diff --git a/.github/workflows/build-assets.yml b/.github/workflows/build-assets.yml
index 8c416335ddc..2525dfc74fc 100644
--- a/.github/workflows/build-assets.yml
+++ b/.github/workflows/build-assets.yml
@@ -188,7 +188,7 @@ jobs:
         run: |
           mkdir -p ${{ needs.preamble.outputs.folder_build }}
           echo "${{ secrets.SIGNING_SECRET }}" > ${{ needs.preamble.outputs.folder_build }}/private.key
-          plugins=("CASSANDRAEMBED" "COUCHBASEEMBED" "ECLBLAS" "H3" "JAVAEMBED" "KAFKA" "MEMCACHED" "MONGODBEMBED" "MYSQLEMBED" "NLP" "REDIS" "REMBED" "SQLITE3EMBED" "SQS" "PLATFORM" "CLIENTTOOLS_ONLY")
+          plugins=("CASSANDRAEMBED" "COUCHBASEEMBED" "ECLBLAS" "H3" "JAVAEMBED" "KAFKA" "MEMCACHED" "MONGODBEMBED" "MYSQLEMBED" "NLP" "PARQUETEMBED" "REDIS" "REMBED" "SQLITE3EMBED" "SQS" "PLATFORM" "CLIENTTOOLS_ONLY")
           for plugin in "${plugins[@]}"; do
             sudo rm -f ${{ needs.preamble.outputs.folder_build }}/CMakeCache.txt
             sudo rm -rf ${{ needs.preamble.outputs.folder_build }}/CMakeFiles
diff --git a/.github/workflows/build-vcpkg.yml b/.github/workflows/build-vcpkg.yml
index eb49d9f13e9..3707b351c1c 100644
--- a/.github/workflows/build-vcpkg.yml
+++ b/.github/workflows/build-vcpkg.yml
@@ -175,7 +175,7 @@ jobs:
           mkdir -p ${{ needs.preamble.outputs.folder_build }}
           declare -a plugins
           if [ ${{ needs.preamble.outputs.include_plugins }} == "ON" ]; then
-              plugins=("CASSANDRAEMBED" "COUCHBASEEMBED" "ECLBLAS" "H3" "JAVAEMBED" "KAFKA" "MEMCACHED" "MONGODBEMBED" "MYSQLEMBED" "NLP" "REDIS" "REMBED" "SQLITE3EMBED" "SQS" "PLATFORM")
+              plugins=("CASSANDRAEMBED" "COUCHBASEEMBED" "ECLBLAS" "H3" "JAVAEMBED" "KAFKA" "MEMCACHED" "MONGODBEMBED" "MYSQLEMBED" "NLP" "PARQUETEMBED" "REDIS" "REMBED" "SQLITE3EMBED" "SQS" "PLATFORM")
           else
               plugins=("PLATFORM")
           fi
diff --git a/dali/base/dadfs.cpp b/dali/base/dadfs.cpp
index 86572a03605..cbe2f957fc8 100644
--- a/dali/base/dadfs.cpp
+++ b/dali/base/dadfs.cpp
@@ -5873,6 +5873,13 @@ class CDistributedSuperFile: public CDistributedFileBase<IDistributedSuperFile>
                 const char *ecl = file.queryAttributes().queryProp("ECL");
                 if (!isEmptyString(ecl))
                     addPropIfCommon(*at, "ECL", ecl);
+                IPropertyTree *_remoteStoragePlane = file.queryAttributes().queryPropTree("_remoteStoragePlane");
+                if (_remoteStoragePlane)
+                {
+                    // NB: CDistributedSuperFile sub-files in different environments are not permitted
+                    if (!at->hasProp("_remoteStoragePlane"))
+                       at->setPropTree("_remoteStoragePlane", LINK(_remoteStoragePlane));
+                }
             }
             unsigned np = file.numParts();
             if (0 == width)
diff --git a/dali/base/dautils.cpp b/dali/base/dautils.cpp
index 88e71fa41a4..8affed148fd 100644
--- a/dali/base/dautils.cpp
+++ b/dali/base/dautils.cpp
@@ -3612,8 +3612,10 @@ void addStripeDirectory(StringBuffer &out, const char *directory, const char *pl
     }
 }
 
+static CConfigUpdateHook directIOUpdateHook;
 static CriticalSection dafileSrvNodeCS;
 static Owned<INode> dafileSrvNode;
+
 void remapGroupsToDafilesrv(IPropertyTree *file, INamedGroupStore *resolver)
 {
     FileDescriptorFlags fileFlags = static_cast<FileDescriptorFlags>(file->getPropInt("Attr/@flags"));
@@ -3625,15 +3627,14 @@ void remapGroupsToDafilesrv(IPropertyTree *file, INamedGroupStore *resolver)
         Owned<IStoragePlane> plane = getDataStoragePlane(planeName, true);
         if ((0 == plane->queryHosts().size()) && isAbsolutePath(plane->queryPrefix())) // if hosts group, or url, don't touch
         {
+            auto updateFunc = [&](const IPropertyTree *oldComponentConfiguration, const IPropertyTree *oldGlobalConfiguration)
             {
                 CriticalBlock b(dafileSrvNodeCS);
-                if (nullptr == dafileSrvNode)
-                {
-                    auto externalService = k8s::getDafileServiceFromConfig("directio");
-                    VStringBuffer dafilesrvEpStr("%s:%u", externalService.first.c_str(), externalService.second);
-                    dafileSrvNode.setown(createINode(dafilesrvEpStr));
-                }
-            }
+                auto externalService = k8s::getDafileServiceFromConfig("directio");
+                VStringBuffer dafilesrvEpStr("%s:%u", externalService.first.c_str(), externalService.second);
+                dafileSrvNode.setown(createINode(dafilesrvEpStr));
+            };
+            directIOUpdateHook.installOnce(updateFunc, true);
 
             Owned<IGroup> group;
             if (cluster.hasProp("Group"))
@@ -3646,9 +3647,15 @@ void remapGroupsToDafilesrv(IPropertyTree *file, INamedGroupStore *resolver)
                 group.setown(resolver->lookup(planeName, defaultDir, groupType));
             }
 
+            Linked<INode> dafileSrvNodeCopy;
+            {
+                // in case config hook above changes dafileSrvNode
+                CriticalBlock b(dafileSrvNodeCS);
+                dafileSrvNodeCopy.set(dafileSrvNode);
+            }
             std::vector<INode *> nodes;
             for (unsigned n=0; n<group->ordinality(); n++)
-                nodes.push_back(dafileSrvNode);
+                nodes.push_back(dafileSrvNodeCopy);
             Owned<IGroup> newGroup = createIGroup((rank_t)group->ordinality(), &nodes[0]);
             StringBuffer groupText;
             newGroup->getText(groupText);
diff --git a/dali/dfu/dfurun.cpp b/dali/dfu/dfurun.cpp
index 537bad7c106..72989b5ed34 100644
--- a/dali/dfu/dfurun.cpp
+++ b/dali/dfu/dfurun.cpp
@@ -667,7 +667,7 @@ class CDFUengine: public CInterface, implements IDFUengine
         if (write)
             auditflags |= DALI_LDAP_WRITE_WANTED;
 
-        SecAccessFlags perm;
+        SecAccessFlags perm = SecAccess_None;
         IClusterInfo *iClusterInfo = fd->queryClusterNum(0);
         const char *planeName = iClusterInfo->queryGroupName();
         if (!isEmptyString(planeName))
@@ -697,6 +697,7 @@ class CDFUengine: public CInterface, implements IDFUengine
             Owned<IConstEnvironment> env = factory->openEnvironment();
             if (env->isDropZoneRestrictionEnabled())
                 throw makeStringException(-1,"Empty plane name.");
+            perm = SecAccess_Full; //Not able to check DropZone permissions without a plane name
 #else
             throw makeStringException(-1,"Unexpected empty plane name."); // should never be the case in containerized setups
 #endif
diff --git a/dockerfiles/image.sh b/dockerfiles/image.sh
index 9df935ae896..a147eb22637 100755
--- a/dockerfiles/image.sh
+++ b/dockerfiles/image.sh
@@ -26,7 +26,7 @@ globals() {
     popd
     DOCKER_USERNAME="${DOCKER_USERNAME:-hpccbuilds}"
 
-    CMAKE_OPTIONS="-G Ninja -DVCPKG_FILES_DIR=/hpcc-dev -DCPACK_THREADS=$(docker info --format '{{.NCPU}}') -DUSE_OPTIONAL=OFF -DCONTAINERIZED=ON -DINCLUDE_PLUGINS=ON -DSUPPRESS_V8EMBED=ON"
+    CMAKE_OPTIONS="-G Ninja -DCPACK_THREADS=$(docker info --format '{{.NCPU}}') -DUSE_OPTIONAL=OFF -DCONTAINERIZED=ON -DINCLUDE_PLUGINS=ON -DSUPPRESS_V8EMBED=ON"
 
     if [ "$TAG_BUILD" -eq 1 ]; then
         HPCC_BUILD="hpcc_build_$MODE-$GIT_BRANCH"
@@ -189,6 +189,7 @@ reconfigure() {
 configure() {
     local options=$1
     echo "--- cmake config $options ---"
+    run "cp -r -n /hpcc-dev/vcpkg_installed /hpcc-dev/build/vcpkg_installed"
     run "cmake -S /hpcc-dev/HPCC-Platform -B /hpcc-dev/build $options"
 }
 
diff --git a/docs/EN_US/ContainerizedHPCC/ContainerizedMods/ContainerLogging.xml b/docs/EN_US/ContainerizedHPCC/ContainerizedMods/ContainerLogging.xml
index 5cbef70cf29..51787bcf528 100644
--- a/docs/EN_US/ContainerizedHPCC/ContainerizedMods/ContainerLogging.xml
+++ b/docs/EN_US/ContainerizedHPCC/ContainerizedMods/ContainerLogging.xml
@@ -619,7 +619,7 @@ ContainerLog
       <title>Target Audience Filtering</title>
 
       <para>The availble target audiences include operator(OPR), user(USR),
-      programmer(PRO), audit(ADT), or all. The filter is controlled by the
+      programmer(PRO), monitor(MON), audit(ADT), or all. The filter is controlled by the
       &lt;section&gt;.logging.audiences value. The string value is comprised
       of 3 letter codes delimited by the aggregation operator (+) or the
       removal operator (-).</para>
@@ -634,7 +634,7 @@ ContainerLog
       <title>Target Category Filtering</title>
 
       <para>The available target categories include disaster(DIS), error(ERR),
-      information(INF), warning(WRN), progress(PRO), metrics(MET). The
+      information(INF), warning(WRN), progress(PRO), event(EVT), metrics(MET). The
       category (or class) filter is controlled by the
       &lt;section&gt;.logging.classes value, comprised of 3 letter codes
       delimited by the aggregation operator (+) or the removal operator
diff --git a/esp/clients/ws_dfsclient/ws_dfsclient.cpp b/esp/clients/ws_dfsclient/ws_dfsclient.cpp
index 1d8d3ce030e..677e14f3535 100644
--- a/esp/clients/ws_dfsclient/ws_dfsclient.cpp
+++ b/esp/clients/ws_dfsclient/ws_dfsclient.cpp
@@ -398,7 +398,9 @@ class CServiceDistributedFile : public CServiceDistributedFileBase<IDistributedF
             if (dafileSrvRemoteFilePlane)
             {
                 file->setPropTree("Attr/_remoteStoragePlane", createPTreeFromIPT(dafileSrvRemoteFilePlane));
-                if (remoteStorage->hasProp("@secret"))
+
+                const char *serviceUrl = remoteStorage->queryProp("@service");
+                if (serviceUrl && startsWith(serviceUrl, "https"))
                 {
                     // if remote storage service is secure, dafilesrv connections must be also.
                     // this flag is used by consumers of this IFleDescriptor to tell whether they need to make
@@ -673,7 +675,10 @@ IDFSFile *lookupDFSFile(const char *logicalName, AccessMode accessMode, unsigned
             if (!remoteStorage)
                 throw makeStringExceptionV(0, "Remote storage '%s' not found", remoteName.str());
             serviceUrl.set(remoteStorage->queryProp("@service"));
+
+            // NB: for legacy support only, if the service url is secure, a secret name will be auto-generated
             serviceSecret.set(remoteStorage->queryProp("@secret"));
+
             logicalName = remoteLogicalFileName;
             useDafilesrv = remoteStorage->getPropBool("@useDafilesrv");
         }
@@ -683,20 +688,18 @@ IDFSFile *lookupDFSFile(const char *logicalName, AccessMode accessMode, unsigned
         // auto-discover local environment dfs service.
 #ifdef _CONTAINERIZED
         // NB: only expected to be here if experimental option #option('dfsesp-localfiles', true); is in use.
-        // This finds and uses local dfs service for local read lookukup.
+        // This finds and uses local dfs service for local read lookups.
         Owned<IPropertyTreeIterator> eclWatchServices = getGlobalConfigSP()->getElements("services[@type='dfs']");
         if (!eclWatchServices->first())
             throw makeStringException(-1, "Dfs service not defined in esp services");
         const IPropertyTree &eclWatch = eclWatchServices->query();
         StringBuffer eclWatchName;
         eclWatch.getProp("@name", eclWatchName);
-        auto result = k8s::getExternalService(eclWatchName);
-        if (result.first.empty())
-            throw makeStringExceptionV(-1, "dfs '%s': service not found", eclWatchName.str());
-        if (0 == result.second)
-            throw makeStringExceptionV(-1, "dfs '%s': service port not defined", eclWatchName.str());
         const char *protocol = eclWatch.getPropBool("@tls") ? "https" : "http";
-        serviceUrl.appendf("%s://%s:%u", protocol, result.first.c_str(), result.second);
+        unsigned port = (unsigned)eclWatch.getPropInt("@port", NotFound);
+        if (NotFound == port)
+            throw makeStringExceptionV(-1, "dfs '%s': service port not defined", eclWatchName.str());
+        serviceUrl.appendf("%s://%s:%u", protocol, eclWatchName.str(), port);
 #else
         {
             CriticalBlock b(dfsServiceUrlCrit);
@@ -714,7 +717,12 @@ IDFSFile *lookupDFSFile(const char *logicalName, AccessMode accessMode, unsigned
 #endif
     }
     bool useSSL = startsWith(serviceUrl, "https");
-    if (!useSSL)
+    if (useSSL)
+    {
+        if (0 == serviceSecret.length())
+            generateDynamicUrlSecretName(serviceSecret, serviceUrl, nullptr);
+    }
+    else
         serviceSecret.clear();
 
     DBGLOG("Looking up file '%s' on '%s'", logicalName, serviceUrl.str());
diff --git a/esp/scm/ws_logaccess.ecm b/esp/scm/ws_logaccess.ecm
index 455561e7f7f..d89dc4d4a30 100644
--- a/esp/scm/ws_logaccess.ecm
+++ b/esp/scm/ws_logaccess.ecm
@@ -108,7 +108,8 @@ ESPenum LogEventClass : string
     Warning("WRN"),
     Info("INF"),
     Progress("PRO"),
-    Metric("MET")
+    Metric("MET"),
+    Event("EVT")
 };
 
 /*
@@ -133,12 +134,14 @@ ESPenum LogEventClass : string
 *    INF - Information
 *    PRO - Progress
 *    MET - Metric
+*    EVT - Event
 *
 *If searching by "ByTargetAudience", the SearchByValue should contain the 3 letter code associated with the target audience of interest.
 * valid values at time of writing are:
 *    OPR - Operator
 *    USR - User
 *    PRO - Programmer
+*    MON - Monitor
 *    ADT - Audit
 *If searching by "BySourceInstance", the SearchByValue should contain the instance of interest
 *If searching by "BySourceNode", the SearchByValue should contain the node of interest
diff --git a/esp/services/ws_workunits/ws_workunitsHelpers.hpp b/esp/services/ws_workunits/ws_workunitsHelpers.hpp
index 37534458b2b..efaad03fce9 100644
--- a/esp/services/ws_workunits/ws_workunitsHelpers.hpp
+++ b/esp/services/ws_workunits/ws_workunitsHelpers.hpp
@@ -261,7 +261,7 @@ struct WUComponentLogOptions
             logFetchFilter = getBinaryLogAccessFilter(logFetchFilter, componentsFilterObj, LOGACCESS_FILTER_and);
 
         ILogAccessFilter * logEventTypeFilterObj = nullptr;
-        StringBuffer logType; //"DIS","ERR","WRN","INF","PRO","MET","ALL"
+        StringBuffer logType; //"DIS","ERR","WRN","INF","PRO","MET","EVT","ALL"
         zapHttpRequest->getParameter("LogFilter_LogEventType", logType);
         if (!logType.isEmpty() && strcmp(logType.str(), "ALL") != 0)
             logEventTypeFilterObj = getClassLogAccessFilter(LogMsgClassFromAbbrev(logType.str()));
diff --git a/esp/src/eclwatch/VizWidget.js b/esp/src/eclwatch/VizWidget.js
index 4708c10b94c..6ff09e500b7 100644
--- a/esp/src/eclwatch/VizWidget.js
+++ b/esp/src/eclwatch/VizWidget.js
@@ -391,7 +391,7 @@ define([
 
         refreshData: function () {
             if (this.limit.get("value") > this.rows.length) {
-                var result = this.wu.results[this.params.Sequence];
+                var result = this.wu.results.filter(r => r.Sequence == this.params.Sequence)[0];
                 var context = this;
                 result.fetchNRows(this.rows.length, this.limit.get("value")).then(function (response) {
                     context.rows = context.rows.concat(response);
diff --git a/esp/src/src-react/components/Results.tsx b/esp/src/src-react/components/Results.tsx
index f867da58f61..58d6ac9f890 100644
--- a/esp/src/src-react/components/Results.tsx
+++ b/esp/src/src-react/components/Results.tsx
@@ -91,10 +91,22 @@ export const Results: React.FunctionComponent<ResultsProps> = ({
             key: "open legacy", text: nlsHPCC.OpenLegacyMode, disabled: !uiState.hasSelection, iconProps: { iconName: "WindowEdit" },
             onClick: () => {
                 if (selection.length === 1) {
-                    window.location.href = `#/workunits/${wuid}/outputs/${selection[0].Name}/legacy`;
+                    window.location.href = `#/workunits/${wuid}/outputs/${selection[0].Name}?__legacy`;
                 } else {
                     for (let i = selection.length - 1; i >= 0; --i) {
-                        window.open(`#/workunits/${wuid}/outputs/${selection[i].Name}/legacy`, "_blank");
+                        window.open(`#/workunits/${wuid}/outputs/${selection[i].Name}?__legacy`, "_blank");
+                    }
+                }
+            }
+        },
+        {
+            key: "visualize", text: nlsHPCC.Visualize, disabled: !uiState.hasSelection, iconProps: { iconName: "BarChartVertical" },
+            onClick: () => {
+                if (selection.length === 1) {
+                    window.location.href = `#/workunits/${wuid}/outputs/${selection[0].Sequence}?__visualize`;
+                } else {
+                    for (let i = selection.length - 1; i >= 0; --i) {
+                        window.open(`#/workunits/${wuid}/outputs/${selection[i].Sequence}?__visualize`, "_blank");
                     }
                 }
             }
diff --git a/esp/src/src-react/components/WorkunitDetails.tsx b/esp/src/src-react/components/WorkunitDetails.tsx
index c09f3ef5806..8b17f47aa53 100644
--- a/esp/src/src-react/components/WorkunitDetails.tsx
+++ b/esp/src/src-react/components/WorkunitDetails.tsx
@@ -11,18 +11,19 @@ import { DojoAdapter } from "../layouts/DojoAdapter";
 import { pivotItemStyle } from "../layouts/pivot";
 import { pushUrl } from "../util/history";
 import { WorkunitPersona } from "./controls/StateIcon";
-import { Results } from "./Results";
-import { Variables } from "./Variables";
-import { SourceFiles } from "./SourceFiles";
 import { Helpers } from "./Helpers";
+import { IFrame } from "./IFrame";
+import { Logs } from "./Logs";
+import { Metrics } from "./Metrics";
 import { Queries } from "./Queries";
 import { Resources } from "./Resources";
+import { Result } from "./Result";
+import { Results } from "./Results";
 import { FetchEditor, WUXMLSourceEditor } from "./SourceEditor";
+import { SourceFiles } from "./SourceFiles";
+import { Variables } from "./Variables";
 import { Workflows } from "./Workflows";
-import { Metrics } from "./Metrics";
 import { WorkunitSummary } from "./WorkunitSummary";
-import { Result } from "./Result";
-import { Logs } from "./Logs";
 
 const logger = scopedLogger("src-react/components/WorkunitDetails.tsx");
 
@@ -84,7 +85,9 @@ export const WorkunitDetails: React.FunctionComponent<WorkunitDetailsProps> = ({
             </PivotItem>
             <PivotItem headerText={nlsHPCC.Outputs} itemKey="outputs" itemCount={workunit?.ResultCount} style={pivotItemStyle(size, 0)}>
                 {state ?
-                    <Result wuid={wuid} resultName={state} filter={queryParams} /> :
+                    queryParams.hasOwnProperty("__legacy") ? <IFrame src={`/WsWorkunits/WUResult?Wuid=${wuid}&ResultName=${state}`} height="99%" /> :
+                        queryParams.hasOwnProperty("__visualize") ? <DojoAdapter widgetClassID="VizWidget" params={{ Wuid: wuid, Sequence: state }} /> :
+                            <Result wuid={wuid} resultName={state} filter={queryParams} /> :
                     <Results wuid={wuid} />
                 }
             </PivotItem>
diff --git a/esp/src/src/nls/pt-br/hpcc.ts b/esp/src/src/nls/pt-br/hpcc.ts
index ce2cec03903..2106c82e8ba 100644
--- a/esp/src/src/nls/pt-br/hpcc.ts
+++ b/esp/src/src/nls/pt-br/hpcc.ts
@@ -63,13 +63,16 @@
     Attribute: "Attributo",
     AttributesAreRequired: "Atributos são necessários",
     Audience: "Público",
+    Audit: "Auditoria",
     AuditLogs: "Registro de auditoria",
     AutoRefresh: "Recarregar Automático",
     AutoRefreshEvery: "Atualização automática a cada x minutos",
     AutoRefreshIncrement: "Auto Incrementar Atualização",
     Back: "voltar",
     BannerColor: "Cor da Faixa",
+    BannerColorTooltip: "Alterar a cor de fundo da navegação superio",
     BannerMessage: "Mensagem da Faixa",
+    BannerMessageTooltip: "Alterar o título exibido na navegação superior (padrão 'ECL Watch')",
     BannerScroll: "Faixa de Paginação",
     BannerSize: "Tamanho da Faixa",
     BinaryInstalls: "Instalação Binária",
@@ -113,6 +116,7 @@
     CodeGenerator: "Gerador de Código",
     Col: "Col",
     CollapseAll: "Recolher Tudo",
+    ColumnMode: "Modo Coluna",
     Columns: "Colunas",
     Command: "Comando",
     Comment: "Comentário",
@@ -124,6 +128,7 @@
     ComplexityWarning: "Mais de {limite} atividades ({Contador de atividades}) - suprimir amostragem inicial?",
     Component: "Componente",
     ComponentLogs: "Log de componentes",
+    Components: "Componentes",
     Compress: "Compactar",
     Compressed: "Comprimido",
     CompressedFileSize: "Tamanho do Arquivo Comprimido",
@@ -169,9 +174,11 @@
     Critical: "Crítico",
     CrossTab: "Tabulação Cruzada",
     CSV: "CVS",
+    CustomLogColumns: "Colunas de registro personalizadas",
     Dali: "Dali",
     DaliAdmin: "Administrador de Dali",
     DaliIP: "IP do Dali",
+    DaliPromptConfirm: "Tem certeza? Os envios do Dali Admin são permanentes e não podem ser desfeitos.",
     Dashboard: "Painel",
     Data: "Dados",
     DataPatterns: "Padrões de Dados",
@@ -469,7 +476,23 @@
     Log: "Registro",
     LogAccessType: "Tipo de acesso ao registro",
     LogDirectory: "Diretório de Log",
+    LogEventType: "Tipo de evento de registro",
     LogFile: "Arquivo de log",
+    LogFilterComponentsFilterTooltip: "Incluir apenas logs do componente/contêiner selecio",
+    LogFilterCustomColumnsTooltip: "Incluir as colunas de log especificadas",
+    LogFilterEndDateTooltip: "Incluir as colunas de log especificada",
+    LogFilterEventTypeTooltip: "Incluir apenas entradas para o tipo de evento de log especificado",
+    LogFilterFormatTooltip: "Formato do arquivo de log: CSV, JSON ou XML",
+    LogFilterLineLimitTooltip: "O número de linhas de log a serem incluídas",
+    LogFilterLineStartFromTooltip: "Incluir linhas de log começando neste número de linha",
+    LogFilterRelativeTimeRangeTooltip: "Um intervalo de tempo em torno do tempo WU, +/- (em segundos)'",
+    LogFilters: "Filtros de registro",
+    LogFilterSelectColumnModeTooltip: "Especifique quais colunas incluir no arquivo de log",
+    LogFilterSortByTooltip: "ASC - mais antigo primeiro, DESC - mais novo primeiro",
+    LogFilterStartDateTooltip: "Incluir linhas de registro do início do intervalo de tempo'",
+    LogFilterTimeRequired: "Escolha 'Data de e até' ou 'Buffer de tempo de registro relativo'",
+    LogFilterWildcardFilterTooltip: "Uma sequência de texto na qual filtrar mensagens de log",
+    LogFormat: "Formato de registro",
     LoggedInAs: "Entrou no sistema como",
     LoggingOut: "Fazendo um Logout",
     LogicalFile: "Arquivo Lógico",
@@ -480,6 +503,8 @@
     LogicalName: "Nome Lógico",
     LogicalNameMask: "Mask de Nome lógico",
     Login: "Fazer um Login",
+    LogLineLimit: "Limite da linha de registro",
+    LogLineStartFrom: "Linha de registro a partir de",
     Logout: "Fazer um Logout",
     Logs: "Registros",
     LogVisualization: "Visualização de Log",
@@ -729,6 +754,7 @@
     Recycling: "Reciclando",
     RedBook: "Livro Vermelho",
     Refresh: "Recarregar",
+    RelativeLogTimeRange: "Intervalo de tempo de registro relativo",
     ReleaseNotes: "Notas de Versão",
     Reload: "Recarregar",
     Remaining: "Faltando",
@@ -807,10 +833,14 @@
     Services: "Serviços",
     ServiceType: "Tipo de serviço",
     SetBanner: "Fixar Banner",
+    SetLogicalFileAttribute: "Definir atributo de arquivo lógico",
+    SetProtected: "Definir protegido",
     SetTextError: "Erro para mostrar texto(muito longo?)  Use &lsquo;ajuda&rsquo; para baixar",
     SetToFailed: "Indicar como Falhado",
     SetToolbar: "Definir Barra de Ferramentas",
     SetToolbarColor: "Definir cor da Barra de Ferramentas",
+    SetUnprotected: "Definir desprotegido",
+    SetValue: "Definir valor",
     Severity: "Severidade",
     ShareWorkunit: "Compartilhar URL do Workunit",
     Show: "Exibir",
@@ -834,6 +864,7 @@
     SOAP: "SOAP",
     SomeDescription: "Alguma descrição",
     somefile: "*::algum_arquivo*",
+    Sort: "Organizar",
     Source: "Fonte",
     SourceCode: "Código Fonte",
     SourceLogicalFile: "Nome Lógica do arquivo Fonte",
@@ -1001,6 +1032,8 @@
     TotalSize: "Tamanho total",
     TotalThorTime: "Tempo Total do Thor",
     ToTime: "para Hora",
+    TransferRate: "Taxa de transferência",
+    TransferRateAvg: "Taxa de transferência (média)",
     TransitionGuide: "Guia de transição",
     Tree: "Árvore",
     Type: "Tipo",
@@ -1070,6 +1103,7 @@
     Where: "Onde",
     Who: "Quem",
     Width: "Largura",
+    WildcardFilter: "Filtro Curinga",
     Workflows: "Fluxo de Trabalho",
     Workunit: "Tarefa",
     Workunits: "Tarefas",
diff --git a/helm/examples/azure/log-analytics/loganalytics-hpcc-logaccess.yaml b/helm/examples/azure/log-analytics/loganalytics-hpcc-logaccess.yaml
index 56400e03de4..fc01b818c41 100644
--- a/helm/examples/azure/log-analytics/loganalytics-hpcc-logaccess.yaml
+++ b/helm/examples/azure/log-analytics/loganalytics-hpcc-logaccess.yaml
@@ -40,6 +40,7 @@ global:
       - code: OPR
       - code: USR
       - code: PRO
+      - code: MON
       - code: ADT
       columnMode: "DEFAULT"
       columnType: "enum"
@@ -51,6 +52,7 @@ global:
       - code: WRN
       - code: INF
       - code: PRO
+      - code: EVT
       - code: MET
       columnMode: "DEFAULT"
       columnType: "enum"
diff --git a/helm/examples/logging/README.md b/helm/examples/logging/README.md
index 75e7185420c..63f51fed542 100644
--- a/helm/examples/logging/README.md
+++ b/helm/examples/logging/README.md
@@ -73,7 +73,7 @@ The logs can be filtered by TargetAudience, Category or Detail Level, and the ou
 
 ### Target Audience Filtering
 
-The availble target audiences include operator(OPR), user(USR), programmer(PRO), audit(ADT), or all. The filter is controlled by the
+The availble target audiences include operator(OPR), user(USR), programmer(PRO), monitor(MON), audit(ADT), or all. The filter is controlled by the
 `<section>`.logging.audiences value. The string value is comprised of 3 letter codes delimited by the aggregation operator (+) or the removal operator (-).
     
     For example, all component log output to include Programmer and User messages only:
@@ -81,7 +81,7 @@ The availble target audiences include operator(OPR), user(USR), programmer(PRO),
     
 ### Target Category Filtering
 
-The available target categories include disaster(DIS), error(ERR), warning(WRN),information(INF),progress(PRO),metrics(MET). The category (or class) filter is controlled by the `<section>`.logging.classes value, comprised of 3 letter codes delimited by the aggregation operator (+) or the removal operator (-).
+The available target categories include disaster(DIS), error(ERR), warning(WRN),information(INF),progress(PRO),metrics(MET),event(EVT). The category (or class) filter is controlled by the `<section>`.logging.classes value, comprised of 3 letter codes delimited by the aggregation operator (+) or the removal operator (-).
     
     For example, the mydali instance's log output to include all classes except for progress:
     helm install myhpcc ./hpcc --set dali[0].logging.classes="ALL-PRO" --set dali[0].name="mydali"
diff --git a/helm/hpcc/templates/_helpers.tpl b/helm/hpcc/templates/_helpers.tpl
index fd9279f3d6b..c641728343e 100644
--- a/helm/hpcc/templates/_helpers.tpl
+++ b/helm/hpcc/templates/_helpers.tpl
@@ -1140,6 +1140,16 @@ Generate service entries for TLS
   {{- end }}
 {{- end }}
 
+{{/*
+Conditionally generate annotated k8s hostname
+*/}}
+{{- define "hpcc.outputHostname" -}}
+{{- $annotations := .annotations | default dict -}}
+{{- if hasKey $annotations "external-dns.alpha.kubernetes.io/hostname" -}}
+hostname: {{ index $annotations "external-dns.alpha.kubernetes.io/hostname" }}
+{{- end -}}
+{{- end -}}
+
 {{/*
 Generate list of available services
 */}}
@@ -1209,6 +1219,7 @@ Generate list of available services
   port: {{ .service.servicePort | default 7600 }}
   public: {{ (ne ( include "hpcc.isVisibilityPublic" (dict "root" $ "visibility" .service.visibility))  "") | ternary "true" "false" }}
   {{- include "hpcc.addTLSServiceEntries" (dict "root" $ "service" $dafilesrv.service "component" $dafilesrv "visibility" $dafilesrv.service.visibility) }}
+  {{- include "hpcc.outputHostname" .service | nindent 2 }}
  {{ end -}}
 {{ end -}}
 {{- end -}}
diff --git a/helm/managed/logging/elastic/elastic4hpcclogs-hpcc-logaccess.yaml b/helm/managed/logging/elastic/elastic4hpcclogs-hpcc-logaccess.yaml
index 3aba0f02d82..d1d32312fc5 100644
--- a/helm/managed/logging/elastic/elastic4hpcclogs-hpcc-logaccess.yaml
+++ b/helm/managed/logging/elastic/elastic4hpcclogs-hpcc-logaccess.yaml
@@ -29,6 +29,7 @@ global:
           - code: OPR
           - code: USR
           - code: PRO
+          - code: MON
           - code: ADT
           columnMode: "DEFAULT"
           columnType: "enum"
@@ -40,6 +41,7 @@ global:
           - code: WRN
           - code: INF
           - code: PRO
+          - code: EVT
           - code: MET
           columnMode: "DEFAULT"
           columnType: "enum"
diff --git a/roxie/ccd/ccdqueue.cpp b/roxie/ccd/ccdqueue.cpp
index 97945643159..8b340dba1d0 100644
--- a/roxie/ccd/ccdqueue.cpp
+++ b/roxie/ccd/ccdqueue.cpp
@@ -2221,7 +2221,7 @@ class DelayedPacketQueue
         if (tail)
         {
             tail->next = newEntry;
-            for (DelayedPacketEntry *finger = tail; finger != nullptr; finger = finger->prev)
+            for (DelayedPacketEntry *finger = tail; finger != nullptr;)
             {
                 if ((int) (finger->waitExpires - expires) <= 0)
                     break;
diff --git a/system/jlib/jcontainerized.cpp b/system/jlib/jcontainerized.cpp
index 3b9724e2682..d6b83a7d6fe 100644
--- a/system/jlib/jcontainerized.cpp
+++ b/system/jlib/jcontainerized.cpp
@@ -379,12 +379,22 @@ std::pair<std::string, unsigned> getDafileServiceFromConfig(const char *applicat
         throw makeStringExceptionV(JLIBERR_K8sServiceError, "dafilesrv service '%s' has no public service defined", application);
     StringBuffer dafilesrvName;
     dafilesrv.getProp("@name", dafilesrvName);
-    auto externalService = getExternalService(dafilesrvName);
-    if (externalService.first.empty())
-        throw makeStringExceptionV(JLIBERR_K8sServiceError, "dafilesrv service '%s' - external service '%s' not found", application, dafilesrvName.str());
-    if (0 == externalService.second)
-        throw makeStringExceptionV(JLIBERR_K8sServiceError, "dafilesrv service '%s' - external service '%s' port not defined", application, dafilesrvName.str());
-    return externalService;
+    unsigned port = (unsigned)dafilesrv.getPropInt("@port");
+
+    StringBuffer hostname;
+    dafilesrv.getProp("@hostname", hostname);
+    if (hostname.length())
+        return { hostname.str(), port };
+    else
+    {
+        auto externalService = getExternalService(dafilesrvName);
+        if (externalService.first.empty())
+            throw makeStringExceptionV(JLIBERR_K8sServiceError, "dafilesrv service '%s' - external service '%s' not found", application, dafilesrvName.str());
+        if (0 == externalService.second)
+            throw makeStringExceptionV(JLIBERR_K8sServiceError, "dafilesrv service '%s' - external service '%s' port not defined", application, dafilesrvName.str());
+        assertex(port == externalService.second);
+        return externalService;
+    }
 }
 
 
diff --git a/system/jlib/jexcept.cpp b/system/jlib/jexcept.cpp
index 035d6243990..2b4ed2d2f64 100644
--- a/system/jlib/jexcept.cpp
+++ b/system/jlib/jexcept.cpp
@@ -465,6 +465,7 @@ const char* serializeMessageAudience(MessageAudience ma)
     case MSGAUD_operator:    ret = "operator";      break;
     case MSGAUD_user:        ret = "user";          break;
     case MSGAUD_programmer:  ret = "programmer";    break;
+    case MSGAUD_monitor:     ret = "monitor";       break;
     case MSGAUD_all:         ret = "all";           break;
     default:                 ret = "unknown";       break;
     }
@@ -482,6 +483,8 @@ MessageAudience deserializeMessageAudience(const char* text)
             ma = MSGAUD_user;
         else if (!strcmp(text, "programmer"))
             ma = MSGAUD_programmer;
+        else if (!strcmp(text, "monitor"))
+            ma = MSGAUD_monitor;
         else if (!strcmp(text, "all"))
             ma = MSGAUD_all;
     }
diff --git a/system/jlib/jlog.hpp b/system/jlib/jlog.hpp
index 582aebdbced..9686e21feca 100644
--- a/system/jlib/jlog.hpp
+++ b/system/jlib/jlog.hpp
@@ -69,7 +69,8 @@ typedef enum
     MSGCLS_metric      = 0x20, // A metric line
     MSGCLS_addid       = 0x40, // Internal use within log system
     MSGCLS_removeid    = 0x80, // Internal use within log system
-    MSGCLS_all         = 0xFF  // Use as a filter to select all messages
+    MSGCLS_event       = 0x100, // A timestamp or event where the time it occurs is significant
+    MSGCLS_all         = 0xFFFF  // Use as a filter to select all messages
 } LogMsgClass;
 /* ------------------------------------------------------------------------------------ *
  * NOTES:                                                                               *
@@ -142,6 +143,8 @@ inline const char * LogMsgAudienceToVarString(LogMsgAudience audience)
         return("User");
     case MSGAUD_programmer:
         return("Programmer");
+    case MSGAUD_monitor:
+        return("Monitor");
     case MSGAUD_audit:
         return("Audit");
     default:
@@ -159,6 +162,8 @@ inline const char * LogMsgAudienceToFixString(LogMsgAudience audience)
         return("USR");
     case MSGAUD_programmer:
         return("PRG");
+    case MSGAUD_monitor:
+        return("MON");
     case MSGAUD_audit:
         return("AUD");
     default:
@@ -173,6 +178,8 @@ inline MessageAudience LogMsgAudFromAbbrev(char const * abbrev)
         return MSGAUD_user;
     if(strnicmp(abbrev, "PRO", 3)==0)
         return MSGAUD_programmer;
+    if(strnicmp(abbrev, "MON", 3)==0)
+        return MSGAUD_monitor;
     if(strnicmp(abbrev, "ADT", 3)==0)
         return MSGAUD_audit;
     if(strnicmp(abbrev, "ALL", 3)==0)
@@ -196,6 +203,8 @@ inline const char * LogMsgClassToVarString(LogMsgClass msgClass)
         return("Progress");
     case MSGCLS_metric:
         return("Metric");
+    case MSGCLS_event:
+        return("Event");
     default:
         return("UNKNOWN");
     }
@@ -217,6 +226,8 @@ inline const char * LogMsgClassToFixString(LogMsgClass msgClass)
         return("PRO");
     case MSGCLS_metric:
         return("MET");
+    case MSGCLS_event:
+        return("EVT");
     default:
         return("UNK");
     }
@@ -236,6 +247,8 @@ inline LogMsgClass LogMsgClassFromAbbrev(char const * abbrev)
         return MSGCLS_progress;
     if(strnicmp(abbrev, "MET", 3)==0)
         return MSGCLS_metric;
+    if(strnicmp(abbrev, "EVT", 3)==0)
+        return MSGCLS_event;
     if(strnicmp(abbrev, "ALL", 3)==0)
         return MSGCLS_all;
     return MSGCLS_unknown;
diff --git a/system/jlib/jscm.hpp b/system/jlib/jscm.hpp
index 6a08dbdca92..718d6f3a215 100644
--- a/system/jlib/jscm.hpp
+++ b/system/jlib/jscm.hpp
@@ -310,7 +310,8 @@ typedef enum
     //          would not be resolvable by sysadmin or ECL developers. Additional information that may
     //          be useful for improving the platform.
     MSGAUD_programmer  = 0x20,
-    // MSGAUD_legacy      = 0x40, REMOVED - may be reused later
+    // Target audience: Automatic monitoring tools
+    MSGAUD_monitor     = 0x40,
     // Target audience: persons involved in accounting and security audits
     MSGAUD_audit       = 0x80,
     // MSGAUD_all is to be used for filtering or specifying which messages are to be logged
diff --git a/system/jlib/jsecrets.cpp b/system/jlib/jsecrets.cpp
index 5828bc71166..b99e6265c7c 100644
--- a/system/jlib/jsecrets.cpp
+++ b/system/jlib/jsecrets.cpp
@@ -214,7 +214,8 @@ static void splitUrlSections(const char *url, const char * &authority, size_t &a
     else
     {
         authorityLen = path-url;
-        fullpath.append(path);
+        if (!streq(path, "/")) // treat empty trailing path as equal to no path
+            fullpath.append(path);
     }
 }
 
diff --git a/system/jlib/jtrace.cpp b/system/jlib/jtrace.cpp
index 360aa829c73..401702d8a63 100644
--- a/system/jlib/jtrace.cpp
+++ b/system/jlib/jtrace.cpp
@@ -38,6 +38,9 @@
 #include "opentelemetry/exporters/otlp/otlp_http_exporter_options.h"
 #include "opentelemetry/exporters/memory/in_memory_span_data.h"
 
+#include "opentelemetry/sdk/trace/exporter.h"
+#include "opentelemetry/sdk/trace/span_data.h"
+
 #include "platform.h"
 #include "jlib.hpp"
 #include "jmisc.hpp"
@@ -48,6 +51,62 @@ namespace context     = opentelemetry::context;
 namespace nostd       = opentelemetry::nostd;
 namespace opentel_trace = opentelemetry::trace;
 
+using namespace ln_uid;
+
+/*
+NoopSpanExporter is a SpanExporter that does not do anything.
+Use when trace/span data is not needed, or if tracing data is handled outside of Otel framework
+*/
+class NoopSpanExporter final : public opentelemetry::sdk::trace::SpanExporter
+{
+public:
+    NoopSpanExporter() {}
+
+    /**
+    * @return Returns a unique pointer to an empty recordable object
+    */
+    std::unique_ptr<opentelemetry::sdk::trace::Recordable> MakeRecordable() noexcept override
+    {
+        return std::unique_ptr<opentelemetry::sdk::trace::Recordable>(new opentelemetry::sdk::trace::SpanData());
+    }
+
+    /**
+    * NoopSpanExporter does not need to do anything here.
+    *
+    * @param recordables Ignored
+    * @return Always returns success
+    */
+    opentelemetry::sdk::common::ExportResult Export(
+      const nostd::span<std::unique_ptr<opentelemetry::sdk::trace::Recordable>> &recordables) noexcept override
+    {
+        return opentelemetry::sdk::common::ExportResult::kSuccess;
+    }
+
+   /**
+   * Shut down the exporter. NoopSpanExporter does not need to do anything here.
+   * @param timeout an optional timeout.
+   * @return return the status of the operation.
+   */
+    virtual bool Shutdown(
+      std::chrono::microseconds timeout = std::chrono::microseconds::max()) noexcept override
+    {
+        return true;
+    }
+};
+
+class NoopSpanExporterFactory
+{
+public:
+    /**
+    * Create a NoopSpanExporter.
+    */
+    static std::unique_ptr<opentelemetry::sdk::trace::SpanExporter> Create()
+    {
+        return std::unique_ptr<opentelemetry::sdk::trace::SpanExporter>(
+            new NoopSpanExporter());
+    }
+};
+
 class CHPCCHttpTextMapCarrier : public opentelemetry::context::propagation::TextMapCarrier
 {
 public:
@@ -660,9 +719,7 @@ class CTraceManager : implements ITraceManager, public CInterface
     //Also, a SimpleSpanProcessor is used in the absence of a configuration directive to process spans in batches
     void initTracerProviderAndGlobalInternals(const IPropertyTree * traceConfig)
     {
-        //Currently using InMemorySpanExporter as default, until a noop exporter is available
-        std::shared_ptr<opentelemetry::exporter::memory::InMemorySpanData> data;
-        std::unique_ptr<opentelemetry::sdk::trace::SpanExporter> exporter = opentelemetry::exporter::memory::InMemorySpanExporterFactory::Create(data);
+        std::unique_ptr<opentelemetry::sdk::trace::SpanExporter> exporter = NoopSpanExporterFactory::Create();
 
         //Administrators can choose to export trace data to a different backend by specifying the exporter type
         if (traceConfig && traceConfig->hasProp("exporter"))