Nagios Log Server Changelog

Added

• Added migration and translation of alert queries and alerts to ECS [GL:NLS#847] – JM
• Added migration of alert history [GL:NLS#852] – JM
• Added migration of audit log [GL:NLS#854] – JM
• Added migration of command subsystem jobs [GL:NLS#856] – JM
• Added migration of dashboards and reports [GL:NLS#853] – JM
• Added migration of Logstash configuration [GL:NLS#857] – JM
• Added migration of snapshots & maintenance settings [GL:NLS#855] – JM
• Added support for CentOS Stream 10, Oracle 10, and RHEL 10 [GL:NLS#691] – TL
• Added the ability to exclude terms to the term panel [GL:NLS#519] – TL
• Added the ability to search for columns to the log table panel [GL:NLS#747] – TL

Fixed

• Fixed allowing invalid Lucene queries [GL:NLS#818] – JM
• Fixed an issue where %field.[fieldname]% macros in email templates did not resolve for real-time alerts [GL:NLS#864] – TL
• Fixed an issue where closed indices would appear in the index selection list when migrating [GL:NLS#877] – TL
• Fixed an issue where dashboard names would capitalize ‘and’ and ‘or’ [GL:NLS#263] – TL
• Fixed an issue where deleting a report did not delete associated scheduled reports [GL:NLS#114] – TL
• Fixed an issue where long log messages overflowed and were not fully visible in Log Entry Details [GL:NLS#745] – TL
• Fixed an issue where natural language queries returned blank results due to using deprecated model versions [GL:NLS#799] – TL
• Fixed an issue where natural language queries did not use a UTC offset in generated timestamps [GL:NLS#139] – TL
• Fixed an issue where system status and NCPA status checks incorrectly used proxy configuration [GL:NLS#869] – TL
• Fixed an issue where tabs could not be added within new Inputs, Filters, and Outputs on the Global Config page [GL:NLS#410] – TL
• Fixed an issue where the ‘Reverse DNS Disabled’ message would incorrectly appear when reverse DNS was enabled [GL:NLS#876] – TL
• Fixed an issue where the shipper.py script would fail due to invalid syntax [GL:NLS#878] – TL
• Fixed an issue where the term panel’s missing field option displayed placeholder labels [GL:NLS!736] – TL

Updated

Added

• Added click-to-filter functionality on a table terms panel [GL:NLS#849] – JM
• Added LDAP server certificates to the migration process [GL:NLS#645] – JM
• Added migration of Email Templates [GL:NLS#822] – JM
• Added migration of Host List settings [GL:NLS#825] – JM
• Added migration of NRDP Servers [GL:NLS#823] – JM
• Added migration of SNMP Trap Receivers [GL:NLS#824] – JM

Fixed

• Adjusted the timing of the config file writing and service restart when changing the log locations [GL:NLS#826] – JM
• Fixed a bug where deleting the default dashboard prevents new user creation [GL:NLS#787] – JM
• Fixed an issue where alerts created via the dashboard would have incorrect field names for filters [GL:NLS#851] – TL
• Fixed an issue where the search role could be added to an instance with other roles [GL:NLS#753] – JM
• Fixed an issue where weekly reports would be scheduled on incorrect days [GL:NLS#839] – TL
• Fixed chronyd fatal error message on install on EL-based systems [GL:NLS#682] – JM
• Fixed Cluster install failure situations blocking re-install attempts [GL:NLS#670] – JM
• Fixed host lists not applying to user searches [GL:NLS#750] – JM
• Fixed large known hosts lists potentially causing timeouts [GL:NLS#761] – JM
• Fixed profile script not collecting OpenSearch and Logstash versions [GL:NLS#835] – JM
• Fixed profile script to collect OpenSearch JSON logs [GL:NLS#816] – JM
• Fixed scheduled report 404 errors in a cluster [GL:NLS#841] – JM
• Fixed trimming alert history [GL:NLS#846] – JM

Updated

• Updated Help Video Links [GL:NLS#848] – JM

Added

• Added a dropdown to all dashboard field entry locations [GL:NLS#528] – JM

Fixed

• Fixed an internal server error when there are no log indexes for a table panel [GL:NLS#812] – JM
• Fixed duplicate instances repeatedly appearing in instance list [GL:NLS#813] – JM
• Fixed link to snapshot repository setup documentation [GL:NLS#778] – JM
• Fixed migration from 2024R1 not catching all email settings [GL:NLS#664] – JM
• Fixed profile script not collecting all OpenSearch logs [GL:NLS#816] – JM
• Fixed query-based filters requiring both warning and critical thresholds to be set [GL:NLS#791] – JM
• Fixed upgrade warnings from PHP [GL:NLS#821] – JM
• Fixed Y Axis label of current index disk usage panel [GL:NLS#800] – JM

Removed

• Removed migration status page showing indexes that weren’t selected for migration [GL:NLS#817] – JM

Added

• Added a per-user ability to hide the default query templates for dashboards [GL:NLS#531] – JM
• Added ability to create OpenSearch snapshots on demand [GL:NLS#790] – JM
• Added Logstash syslog output plugin [GL:NLS#72] – JM
• Added Lucene query help along with the color picker for a query [GL:NLS#695] – JM
• Added missing field, other field, donut, and tilt options to the Term Panel [GL:NLS#524] – JM

Fixed

• Fixed alerts tabs not remembering which one was active when refreshing the alerts page [GL:NLS#653] – JM
• Fixed an issue where the Migrate Data UI would report Opensearch errors despite completing successfully [GL:NLS#594] – JS
• Fixed filters with long clauses not word=wrapping [GL:NLS#808] – JM
• Fixed Logstash not binding to privileged ports after an upgrade [GL:NLS#810] – JM
• Fixed styling on Query Template buttons when they have long names [GL:NLS#807] – JM
• Fixed the Apache Dashboard Top 10 Response Coded and Bandwidth Panels [GL:NLS#673] – JM

Added

• Added a compact mode to reduce padding/whitespace on dashboards [GL:NLS#780] – JM
• Added a maximum Y-Axis value for charts [GL:NLS#781] – JM
• Added ability to compare multiple log entries from the log table [GL:NLS#709] – JM
• Added ability to expand multiple log entries inline in the log table [GL:NLS#709] – JM
• Added logarithmic options for charts [GL:NLS#779] – JM
• Added more visibility to dashboard panel resizing corners [GL:NLS#783] – JM

Fixed

• Fixed display of long log messages on the details sheet. [GL:NLS#745] – JM
• Fixed link to Logstash configuration documentation [GL:NLS#789] – JM
• Fixed an issue where manual Config Snapshots would falsely report failures [GL:NLS#661] – JS
• Fixed an issue where Config Snapshots would not be properly created [GL:NLS#661] – JS
• Fixed an issue where Active Directory Groups would not correctly display users in some cases [GL:NLS#792] – JS
• Fixed editing alerts [GL:NLS#797] – JM
• Fixed upgrade script to upgrade OpenSearch and Logstash [GL:NLS#801] – JM

Removed

• Removed link to privileged ports documentation in the Logstash configuration as it is no longer required [GL#NLS785] – JM
• Removed logrotate config from /var/log/{opensearch|logstash} as they are no longer used [GL:NLS#763] – JM

Updated

• Updated AD/LDAP UI with a search feature and pagination controls [GL:NLS#776] – JS
• Updated Auto-Created Snapshots table to only show completed snapshots [GL:NLS#661] – JS
• Updated instructions for restarting nxlog [GL:NLS#774] – JS

Added

• Added translation to all dynamic page titles [GL:NKS#714] – JM
• Added to Index and Cluster Status Pages: number of logs stored in Logstash Indexes and total number of Logstash Indexes [GL:NLS#724] – JM
• Added support for future UI pagination for AD/LDAP [GL:NLS#762] – JS

Updated

• Updated AD/LDAP component to dynamically detect UID or CN as the base RDN [GL:NLS#762] – JS

Fixed

• Fixed duplicate error messages when entering an invalid license key [GL:NLS#128] – JM
• Fixed the rsyslog conf that we use for syslog-sending systems [GL:NLS#660] – JM
• Fixed styling on Import Dashboard Dialog Browse Button = [GL:NLS#672] – JM
• Fixes Histogram zoom when the start and end time are identical [GL:NLS#723] – JM
• Fixed auditlog.log file writing [GL:LS#726] – JM
• Fixed how data nodes are handled when roles are changed [GL:NLS#732] – JM
• Fixed issue where non-log data indices would show on the Cluster Status page [GL:NLS#733] – JS
• Fixed styling of OpenSearch/Logstash status block [GL:NLS#734] – JM
• Fixed light-mode styling on NCPA page [GL:NLS#735] – JM
• Fixed handling of the cluster uuid [GL:NLS#736] – JM
• Fixed Disk Usage Panel styling in dark mode [GL:NLS#740] = JM
• Fixed rendering of Total OpenSearch Disk Usage Panel [GL:NLS#741] = JM
• Fixed Y-Axis display on Last two weeks log chart [GL:NLS#742] – JM
• Fixed Number of Logs Per 15 Minutes Rendering [GL: NLS#743] – JM
• Fixed closed indexes not getting deleted with delete job [GL:NLS#749] – JM
• Fixed Styling for Real Time Alerts Modal [GL:NLS#752] – JM
• Fixed Histogram zooming on last bar showing no results [GL:NLS#755] – JM
• Fixed dashboard panel display to match browser timezone [GL:NLS#757] – JM
• Improved the alert creation error message regarding interval times [GL:NLS#129] – JM
• Improved log management from OpenSearch and Logstash [GL:NLS#511] [GL:NLS#598] – JM
• Improved timestamp display in log details sheet [GL:NLS$610] – JM
• Improved the display of the top 5 senders chart to be logarithmic [GL:NLS#738] – JM

Security

• Fixed a sudo vulnerability where the `www-data` user could execute commands as the `root` user (Thanks to Cory Billington for reporting this) [GL:NLS#719] – JM
• Wrapped several user-provided command arguments in escapeshellarg() to prevent shell injection (Thanks to Cory Billington for reporting this) [GL:NLS#720] – JM

Added

• Added stepwise zoom out function to dashboard histograms [GL:NLS#706] – RP
• Added ability to select hour, minute, and second time ranges on the dashboard [GL:NLS#708] – RP
• Added the option to change the max bar count on dashboard histograms [GL:NLS#716] – RP
• Added number of results displays to Histogram, Term, and Table dashboard panels [GL:NLS#537] – RP
• Added option to highlight search terms on table results [GL:NLS#715] – RP
• Added ability to share login session across multiple instances behind a load balancer or similar – [GL:NLS#397] – JM

Fixed

• Fixed auto refresh on dashboards being enabled by default [GL:NLS#710] – RP
• Fixed some pages not fully scrolling [GL:NLS#699] – RP
• Fixed not being able to edit the IP range of the host-freshness alert [GL:NLS#684] – RP
• Fixed text contrast issues on dashboards in light mode [GL:NLS#707] – RP
• Fixed missing data overlay on Histogram panel [GL:NLS#725] – RP
• Fixed being unable to expand log details when message field is empty [GL:NLS#729] – RP
• Fixed issue with display of current timezone in Log Entry Details for 24 hr timezones [GL:NLS#731] – RP
• Fixed issue where non-log data indices would show on the Cluster Status page [GL:NLS#733] – JS
• Fixed queries in the MySQL and Sendmail default reports [GL:NLS#758] – JM

Updated

• Updated OpenSearch to version 3.1.0, LogStash to version 9.1.1 [GL:NLS#572] – JM

Removed

• Removed the display of the reset button on a Histogram charts when the time range can’t be reset [GL:NLS#686] – JM

Added

• Added ‘Add Log Source’ (+) button to main left bar menu and consolidated all other references into that one button [GL:NLS#574] – AW
• Added column reordering and resizing to dashboard tables [GL:NLS#517] – RP
• Added column visibility checkboxes to allow for table column visibility toggling through Log Entry Detail menu [GL:NLS#517] – RP
• Added Ability to assign roles to each instance in a cluster [GL:NLS#576] – JM
• Added settings for a user to have a simple mode dashboard experience [GL:NLS#584] – JM
• Added a “Home Dashboard” to replace the home page with a dashboard [GL:NLS#584] – AW, JJ, JM, RP
• Added Simple/Advanced and Light/Dark toggle functionality to the profile dropdown and made it look prettier [GL:NLS#604] – AW
• Added a “Simple Dashboard” for viewing results of a simple search. [GL:NLS#605] – JJ, RP
• Added a “Simple Homepage” for simple search [GL:NLS#603] – RP
• Added search suggestion menu for using simple query templates in simple search [GL:NLS#641] – RP
• Added missing tooltips on the Dashboard page [GL:NLS#590] – JJ
• Added score to table panel columns for sorting [GL:NLS#616] – JJ
• Added concise view to Log Entry Details page [GL:NLS#703] – RP
• Added timestamp conversion according to locale in dashboard table [GL:NLS#704] – RP

Fixed

• Fixed Column Visibility dropdown on table not staying open to allow for multiple changes at once [GL:NLS#517] – RP
• Fixed colors changing after filters deleted [GL:NLS#577] – JJ
• Ensured the NCPA plugins are upgraded [GL:NLS#679] – JM
• Fix styling on LDAP/AD edit page [GL:NLS#700] – RP
• Fixed a bug in the setup for a cluster where the intial instance was using DHCP [GL:NLS#722] – JM

Security

• Changed Logstash process to run as the nagios user instead of root [GL:NLS#647] – JM
• Non-admin users can no longer delete global dashboards [GL:NLS#668] – JM
• Use the empty dashboard as the default if a user’s default dashboard has been deleted [GL:NLS#669] – JM

Updated

• Improved multiline filter – JM
• Updated Default Query Template buttons to be more concise and accurate [GL:NLS#638] – AW
• Moved left side menu Help button to be sticky to bottom of the page [GL:NLS#586] – AW
• Updated the default field names for geocoding web logs [GL:NLS#675] – JM

Added

• Added dashboard import and export functionality [GL:NLS#527] – JM

Fixed

• Hide the password field for AD/LDAP users [GL: NLS#481] – JM
• Fixed migration process missing some config data [GL#NLS:561] – JM
• Fixed profile button and dropdown display error for certain users [GL#NLS:666] – AW
• Fixed some problems with real-time alerts [GL:NLS#651] – JM
• Fixed filter issue on default Apache Dashboard [GL:NLS#671] – AW
• Fixed cluster failover problem on upgrades from 2024R2.0.1 and earlier [GL:NLS#674] – JM

Security

• Fixed issue with requesting credentials from a cluster manager wouldn’t use SSL if enabled [GL:#535] – JM
• Fixed issue where the password field was not properly obfuscated when importing AD/LDAP users [GL:NLS#569] – JM

Updated

• Now automatically expand new Dashboard rows on creation [GL:NLS#593] – JJ
• Moved the location of the password used by Nagios Log Server to access OpenSearch [GL:NLS#600] – JM
• Moved the Logstash “Global Configuration” page into Admin [GL:NLS#573] – RP
• Updated API Documentation [GL:NLS#538] – JM – Updated NXLog Documentation URLs [GL:NLS#564] – JM
• Updated Linux setup script to handle systems that use systemd without rsyslog by default [GL:NLS#568] – JM
• Updated Logstash configuration to use all cluster instances to ingest logs [GL:NLS#631] – JM

Removed

• Removed the 9999 limit on query results for the “Unique Hosts” count on the Home page [GL:NLS#423] – JM

Added

• Added a confirmation before deleting dashboards [GL:NLS#526] – JM
• Added the ability to sort search results in Dashboard panel tables by relevance [GL:NLS#616] – JJ
• Added new Dashboard widget to show OpenSearch disk usage [GL:NLS#582] – JM, AW
• Added new Dashboard widget to show total logs within the past two weeks [GL:NLS#580] – JM, AW

Fixed

• Fixed issue where the interface wouldn’t load if users changed ports for HTTP/HTTPS access [GL:NLS#21] – JM
• Fixed issue where not all unique hosts in a cluster would be displayed [GL:NLS#229, #230] – JM
• Fixed issue where navigation breadcrumbs weren’t being translated [GL:NLS#489] – RP
• Fixed issue where monitoring with NCPA would fail if HTTPS was enabled [GL:NLS#530] – JM
• Fixed issue where clicking a host IP address on the “Unique Hosts” page wasn’t properly filtering logs by the selected host [GL:NLS#533] – JM
• Fixed issue where SSL certificates weren’t being trusted when integrating with AD/LDAP [GL:NLS#541] – JM
• Fixed issue where selecting certain fields in the “Map” panel would cause the panel to break [GL:NLS#558] – JM
• Fixed issue where “Enable Maintenance and Snapshots” in Maintenance Settings was displaying “No” when “Yes” was selected and saved [GL:NLS#562] – JM
• Fixed issue where formatting would break on various panels when the displayed value was 0 [GL:NLS#567] – RP
• Fixed typo in “System Logs” menu title [GL:NLS#570] – JJ
• Fixed issue where the default OpenSearch JSON input wasn’t properly parsing JSON [GL:NLS#585] – JM
• Fixed issue where some tooltips in the left nagivation menu were being duplicated [GL:NLS#591] – JJ
• Fixed issue where system backups weren’t properly cleaning up all temporary artifacts [GL: NLS#596] – JM
• Fixed issue where the “Total Log Entries Within The Last Two Weeks” labeled days incorrectly [GL:NLS#599] – AW
• Fixed various issues with cluster failover [GL:NLS#606] – JM
• Fixed issue where backups were not properly being created in scheduled backups [GL:NLS#611] – RP
• Fixed backup script not backing up Logstash config snapshots folder [GL:NLS#613] – RP
• Fixed issue where using the “%uniquehosts%” macro would break email alerts [GL:NLS#612] – JJ
• Fixed issue where the “Events over time” dashboard panel wasn’t displaying the most recent events [GL:NLS#622] – JM
• Fixed where users couldn’t scroll through all queries in “Manage Dashboard Queries” [GL:NLS#627] – JM
• Fixed broken link to Juniper documentation in the corresponding “Getting Started” help page [GL:NLS628] – JJ
• Fixed issue where tooltips in the system status indicator found in the top navigation bar weren’t working properly [GL:NLS#588] – JJ

Updated

• Improved error handling in the migration script [GL:NLS#495] – JM
• Improved index maintenance policies [GL:NLS#496] – JM
• Filtered out non logstash indices from the snapshots view [GL:NLSI#498] – JM
• Changed the alert when an error occurs restoring a snapshot [GL:NLS#501] – JM
• Filtered out local-only listening Logstash Ports [GL:NLS#502] – JM
• Better handling of options to the migration script [GL:NLS#520] [GL:NLS#521] – JM
• Updated the pattern match for XI Audit Log Timestamp [GL:NLS#532] – JM

Removed

• Removed support for Ubuntu 20

Fixed

• Corrected the memory used display on the instance status page [GL:NLS#437] – JM
• Restored the ability to run the upgrade script [GL:NLS#440] – JM
• Corrected the URI used to trim audit and alert indices [GL:NLS#494] – JM
• Fixed a problem when dashboards request data from closed indices [GL:NLS#499] – JM
• Corrected the units display on the migration status page [GL:NLS#505] – JM
• Fixed up how the NCPA service is started/stopped/etc [GL:NLS#506] – JM
• Ensured that the OpenSearch node certificate contains the FQDN of the instance for clusters [GL:NLS#508] – JM
• Fixed Backups [GL:NLS#515] – JM
• Corrected the parameter being passed to the realtime alert script [GL:NLS#518] – JM
• Fixed the reset_nagiosadmin_password.sh script [GL:NLS#525] – JM
• Fixed a bug where the map dashboard panel could crash the dashboard when selecting queries [GL:NLS#539] – GW

Security

• Fixed an issue where a non-admin user can shut down Elasticsearch via the API [GL:NLS#474] – JM
• Fixed an issue where a user can enumerate all the system users and retrieve their API tokens [GL:NLS#475] – JM
• Fixed a privilege escalation issue where a user can edit their own email and put in an invalid address [GL:NLS#476] – JM

Updated

• Upgraded Elasticsearch 1.7.6 to OpenSearch 2.14.0 [GL:NLS:#77] – JM,SAW
• Upgraded Logstash 2.4.1 to Logstash OSS 8.13.4 [GL:NLS:#77] – JM
• Revamped dashboards replacing Kibana [GL:NLS#77] – GW, JM
• Updated UI / UX app-wide – GL, SNS, SG
• Improved report exporting – GW
• Updated NCPA installation to NCPA 3 for all distros [GL:NLS#431] – JS
• Updated cURL instructions to download scripts from Nagios Log Server to account for self-signed SSL certificates [GL:NLS#422] – JS

Added

• Added dark mode – GW

Fixed

• Fixed an issue where the edit user screen doesn’t always show the save/cancel buttons [GL: NLS#479] – JM
• Fixed an issue where alerts were causing warnings to be printed to the job’s log [GL:NLS#447, NLS#446, NLS#444] – JS
• Fixed an issue where background tasks would experience scheduling drift [GL:NLS#17] – SAW
• For changes for Nagios Log Server 2024R1.x and older that were included in this release, see the Nagios Log Server 20204R1.3.1.