What's new in Cloudera Data Visualization 8.1.5

Cloudera Data Visualization 8.1.5, released on July 31, 2026 introduces usability improvements, UI updates, and bug fixes to enhance the overall user experience and product stability.

New features and improvements

Security and remote connections

VIZ-3461 – SSL certificate verification and URL allowlisting for backend requests: Cloudera Data Visualization now provides additional security controls for backend HTTP requests. Administrators can enable TLS/SSL certificate verification for data imported from remote URLs and restrict imports to approved URL prefixes. Non-Bedrock AI profiles now also provide per-profile certificate verification controls for completion and embedding endpoints. Existing AI profiles are automatically migrated with certificate verification enabled. Default behavior for other connections remains unchanged to preserve backward compatibility.
VIZ-4185 – URL allowlist for remote data imports: Administrators can now control which remote sources are permitted for data import by configuring approved URL prefixes in Advanced Site Settings. Restricting imports to approved sources improves security by preventing data imports from unauthorized URLs. If a URL does not match an approved prefix, an error message is displayed. By default, the allowlist includes the example URLs provided in the Add Data dialog.

Data modeling and formatting

VIZ-3755 – Improved user interface for the Search Modeling tab: The Search Modeling tab in Datasets has been redesigned with an improved user interface.
VIZ-3972 – Updated field editing and display format dialogs: The Edit Dataset Fields and Visual Shelf Display Format modals have been modernized for improved usability. When no format is specified, numeric values now display up to six significant digits by default. Adding dimension values on the Colors tab has also been simplified with a new inline input.

Dashboards and visualizations

VIZ-3536 – Non-data-driven visuals now render without a manual refresh: When Refresh Visuals Manually is enabled, visuals that do not depend on query data (Rich Text, AI Visual, Link, Action, Search, and Extension visuals) now render immediately. Data-driven visuals continue to require a manual refresh.
VIZ-3968 – Improved Dashboard Template modal access and behavior: You can now open the Dashboard Template modal from SQL > Connection Explorer > Datasets, in addition to accessing it from the Data page. The Explore Templates icon is displayed only to users with the required Edit permissions (ds_manage or ds_appedit). Additionally, when you reopen the Change Selections dialog for an existing template-based dashboard, the previously selected columns are now restored correctly.
VIZ-4065 – MapLibre support for Interactive Map visuals: MapLibre is now available as a Map Server option for Interactive Map visuals. MapLibre uses OpenFreeMap tiles by default, allowing you to create interactive maps without a Mapbox account or token. It includes Liberty, Positron, Bright, Dark, and Fiord basemap styles and supports custom MapLibre-compatible style URLs. All existing map layers and PDF and PNG exports are supported.

Administration, monitoring, and performance

VIZ-2883 – Improved caching for CSV and Excel downloads: CSV and Excel download results are now cached only when the dataset is within the limit set by the Maximum data rows for visuals site setting. Larger datasets can still be downloaded, but are not cached. This helps prevent memory and performance issues. As a result, repeated downloads of large datasets might take slightly longer to process.
VIZ-3843 – Redesigned Daily Usage tab: The Daily Usage tab on the Logs and Usage page has been redesigned for improved usability. Activities, users, and dashboards now appear on separate tabs with item counts, making usage data easier to navigate. The updated view also provides a simplified day-range selector and displays a notification if usage data cannot be retrieved.
VIZ-4305 – Sidebar navigation added to the Logs and Usage page: The Logs and Usage page now uses a sidebar instead of a top navigation bar for switching between sections such as Activity Log, Usage Analytics, Daily Usage, and Server Settings.

Behavioral changes

VIZ-4206 – HTTP access logs now use JSON Lines format

HTTP access logs are now generated in JSON Lines (JSONL) format instead of Apache Common Log Format (CLF), providing structured request, timing, TLS, and client IP information.

You can customize the log output by setting the CADDY_LOG_CONFIG environment variable. For the available configuration options, see log (Caddyfile directive) in the Caddy Documentation.

Fixed issues

VIZ-3946 – Disabled Test button now provides guidance when importing connections: When importing connection details from a JSON file, the disabled Test button did not explain why testing was unavailable. A tooltip now clarifies that you must import the connection before testing it.
VIZ-4063 – Error messages now display correctly in the Create New Dataset dialog: Errors that occur when creating a dataset from a data connection are now displayed within the Create New Dataset dialog, making them easier to read and address.
VIZ-4182 – Navigation bar now appears on error pages: The navigation bar could be missing from some error pages, preventing users from navigating to other areas of the application. The navigation bar is now displayed consistently on all error pages.
VIZ-4214 – New and cloned data connections now become active automatically: Fixed an issue where newly created or cloned data connections appeared as inactive in the sidebar until the page was refreshed. New and cloned data connections now display as active immediately after creation.
VIZ-4220 – Access controls are now enforced for user profile updates: The user profile REST API now requires administrator privileges to modify another user’s profile or update sensitive profile fields. Existing scripts or integrations that perform these actions must use administrator credentials.
VIZ-4221 – Improved security for URL data imports: URL data imports now apply security controls for permitted destinations and TLS certificate verification, preventing unauthorized requests to internal network resources. Administrators can configure these controls in the site settings.
VIZ-4224 – Authentication tokens are no longer exposed in application logs: Fixed a security issue where failed JSON Web Token (JWT) validation could cause authentication tokens to be written to application logs. Authentication tokens are now excluded from log messages.
VIZ-4225 — Account lockout after repeated failed login attempts: After five consecutive failed login attempts, the user account is temporarily locked for 20 minutes. You can try to log in again after the lockout period ends.
VIZ-4234 – Login audit records are now generated for all authentication methods: Cloudera Data Visualization now records successful and failed login attempts for all supported authentication methods, including password-based authentication, Kerberos, LDAP, SAML, and OIDC. This provides more complete security auditing across authentication methods.
VIZ-4236 – Warning now displayed for unencrypted email connections: The email settings now display a warning when the email protocol is set to None, indicating that emails and attachments will be sent over an unencrypted SMTP connection. The default protocol remains TLS.
VIZ-4260 – Incomplete table joins are no longer saved: When users exited or canceled a table join before completing its configuration, the partially joined table could still be added to the data model. Incomplete joins are now discarded, preventing unintended changes.
VIZ-4261 – Reload Data button now appears after data model changes: When Show Data was enabled in the Data Model editor, the Reload Data button did not appear after adding, joining, or deleting a table. The button now appears correctly, allowing users to refresh the data preview after changing the data model.
VIZ-4262 – Datasets now sort correctly by creation and update date: On the Data page, sorting datasets by Created or Last Updated could display them in the wrong order. Datasets are now sorted correctly by the selected date.
VIZ-4263 – Show Data now works correctly with multiple table joins: In the Data Model editor, Show Data could return an error when the model contained more than two joined tables. The data preview now displays correctly for data models with multiple table joins.
VIZ-4306 – Caddy access log volume has been reduced: Caddy access logs now exclude response headers and most request headers by default, retaining only Referer and User-Agent. This reduces log file size and changes the default log structure. You can customize the logging configuration using the CADDY_LOG_CONFIG environment variable.
VIZ-4333 – Refresh Schedule changes for data extracts were not saved: Fixed an issue where changing the refresh schedule interval for a data extract did not update the Data Extracts table. Reopening the Edit Data Extract modal displayed the original interval because the change had not been saved.
VIZ-4334 – Improved access controls for administrative profiling: Access to administrative profiling is now restricted to superusers. Users with the Database Admin role can no longer access this functionality unless they also have superuser privileges.
VIZ-4345 – Refresh Visuals button no longer overlaps dashboard titles: When viewing a dashboard in app mode, the Refresh Visuals button could overlap the dashboard title. The button is now positioned correctly.
VIZ-4346 – Numeric columns sort correctly when display formatting is applied: On the Data Model tab, numeric columns could be sorted incorrectly when Apply Display Format was enabled because sorting used the displayed values instead of the underlying numeric values. Numeric columns are now sorted by their underlying values, regardless of display formatting.
VIZ-4351 – Dataset details did not refresh after SQL changes: Fixed an issue where modifying the SQL underlying a dataset did not refresh the Fields, Data Model, and other dependent tabs on the Dataset Detail page. This could cause these tabs to display outdated information and errors when using Show Data. Saving SQL changes now opens the Refresh dataset table column information modal and correctly updates all dependent views.
VIZ-4352 — Improved security for AI profile validation: Access to AI profile validation is now restricted to administrators, and additional input validation prevents unauthorized operations.
VIZ-4357 – Joined table headers display correctly in the data preview: When users clicked Show Data on the Data Model tab, table group headers for joined datasets could become clipped or misaligned when scrolling horizontally, making it difficult to identify the source table for each column. The headers now remain aligned with their columns, and separators clearly distinguish columns from different tables.
VIZ-4358 – Improved access controls for server information and data imports: Access controls and file path validation have been strengthened to prevent unauthorized access to sensitive server configuration information and files during data import.
VIZ-4365 – WebServer Log polling stops when the tab is not visible: Log polling now pauses automatically when you leave the WebServer Log tab and resumes when you return, preventing unnecessary background requests.
VIZ-4381 – AI profile validation restricted to administrators: As a security hardening measure, access to the AI profile validation endpoint is now restricted to administrators. Previously, the endpoint was available to all authenticated users.

Fixed Common Vulnerabilities and Exposures

The following Common Vulnerability and Exposures (CVE) have been fixed in Cloudera Data Visualization 8.1.5.