window, all active participants in the conversation are listed in alphanumeric order.

Derby control

Derby control is a new feature of Nuix Neo that allows both simple and compound Lucene/Derby based cases to become sharable across Nuix services. With Derby control, the following features are now available for Lucene/Derby based cases.

Concurrent case read/write access between Nuix services including Nuix Automation, Nuix Investigate, and Nuix RESTful Service, without forcing a logout.

Concurrent data access: Multiple users can access the same data at the same time without any data corruption of loss ofintegrity.

NLP enhancements

Made improvements in working with items analyzed with Natural Language Processing (NLP) datasets.

All NLP Dictionary metadata is shown as well as Risks and Skill Sets, if any.

You can expand all or collapse all NLP categories.

A search NLP filter was added to find NLP data within a case and show the NLP data counts.

Proximity range filter added to NLP metadata and search panels to show the most relevant information.

Tag management

Improvements were made to tag management.

The Tag management UI was updated to ease in searching, creating, and editing tags.

Added a new method to create nested sub-tags. Using a pipe | to create nested tags is no longer allowed.

A user can now perform tag management without an item being selected.

Increased performance when requesting tags list on the Grid.

Added tag tree inheritance option in the Configuration Utility.

Tags are shown with specific colors which can be changed as desired.

General enhancements

The Nuix Engine was updated to version 100.2.0.

Updated to the latest Java 11 version.

Enhancements made to service status page within the Nuix Configuration Utility.

Elasticsearch version has been upgraded to v7.17.

When clicking on a location pin on a map, the search no longer updates the query unless you have auto-update query enabled or you select to update the query.

You can now have the Directory Browser privilege without having the Ignore Item Security privilege.

Moved Encryption Key out of bootstrap.properties to avoid manual process while upgrading.

Implemented paging in the item details pane to improve Investigate Connections performance.

Added links to the Configuration Utility to the Licenses and Language window and the Global Header.

An HMAC Access Key is no longer needed.

The user's avatar is updated to include the initials of first and last name, if available.

A reverse proxy or load balancing setup for high availability is now supported by Nuix.

Upgraded to latest Spring Boot version with updates to CORS configuration.

Gateway CORS allowed origins property now allows use of * wildcard.

Added button to UMS to import and sync groups from Keycloak.

If a multimedia item does not have an MD5 hash and exceeds the maximum size, and an error is shown.

Improved hover text displays for thread endpoint state icons.

If a user does not have access to an item in a family tree, viewing the item name is restricted.

Promoting to Nuix Discover now functions with any license with workers.

Added a new ship search filter to give users a simplified search starting point.

Separated Nuix Investigate and Nuix Automation related Engine logs in Configuration Utility Diagnostics.

Updates made to the Nuix Engine to ensure that CLS licenses are properly released.

Improved performance of searches in the Breakout Analytic.

Several Case Inventory and License Server properties are duplicated in the Config Utility Global settings.

You can now view Nuix Engine diagnostics related to Nuix Investigate and Nuix Automation.

Added configuration of Investigate Connections maximum number of nodes onto the Configuration Utility.

Increased performance of downloading files over 2 GB.

Resolved issues

You can now search all Thread Endpoint types when using Query Builder.

Upgraded to the latest version of Sprint Boot and Tomcat to avoid security errors.

After deleting a snapshot, it is no longer visible or active in the Configuration Utility.

The session does not time out while the user is restarting services.

Canvas pre-filter now allows filtering via Search Text or Communication Type without error.

Cancelling the grid report now completely stops the report from generating.

When Nuix Investigate is configured to have mutual TLS, the DB configuration page is available.

Search term reports can now be performed on Elastic cases.

When you download an excel file with macros (.xlsm) the file is correctly downloaded with macros.

When setting the investigator time zone on an ES case in an HA environment, it is now set for all instances to which the user is currently routed.

Known issues

Investigate:

Auto-save can cause issues in Config Utility for Chrome and Firefox.

Workaround: Do not use auto-save in Config Utility.

If the date range or date trending analytic window is opened and then closed before the app completely downloads to the new window, date range or date trending analytics will show in the dashboard as being locked.

Workaround: If the user accidentally opens the window, let it load until they see the progress bar and then it is safe to close. If the window is closed before it finishes loading try to unlock the analytic in the dashboard. If that doesn't work, either reload the page or open the analytic again in a new tab, let it finish loading, and then close it.

If a user's session expires with Nuix Investigate while actively logged in and using UMS, the user can continue to remain active within UMS despite the expired session. The user's session will eventually be terminated once the timeout period for idle cases is reached (approximately 10 minutes).

Workaround: To end the user's session, they must either wait until the timeout period for idle cases is reached and ends their session automatically or they can login to Nuix Investigate, then log out to manually end all sessions associated with their account, including the hung UMS session.

If a script is executed via a workflow that updates tags, folders, or secured fields, the pane will not immediately reflect the update from the script.

Workaround: Opening the tag management modal fetches the tags.

If a metadata profile is updated or deleted on the server while a case is open, any search that is performed using the specified metadata profile will initially fail.

Workaround: After the initial failure, the list of metadata profiles known to Nuix Investigate will refresh. Rerun the initial search to return results.

The View PDF function is unavailable for certain items. This generally indicates that the Printed Image processing option was not selected during ingestion.

Workaround: Export the printed image store for affected items using Nuix Workstation, or select the Populate PDF Stores option on the Review tab within the template editor in Nuix Directory and reprocess the evidence.

The Timeline analytic, when open in a new window, appears blank and unresponsive if the search is reset and a new query is performed.

Workaround: Close and reopen the analytic.

The Timeline analytic, when viewed in the Dashboard View, does not auto-update when the item selection changes within the Grid or Review Views.

Workaround: Open the Timeline analytic as a new window for proper functionality.

Cases that include a 90 level deep nested tag cannot be opened in Firefox version 46 or above.

Refreshing the page after navigating to an App Management page from a case will cause the case breadcrumb link to disappear.

Installation:

Linux headless installation with no var file provided causes an error.

Workaround: Provide a var file while installing.

On upgrade from a Nuix Investigate version where MariaDB was previously configured, the MariaDB connection prompt is displayed. This happens when upgrading from 8.4.2.1 and may happen when upgrading from other versions.

Workaround: If a user enters the same valid MariaDB credentials from previous install, the upgrade will proceed.

If upgrading from a version earlier than 7.8, the Java Options defined within the Configuration Tool for the Inventory Management service will not be persisted after the upgrade.

Workaround: Ensure any custom settings are backed up before performing the upgrade.

Canvas:

Applying Recipient Type filters from the Custom Filter Panel in the Canvas view returns incorrect counts for Hidden Relationships.