2024R2
- March 19, 2025
Security
- Fixed an issue where a non-admin user can shut down Elasticsearch via the API [GL:NLS#474] – JM
- Fixed an issue where a user can enumerate all the system users and retrieve their API tokens [GL:NLS#475] – JM
- Fixed a privilege escalation issue where a user can edit their own email and put in an invalid address [GL:NLS#476] – JM
Updated
- Upgraded Elasticsearch 1.7.6 to OpenSearch 2.14.0 [GL:NLS:#77] – JM,SAW
- Upgraded Logstash 2.4.1 to Logstash OSS 8.13.4 [GL:NLS:#77] – JM
- Revamped dashboards replacing Kibana [GL:NLS#77] – GW, JM
- Updated UI / UX app-wide – GL, SNS, SG
- Improved report exporting – GW
- Updated NCPA installation to NCPA 3 for all distros [GL:NLS#431] – JS
- Updated cURL instructions to download scripts from Nagios Log Server to account for self-signed SSL certificates [GL:NLS#422] – JS
Added
- Added dark mode – GW
Fixed
- Fixed an issue where the edit user screen doesn’t always show the save/cancel buttons [GL: NLS#479] – JM
- Fixed an issue where alerts were causing warnings to be printed to the job’s log [GL:NLS#447, NLS#446, NLS#444] – JS
- Fixed an issue where background tasks would experience scheduling drift [GL:NLS#17] – SAW
- For changes for Nagios Log Server 2024R1.x and older that were included in this release, see the Nagios Log Server 20204R1.3.1.
