5.3.0

Security

  • Added advanced setting for Availability report labeled “Do not show service data” that will force it to only show host data [TPS#8382] -JO
  • Added more user meta information for better security and auditing [TPS#9269] -JO
  • Added improved clickjacking security -JO
  • Fixed various minor security vulnerabilities (thanks John Page aka HYP3RLINX) -JO

Updated

  • Updated cmdsubsys auditlog to show username in the log message -LG
  • Updated scheduled downtime page to allow searching, filtering, and pagination -JO
  • Updated adding multiple hosts/services through scheduled downtime pages -JO
  • Updated performance graphs page to follow modern report/page format -JO
  • Updated all Highcharts graphs with new styling -LG
  • Updated API help section to explain how to filter object API calls -JO
  • Updated perfdata page with report-style layout -JO
  • Updated performance graphs popup layout on host/service status pages -JO
  • Updated Global Event Handlers to use considerably less memory -BH
  • Updated ADODB database library to version 5.19 -JO
  • Updated Japanese translations (thanks Sasaki) -JO
  • Fixed inability to delete deployed [screen] dashboards, and stopped them from being deployable [TPS#8862] -BH

Added

  • Added timepicker to some datepicker fields -JO
  • Added use of currently selected time format in datetimepickers in Reports and other areas -JO
  • Added export functionality to perfdata/timeline/stack graphs [TPS#2601] -BH
  • Added objects/rrdexport to API [TPS#2601] -BH
  • Added objects/cpexport to API (capacity planning data export) [TPS#8441] -JO
  • Added API Key regeneration function to user pages [TPS#7200..7203|7135] -BH
  • Added system/applyconfig to POST for API [TPS#7198] -BH
  • Added Highcharts default display type [TPS#7617] -BH
  • Added Callbacks for User Creation/Password Change/Deletion [TPS#7155] -BH
  • Added callback help section documentaiton -BH
  • Added names to list of system status icons in system status dropdown menu -JO
  • Added option in config.inc.php to allow php to connect with persistent or normal connections -JO
  • Added custom-includes component to include custom css, js, and images that won’t get overwritten on upgrade -JO
  • Added meaningful API messages -BH
  • Added logging to the auditlog when submitting a core command through the coreuiproxy using constants-nagioscore.inc.php [TPS#8147] -LG
  • Added the rest of the NSCA encryption methods to inbound/outbound transfer admin pages [TPS#8406] -JO
  • Added ability to download Capacity Planning graphs as CSV file with timestamp,value fields [TPS#8441] -JO
  • Added ability to disable/enable user accounts [TPS#6771] -BH
  • Added navbar search to default to the appropriate page depending on which category you click on in suggest box [TPS#8332] -BH
  • Added service search to navbar search box [TPS#8331] -BH
  • Added some basic default MySQL tuning options on fullinstall and an additional script for performing basic tune manually [TPS#8586] -BH
  • Added get_xml_backend cache to Performance Settings [TPS#8584] -BH
  • Added automatic increase of global and root user open file limits -BH
  • Added ability to add free variables via API [TPS#8675] -SS,BH
  • Added required current password field for non-admins to change passwords [TPS#8731] -BH
  • Added output to repair database scripts to inform user if they succeeded or failed [TPS#8701] -TL,JO
  • Added query documentation into API [TPS#8835] -JO
  • Added capacity planning data to be exported via the API [TPS#8441] -JO
  • Added ability to select multiple hosts/services to schedule downtime for on scheduled downtime page -JO
  • Added ability to put all services for a host into schedule downtime at once -JO
  • Added a new Core Component Usermacros for managing user and system macros in Nagios XI [TPS#9008] -LG
  • Added translation of USER macros to all eligible wizard input fields [TPS#6739] -LG
  • Added custom API endpoint functionality [TPS#8979] -BH
  • Added ability to save tabs selected on scheduling page report [TPS#9050] -BH
  • Added tab to system settings in admin section for password complexity, lockout, and max trials [TPS#8729..8730] -BH
  • Added more verbose logging for PHPmailer which shows action, method and referer and will include successfully sent messages [TPS#9136] -LG
  • Added snmptt restart to nagios init script [TPS#9234] -BH
  • Added improved warning/critical lines in Highcharts graphs which can be toggled on and off -LG
  • Added rel=”noreferrer” to target=”_blank” hrefs -BH
  • Added core detection for speeding up compilation during fullinstall/upgrade -BH
  • Added default cURL SSL connection type to TLSv1.2 and added editing setting in System Settings page [TPS#9483] -JO
  • Added clipboard.js and removed the old zclip jquery plugin which relied on ZeroClipboard -JO
  • Added options in global settings to customize Highcharts Avg/Max/Last values (or disable them) [TPS#9611] -JO
  • Added option in global settings to tell Highcharts graphs to ignore null values when calculating ‘Avg’ [TPS#9611] -JO
  • Added event_handler cron job to process events from DB queue -BH

Fixed

  • Fixed non-admin users who had large quantity of services recieving SQL error [TPS#7820] -BH
  • Fixed load_url function to send error messages to apache error_log instead of never giving an error message -JO
  • Fixed recurring downtime to not accept invalid days of month [TPS#8487] -BH
  • Fixed view start/stop reverting to English when different language is selected [TPS#7107] -BH
  • Fixed reports not respecting show host/service alias options [TPS#6518] -BH
  • Fixed buttons to show config changes and errors on Apply Configuration page merging together [TPS#6902] -JO
  • Fixed check_mssql to use PDO opposed to deprecated MSSQL_* functions [TPS#8633] -BH
  • Fixed nagiosxi DB engine type on newer versions of MySQL/MariaDB -BH
  • Fixed admin user not being added to CGI config if configuration cannot be applied [TPS#8819] -BH
  • Fixed searching for host in host status reverting to status detail [TPS#8867] -BH
  • Fixed xiprepimport tool saving comments in filename [TPS#8865] -BH
  • Fixed re-configure object (host/service) not respecting removing hostgroups/parent hosts/servicegroups [TPS#8931] -BH
  • Fixed slow Host/Service Status Details page load for non-admin users [TPS#9024] -SS,BH
  • Fixed newly scheduled pages sending corrupt .pdf files [TPS#8874] -JO
  • Fixed API help section that showed the improper usage of deleting a user [TPS#8634] -LG
  • Fixed SANS Internet Storm Center Top 10 Rising Ports dashlet to use new SANS backend [TSP#9044] -BH
  • Fixed Multistacked Graph Numbers displaying more than 3 decimal points on hover [TPS#9169] -BH
  • Fixed javascript searchable dropdown boxes to be easier to use and have proper styling -JO
  • Fixed unconfigure objects remaining in list even after pressing delete [TPS#9215] -BH
  • Fixed snmptt daemon restart on MIB upload on el7 systems [TPS#9237] -SS,JO
  • Fixed scheduled downtime showing a maximum duration of 9hrs (only a display issue) -JO
  • Fixed LDAP/AD component LDAP is_user to accept organizationalPerson and person [TPS#9272] -JO
  • Fixed LDAP/AD component issue with popup not centering [TPS#9272] -JO
  • Fixed invalid service configuration when using bulk host import to import a service with multiple hosts defined [TPS#9369] -BH
  • Fixed ‘this week’ time period in reports showing the last 8 days if a report is ran on sunday [TPS#9357] -JO
  • Fixed issue with the + symbol in hostnames not creating a proper URL to service details pages for services on that host [TPS#9443] -JO
  • Fixed process_perfdata.pl setting counters for output with ‘c’ values making graphs show up as 0 [TPS#9479] -JO
  • Fixed persistent comment/acknowledge checkbox on host/service details page [TPS#9488] -JO
  • Fixed issue where LDAP would not close if start TLS failed [TPS#9498] -JO
  • Fixed issue with perfdata that has a space in the value [TPS#9523] -SS,JO
  • Fixed scheduled backups local backups page to be sorted by timestamp -JO
  • Fixed event_handler scripts to push to DB queue for event_handler cron -BH

Component Updates

Core Config Manager (CCM) 2.6.0

  • Added ability to set host/hostgroups as “exclude” for services, service templates, host groups, service escalations, and host escalations [TPS#3966] -JO
  • Added icons for tools, configuration, and other nav links -JO
  • Added escape key binding to close overlays [TPS#8911] -BH
  • Updated theme to match the rest of Nagios XI (Modern) -JO
  • Updated splash page to have more information about current configuration -JO
  • Updated ‘Run Check Command’ to evaluate user macros [TPS#8264] -BH
  • Updated ‘Run Check Command’ to use cmdsubsys and execute as nagios user [TPS#6578] -BH
  • Updated ‘Run Check Command’ User Interface to be more intuitive and friendly and use NSP [TPS#9185] -BH
  • Fixed de-activating a contact from the edit page not respecting dependency check [TPS#8777] -BH
  • Fixed services table loading nothing if you delete all of a configs service definitions when selecting a config name from dropdown -JO
  • Fixed CCM not respecting etc/nagios.cfg illegal_object_name_chars [TPS#8864] -BH
  • Fixed various minor security vulnerabilities (thanks John Page aka HYP3RLINX) -JO