Edit

Centreon Core

Introduction

You can find in this chapter all changelogs concerning Centreon Core.

It is very important when you update your system to refer to this section in order to learn about behavior changes or major changes that have been made on this version. This will let you know the impact of the installation of these versions on the features you use or the specific developments that you have built on your platform (modules, widgets, plugins).

If you have feature requests or want to report a bug, please go to our Github

Centreon Web

20.10.6

April 20, 2021

Bugfixes

  • [ACL] Use ACL Action to generate traps
  • [About] Update about page with current team
  • [Administration] Cannot list Pollers in Platform Status pages
  • [Configuration] Error while adding a Remote Server and attaching a poller to it via wizard
  • [Configuration] Poller attached to remote is not fully removed from database when deleted using the from
  • [Core/API/v1] Can't filter on criticality
  • [Core] Configuration output can lead to an empty broker configuration
  • [Core] Update centreon copyright dates
  • [Extensions Manager] No popup when removing extension
  • [Graph] Adapt graph scale for b/s unit
  • [Graphs] Colors of labels don't match colors of curves (old library)
  • [Install] During installation, web installer can not be executed fully
  • [Platform Topology] Distant Poller attached behind a Remote Server does not receive conf
  • [Platform Topology] Missing current node IP address in register script
  • [Platform Topology] Register script concatenates default values to values from the template
  • [Platform Topology] Script target address not parsed correctly.
  • [Platform Topology] Enhance register script displaying
  • [Reporting] Dashboard is slow to display with large service groups
  • [Resources Status] Bad urls for mediawiki
  • [Resources Status] Macros in "URL" and "Action URL"
  • [Resources Status] Missing french translations
  • [UX] Remove "deprecated" from menu for deprecated monitoring pages

Security fixes

  • [Core] XSS in index.php and index.html
  • [Library] Update jQuery to version sup or equal 3.5.1

Performance

  • [API/Topology] Refacto PlatformTopology 20.10

20.10.5

April 1, 2021

Bugfixes

  • [Lib] Update moment-timezone to manage new timezones
  • [Resources Status] Error when getting the command line for Meta Service detail

Security fixes

  • [APIv2] API realtime rights give API configuration rights

20.10.4

February 25, 2021

Enhancements

  • [Configuration] Add the 'instance_heartbeat_interval' parameter in Engine configuration
  • [Configuration] Improve access to the list of pollers
  • [Core] Performance improvements for partitioning
  • [Core] Update PHP 7.3 compatibility
  • [Core] Use Gorgone to dispatch downtimes locally
  • [Status Details] Display of comments in the host details page
  • [Top counters] Displayed values for services don't consider host acknowledgements

Bugfixes

  • [CLAPI] No control on dependencies relations
  • [Configuration/] "Conf Changed" yes is green instead of red in pollers listing
  • [Configuration] Creation forms generate status code 400 errors
  • [Configuration] Non-admin users can't create host/service
  • [Resources Status] Display order of events in timeline
  • [Resources Status] Panel does not display radius
  • [Resources Status] Unexpected behavior when setting a DT with an empty comment field

Security fixes

  • [Administration] Cross-site Scripting (XSS) Stored/Persistent in "ACL > Resources Access" - CVE-2020-22425
  • [Administration] XSS stored in the LDAP form
  • [Apache] Remove deprecated TLS ciphers
  • [Authentication] Session is active longer than expected
  • [Authentication] User enumeration in login page
  • [Configuration] Cross-site Scripting (XSS) Reflected in "Configuration > Hosts"
  • [Core] Vulnerable handlebars.js library
  • [Reporting] Cross-site Scripting (XSS) Reflected in "Dashboard > Hosts"

20.10.3

February 8, 2021

Enhancements

  • [API] Add endpoint for Topology/enableRemote
  • [API] Add Delete method for Topology/enableRemote
  • [Core] [Refactor the script to register new server in bash instead of PHP

Bugfixes

  • [Administration] ACL Menus Access - Lines alignment
  • [Administration] ACL Menus Access - Unable to select subgroup access options
  • [CLAPI] APPLYCFG on a Poller behind a Remote Server doesn't trigger sync task for the RS itself
  • [CLAPI] Cancel RTACKNOWLEDGEMENT doesn't work for services
  • [CLAPI] Create user with language
  • [CLAPI] Import fails on password type macros
  • [CLAPI] Show RTACKNOWLEDGEMENT for a service only shows first one to have been defined
  • [Update] Central IP is override by 127.0.0.1 in platform_topology table

Security fixes

  • [ACL/Access Groups] Cross-site Scripting (XSS) Stored/Persistent for search
  • [ACL/Actions Access] Cross-site Scripting (XSS) Stored/Persistent for search
  • [ACL/Resources Access] Cross-site Scripting (XSS) Stored/Persistent for search
  • [API] Missing access control mechanism in rest API v1
  • [Configuration > Servicegroups] Leak of technical information
  • [Configuration/H/HTPL/S/STPL] Password in plain text
  • [Core] Centreon token is vulnerable against replay attack
  • [Core] Token usage is not mandatory
  • [Media] PHP warning about missing tmp dir used during media upload

20.10.2

January 12, 2021

Known behaviours:

  • The "url notes" and "url actions" links now visible in the "Resources Status" page do not translate macros, for example $HOSTNAME$.

Enhancements

  • [API] Add normalizers for data found in concordanceArray
  • [API] Get topology of servers of a Centreon Platform
  • [Configuration] Add a special variable for trap OID
  • [Configuration] Add pool size parameter in configuration for Centreon Broker
  • [Resources Status] Add alias & fqdn in host detail panels
  • [Resources Status] Add URL link button from host and service extended information configuration

Bugfixes

  • [Authentication] New LDAP configurations are broken
  • [CLAPI] Export does not export default contactgroup linked to a LDAP configuration
  • [Configuration] PHP Warning while creating a Centreon Engine configuration
  • [Configuration] Unable to save log level in Centreon Engine form
  • [Knowledge Base] Access to mediawiki is very slow
  • [Resources Status] Display issue when resource has a configured icon
  • [Resources Status] Incorrect default downtime duration
  • [Resources Status] Useless impacted_resources_count property

Security fixes

  • [Apache] Support for the HTTP TRACE
  • [Apache] Uncorrect HTTPS declaration of SSLCipherSuite in Centreon example file
  • [Authentication] Reach Centreon Front-end parameter ineffective
  • [Configuration] Cross-site Scripting (XSS) Stored/Persistent in Connectors & commands form
  • [Configuration] Cross-site Scripting (XSS) Stored/Persistent in Contact Groups form
  • [Configuration] XSS in updateContactParam.php & commonJS.php
  • [Media] Unrestricted file upload

20.10.1

November 25, 2020

Enhancements

  • [API] Improve registration script
  • [Performance] Disable UI notification mechanism if not needed by user

Bugfixes

  • [API] Rework POST generated API request for PlatformTopology
  • [API] Service groups search not working
  • [Administration] "show deprecated pages" option does not work anymore
  • [Administration] 'options' table for centreon database is sometimes empty
  • [Configuration] Radio buttons for "InfluxDB - Storage - InfluxDB" output not working properly for Centreon Broker form
  • [Core] Perl lib db query bad looping parameters
  • [Core] Too much rows in extended_service_informations tables
  • [Event View] Cannot search with regex using "+" character
  • [Event logs] Inoperative filters when exporting
  • [Graphs] Performance graph legend does not update dynamically
  • [Reporting] Dashboard won't build when having service by hostgroup
  • [Resources Status] Cannot search multiple times in hostgroup filter
  • [Resources Status] Infinite scroll + refresh button duplicates events in timeline
  • [Resources Status] Services listing blinking in details panel
  • [Resources Status] Timeline tab content blinks while browsing resources

Security fixes

  • [Apache] Lack of click diversion protection (Clickjacking)
  • [Core] Update moment.js library

20.10.0

October 21, 2020

Known behaviours:

  • If a Central is configured to communicate with a Remote Server using SSH, reloading the configuration will raise the following error in Gorgone's log:

    ERROR - [sshclient] Unsupported action 'ADDIMPORTTASKWITHPARENT'

    This is due to the fact that the data export/import process between those two servers does not call the Remote Server API (the HTTP flow is then not needed anymore).

    The call is now made through Gorgone, as for the files copy action, and requires the communication to use ZMQ.

Enhancements

  • [API] Possibility to Register servers (Remote Server, Poller, Centreon Map)
  • [Configuration/Wizard] Add possibility to select registered poller
  • [Authentication] Replace Keycloak to generic OAuth2 / OpenId Connect
  • [Event Logs] Display anomaly detection as regular service
  • [Monitoring/Resources Status] Add shortcuts for hosts and services details
  • [Monitoring/Resources Status] Add timeline for hosts and services details
  • [Monitoring/Resources Status] Be able to filter on status output
  • [Monitoring/Resources Status] Add possibility to save/manage filters
  • [Monitoring/Resources Status] Add possibility to submit result for resources
  • [Monitoring/Resources Status] Redirect all realtime links to Resources Status page
  • [Remote Server] Replace HTTP flow by Gorgone between Central and Remote Servers

Centreon Engine

20.10.2

January 20, 2021

This version requires Centreon Broker version to be 20.10.3 or higher.

Bugfixes

Notification macros

The macros in which notification information can be found have been fixed (ie $NOTIFICATION$, $HOSTNOTIFICATION$, $SERVICENOTIFICATION*$)

Enhancements

Instance updates

There is a minimal delay specified in seconds between two instance updates. By default, its value is 30s. It can be set with the variable instance_heartbeat_interval in the centengine.cfg file.

20.10.1

December 16, 2020

Bugfixes

Stalking option

The stalking option works again, it has been fixed. Make sure you are not enabling volatile option at the same time to really get an output stalking.

Macros filters

Macros can be filtered. This was possible before and there was a regression breaking this functionality. So now, we can activate the macros filtering and then we can specify which macros to send to broker.

Notifications

Host/service status field 'Last Notification' was filled when state was HARD even if no notification is configured nor sent.

20.10.0

October 21, 2020

Known behaviours:

  • If Engine on a Poller or Remote Server is not upgraded to 20.10, configuration files copied from an upgraded Central by Gorgone using ZMQ communication will not be readable by Engine process, resulting to this error in Engine log:

    Error: Parsing of global configuration failed: Can't open file '/etc/centreon-engine/centengine.cfg'

    This is due to stricter rights on those files.

    As always, we strongly recommend to upgrade all components to match the Central server's version.

    However, during an upgrade process, it is possible to manually add the user centreon-engine to the centreon-gorgone group with the following command:

    usermod -a -G centreon-gorgone centreon-engine

Bugfixes

  • Contains all fixes up to version 20.04.7

Centreon Broker

20.10.3

January 20, 2021

Bugfixes

Conflict manager and comments

It is possible to lock the database during comments insertion. This new version fixes that.

BAM reporting dimensions computation

If there are retention files, dimensions computation could fail because of conflicts between new block computation and old ones (the ones in the retention). There was also an issue of concurrent access to tables during dimensions computation.

BAM availabilities rebuild

When availabilities are rebuilt, durations can be doubled. This new version fixes this issue.

Enhancements

Logs

Logs are sent to the database in bulk as we already do for customvariables.

Lua

There is a new API available for the Lua connector. To use it, scripts must declare a global variable broker_api_version=2. From the user's point of view, Stream Connectors should work almost the same. In isolate cases, we could see scripts that do not work with this new API, then you can always work with Broker API version 1, by setting the variable to 1 or by removing this variable declaration in the script. Why should we use the v2 version? Because it is faster, really faster.

TCP connections

If the connection between two peers is flapping, it may be difficult for one to reconnect to the other and this could lead to many CLOSE_WAIT on the acceptor side. This new version fixes this issue.

20.10.2

December 16, 2020

Known behaviours:

  • If TLS encryption is configured to use private key/certificate couple for IPv4/6 input/output endpoints, both ends must be updated to ensure communication.

  • If you use Centreon MAP with TLS encryption, make sure to update MAP server to version >= 20.10.2.

Bugfixes

TLS

Credentials were not loaded by the TLS connector anymore. This is fixed with this new version.

Custom variables

They were updated several times in the database. It is fixed now.

Build

GnuTLS requirement now matches compilation version.

BAM

Reporting events were not stored into database because of truncated Business Activities names causing duplicate entry errors.

20.10.1

November 25, 2020

Bugfixes

Build

Build on Centos8 fixed.

Retention files

The splitter class is now thread safe and does not need external locks anymore. It is also far less strict and allows some reading and some writing at the same time.

TCP

Writing on a tcp stream could slow down in case of many retention files. The issue was essentially in the flush internal function.

Enhancements

TCP connections

TCP streams are really faster, especially when Broker has retention files and there are a lot of traffic.

SQL and storage streams

Those streams have several improvements:

  • Events exchanges are much faster, especially when Broker has retention files.
  • Several queries have been changed to insert data in bulk, it is the case for custom variables and metrics.
  • There are cases where those streams could crash that have been also fixed.

Statistics

The thread pool has now its own statistics. For now, we have two informations that are the number of threads it contains and its latency in milliseconds that is the duration we have to wait to see a task executed. We post a task to the thread pool at time T1, it is executed by the thread pool at time T2, the latency is T2 - T1.

Command line argument

It is now possible to set the cbd pool size directly on the command line with the –pool_size X argument or -s X.

20.10.0

October 21, 2020

Known behaviours:

  • If Broker on a Poller or Remote Server is not upgraded to 20.10 (or with a version prior to 20.04.9), the communication between said Poller or Remote Server and an upgraded Central may not work.

    As always, we strongly recommend to upgrade all components to match the Central server's version.

    However, during an upgrade process, communication can be maintained by making sure Broker's configurations match the following conditions:

    • TLS encryption and compression are either set to Auto or No on Central input,
    • TLS encryption and compression are either set to Auto or No on Poller or Remote Server output.

    If the reversed connection mode (one peer retention) is used, the Broker upgrade is mandatory.

Bugfixes

  • Contains all fixes up to version 20.04.9

Centreon Gorgone

20.10.3

March 4, 2021

Enhancements

  • [core] Bulk external commands sent to Engine

20.10.2

January 29, 2021

Bugfixes

  • [zmqclient] Harden communication to avoid "Protocol not good" errors
  • [zmqclient] Increment ZMQ_LINGER period for some modules
  • [zmqclient] Lot of ESTABLISHED connections on server side when network is flapping
  • [sshclient] Command actions badly encoded lead to badly encoded messages in web UI (downtimes, acknowledgements)
  • [sshclient] Uncaught messages lead to problems with statistics collection and Autodiscovery module.

Enhancements

  • [anomalydetection] Reduce time interval between prediction downloads

20.10.1

December 17, 2020

Bugfixes

  • [proxy] gorgone-proxy processes stucked when stopping gorgoned
  • [core] Rare case of database handler wrongly instantiated due to race condition issue
  • [core] Hardened management of message encoding/decoding
  • [autodiscovery] Handle Centreon API modules version endpoint empty response
  • [autodiscovery] Uncatched error when reaching Host Discovery global timeout
  • [autodiscovery] Discovered services state flapped between enabled and disabled
  • [autodiscovery] Service discovery email sending not working properly when having services with space in their name
  • [autodiscovery] Service discovery email sending not working with groups of contacts

Enhancements

  • [proxy] Force TCP reconnection after 3 ping timeout
  • [zmqclient] ID is not necessary anymore in end targets configuration (ie Pollers)

20.10.0

October 21, 2020

Bugfixes

  • Contains all fixes up to version 20.04.6

Enhancements

  • [module] Add new core/pipeline module
  • [module] Add new centreon/judge module
  • [core] Add listener system
  • [autodiscovery] Refacto centreon/autodiscovery module to use listener system
  • [autodiscovery] Add service discovery in centreon/autodiscovery module
← Products lifecycle policyCommercial Extensions →