11.5 Release Notes

This release includes new features, bug fixes, and enhancements to the product.

Important

Android OS 10 Deprecation Notice

Starting with the 11.6 release, Android OS 10 and older will no longer be supported.

SysTrack Snapshot API Deprecation

Support for the SysTrack Snapshot API ends in early 2026. This legacy API was used in earlier versions of Assist for ITSM. Please upgrade to the latest version of Assist for ITSM to ensure continued functionality. Check future release notes for updates as the change approaches.

Tile Mode Deprecation

Tile Mode for dashboards has been deprecated. Customers are encouraged to transition away from dashboards that relied on Tile Mode functionality.

Agent Version Support Changes

  • Support for version 10.10 agents ends on October 20, 2025.
  • Support for version 10.11 agents ends on January 19, 2026.

Cloud Agent Installer Changes

Starting with the 11.5 release, Agent installers will be provided as a ZIP archive containing the MSI, a configuration file, and the VC_redist installers. The MSI will no longer be tenant-specific; instead, it will require the configuration file to be passed as a parameter during installation. This change enables easier access to previous agent versions and lays the groundwork for controlled rollout of specific versions. Agent upgrades via the Deployment feature remain unaffected, and macOS/Linux agents already follow this ZIP format.

Visualizer Application Latency Data Changes

Starting with the 11.6 release, Application Latency data in Visualizer will only be calculated for subnets containing more than five systems. This change is aimed at improving scalability and performance within the Application Latency section.

New

Dismiss Anomalies

You can now dismiss anomalies from the Anomalies page so that IT teams can focus on the most pressing issues within the estate. Dismissed anomalies are hidden from graphs, can be reverted to active, and include full note tracking and activity logging.

Custom Threshold for Anomaly Detection

SysTrack Administrators can now define the minimum number of systems required for an anomaly to be detected. This threshold can be set as a whole number or as a percentage.

System Group Condition for Tool Schedules

You can now add conditional logic to tool schedules in Configure > System Configuration > Roles, so that scheduled tools run only on applicable groups.

Services Available for macOS in Black Box

When viewing a macOS system in Resolve > Black Box, you can select Services from the drop-down list to view the state of macOS services in the selected focus time.

Application Hang Detection for macOS

Application hang events on macOS can now trigger sensors in Resolve. The detection logic aligns with macOS Activity Monitor, providing consistent validation of application responsiveness for end users.

NOTE: This functionality requires Accessibility permission. If the permission is not granted, application hang events will not be collected.

New Option to Limit Database Uploads for Offline Resolve

A new setting in Database Maintenance under Configure allows you to limit database snapshot uploads to one per day. It reduces network impact by preventing excessive uploads triggered by frequent shutdowns and logouts, such as in shared workstation scenarios. However, it may result in outdated information being available for offline troubleshooting.

The names and tooltips for existing settings have also been updated to more accurately reflect system behavior.

Device Azure Join Status Is Now Collected

The agent now records how a device is joined to Azure and adds this information as a new column in the SASCFG table.

Reuse NLQ Queries in Dashboards

Users can now save NLQ-generated queries, with or without visualizations, and reuse them as building blocks in dashboards.

SysTrack API Endpoints for Engagements and Surveys

The SysTrack API includes new endpoints that allow you to:

  • Retrieve lists of your engagements and trigger them.
  • Retrieve lists of survey questions and survey results.

For full details, see the API documentation (customer sign-in required).

Fixed

  • The Deployment tab of the Assignments page in Configure now updates immediately after a stage change from the modal dialog, eliminating the need to switch tabs to see newly added deployment groups. (13131)
  • The agent no longer crashes during SABATTERY inventory when the \.root\WMI namespace is inaccessible. Null pointer exceptions during WMI interaction are now handled safely. (13034)
  • Group Policy events are now consistently collected into the SAGROUP_POLICY_PROCTIMES table, even when the saved BookmarkRecordID is higher than the current Event Record ID. (12945)
  • User Defined Inventory (UDI) items targeting HKCU registry paths are now correctly written to the agent database. (13041)
  • Updated software inventory logic to collect version and publisher details for Windows Store Apps. These values are now retrieved from the Registry path HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages and the associated AppxManifest.xml file. (10175)
  • Long-running custom views no longer block the SQLite engine. Other data collection continues uninterrupted, reducing agent restarts and fault reporting. (12583)
  • Improved Thermals collection to prevent gaps in SASYS records caused by delays in WMI calls. Thermals are now collected via a dedicated thread that sends CPU temperature data to SASYS. If the message is not received in time, a Trace 5 log entry—“Unable to receive CPU Temperature in a timely manner”—is recorded. (12738, 13262)
  • Updated the VUXENAPP logic in the Citrix Apps and Desktop Management DEX Pack to prevent negative values from appearing in the Average Session Health column on the Published Apps Health and Session Concurrency tabs. (11540)
  • Usage collection for integrated Intel GPUs on macOS systems in SAGPU now reports accurate values. (12334)
  • The agent now tracks when data is available for views that are ready to condense. If it cannot condense the data when the view runs, it will send the data the next time views are checked and condensing is possible, ensuring timely updates to the master dataset. (13290)
  • The agent now correctly handles collection extensions of type Collect. (13222)
  • CSV exports from NLQ queries now return the correct file format. (12618)
  • Configurations with multiple associated Config Rules can now be deleted successfully. (13269)
  • Improved image rendering on the Manage Users and Groups page when accessing the UI from virtual machines. (12839)
  • The agent on upgraded systems now starts reliably with improved data integrity for collection extensions. (13185)
  • The agent now correctly detects the status of the Cofense Reporter add-in in Outlook. (13293)

  • Resolved anomalies page loads faster when there are thousands of resolved anomalies. While the data loads, users see an animation to indicate progress.

  • Improved handling of aggregated sensor data in the Anomalies History graph.

  • The agent on non-Windows systems now automatically condenses on daily timers as expected. (13741)
  • The SysTrack Tray App Not Running sensor now reflects the current tray app state accurately in situations where the local system time was previously set to a future date. (13385)
  • Agent restart after time change now completes without generating crash dumps. (13611)
  • App records now condense correctly after the local system time was previously set to a future date. (13907)
  • Agent now runs reliably when the Ports and Ping threads operate on a shared map simultaneously. (13894)
  • The agent now collects registry keys that contain only a default value when "Include All Values" is selected in User Defined Inventory. (13340)
  • Visualizer grid exports now include IOPS and MIPS values in parentheses, matching the data displayed in the UI. (13960)

  • System views now correctly remove outdated data when child systems no longer return mapped drive information. (9344)

Changed

Visualizer Data Recalculation Threshold Reduced to 15 Days

In Visualizer, if you have not accessed data for a group in the past 15 days, there while be a short delay when you access it again while the data is being recalculated. The threshold has been reduced from 30 to 15 days to improve effectiveness.

Removal of Retired Feature Permission Settings

Retired feature permission settings have been removed from the App Features page to streamline configuration options and make it easier for customers to understand group permission settings.

Update to Factory Roles

Outdated factory roles have been removed from the product that are no longer relevant. A new Windows 11 factory role has been added to support updated customer environments.

These roles will be retired:

Microsoft Exchange Server 2010 Microsoft SQL Server 2008 Microsoft SQL Server 2012 Microsoft SQL Server 2012 R2 Windows 7 Windows 8 Windows 8.1 Windows Server 2008 Windows Server 2008 R2 Windows Server 2012 Windows Server 2012 R2 Windows Vista Windows XP

Improvements to Variable Editing in Roles

Variable editing in roles now includes a modal-based search and a clearer button for adding new variables. Sensors associated with each variable are also visible during search.

Updates to Inventory RPT Tables

The Battery, Logical_Disk, Operating_System, and System_Config Inventory RPT tables have been updated to include recently added or previously missing collection items.

Visualizer Thresholds and Baselines Updated

Baseline and threshold values in Visualizer have been updated to reflect modern computing standards and reduce unnecessary warning indicators. IOPS now reference a typical SSD drive, and MIPS are based on a typical Core i7 system. Tooltip content has also been revised for clarity.

.NET Version Detection Beyond 4.0 for Application Dependency Tracking

The agent now uses a new method to detect the .NET version used by an application. The detected version is stored in a new column in the SAAPPINFO table. The new approach is more reliable and automatically supports future .NET versions without requiring agent updates.

Anomaly Detection Switched to Single Sensor Logic

Anomalies are now triggered when a single sensor (or sensor instance) exceeds its normal range across multiple machines. Multi-sensor anomalies are no longer detected. Existing active multi-sensor anomaly events will be automatically resolved immediately following the upgrade.

Timeout Configuration for Surveys

Admins can now configure timeout logic for all survey schedule types to prevent users from receiving repeated surveys within a short time frame.

Online Status Column in All Systems Grids in Prevent

All systems grids in Prevent now include an Online status column, making it easier to assess system availability during investigations.

Improved Display for Webhook Recipients in Notifications

Webhook recipients in Prevent and Configure notifications no longer display non-functional mailto links. Instead, webhook URLs are shown in tooltips.

Updated Authentication Options for Sensor and Anomaly Notification Webhooks

The unauthenticated (“Off”) option for webhook authentication has been replaced with a “Specify Authentication via a Header” option. This enables secure methods such as API keys and bearer tokens, while still allowing unauthenticated testing when needed. Existing notification webhooks will continue to function.

Improved FQDN Highlighting in Resolve Header

Double-clicking the FQDN in the Resolve header now highlights only the FQDN, excluding additional labels.

Updated Lakeside Logo

The Lakeside logo was updated in several areas of SysTrack, including the navigation rail, application icon, and notifications.

BSOD Insights DEX Pack Lite Updates

Updated the BSOD Summary pane with information about trends showing that specific hardware models or operating systems are more frequently affected by all or specific BSODs. More information about the update will be included in the October 2025 DEX and Actions release notes.

Factory Role Updates

Default Disk Alarm thresholds have been updated to reflect modern mid-range SSD drives.