5.3.0
- October 3, 2016
Security
- Added advanced setting for Availability report labeled “Do not show service data” that will force it to only show host data [TPS#8382] -JO
- Added more user meta information for better security and auditing [TPS#9269] -JO
- Added improved clickjacking security -JO
- Fixed various minor security vulnerabilities (thanks John Page aka HYP3RLINX) -JO
Updated
- Updated cmdsubsys auditlog to show username in the log message -LG
- Updated scheduled downtime page to allow searching, filtering, and pagination -JO
- Updated adding multiple hosts/services through scheduled downtime pages -JO
- Updated performance graphs page to follow modern report/page format -JO
- Updated all Highcharts graphs with new styling -LG
- Updated API help section to explain how to filter object API calls -JO
- Updated perfdata page with report-style layout -JO
- Updated performance graphs popup layout on host/service status pages -JO
- Updated Global Event Handlers to use considerably less memory -BH
- Updated ADODB database library to version 5.19 -JO
- Updated Japanese translations (thanks Sasaki) -JO
- Fixed inability to delete deployed [screen] dashboards, and stopped them from being deployable [TPS#8862] -BH
Added
- Added timepicker to some datepicker fields -JO
- Added use of currently selected time format in datetimepickers in Reports and other areas -JO
- Added export functionality to perfdata/timeline/stack graphs [TPS#2601] -BH
- Added objects/rrdexport to API [TPS#2601] -BH
- Added objects/cpexport to API (capacity planning data export) [TPS#8441] -JO
- Added API Key regeneration function to user pages [TPS#7200..7203|7135] -BH
- Added system/applyconfig to POST for API [TPS#7198] -BH
- Added Highcharts default display type [TPS#7617] -BH
- Added Callbacks for User Creation/Password Change/Deletion [TPS#7155] -BH
- Added callback help section documentaiton -BH
- Added names to list of system status icons in system status dropdown menu -JO
- Added option in config.inc.php to allow php to connect with persistent or normal connections -JO
- Added custom-includes component to include custom css, js, and images that won’t get overwritten on upgrade -JO
- Added meaningful API messages -BH
- Added logging to the auditlog when submitting a core command through the coreuiproxy using constants-nagioscore.inc.php [TPS#8147] -LG
- Added the rest of the NSCA encryption methods to inbound/outbound transfer admin pages [TPS#8406] -JO
- Added ability to download Capacity Planning graphs as CSV file with timestamp,value fields [TPS#8441] -JO
- Added ability to disable/enable user accounts [TPS#6771] -BH
- Added navbar search to default to the appropriate page depending on which category you click on in suggest box [TPS#8332] -BH
- Added service search to navbar search box [TPS#8331] -BH
- Added some basic default MySQL tuning options on fullinstall and an additional script for performing basic tune manually [TPS#8586] -BH
- Added get_xml_backend cache to Performance Settings [TPS#8584] -BH
- Added automatic increase of global and root user open file limits -BH
- Added ability to add free variables via API [TPS#8675] -SS,BH
- Added required current password field for non-admins to change passwords [TPS#8731] -BH
- Added output to repair database scripts to inform user if they succeeded or failed [TPS#8701] -TL,JO
- Added query documentation into API [TPS#8835] -JO
- Added capacity planning data to be exported via the API [TPS#8441] -JO
- Added ability to select multiple hosts/services to schedule downtime for on scheduled downtime page -JO
- Added ability to put all services for a host into schedule downtime at once -JO
- Added a new Core Component Usermacros for managing user and system macros in Nagios XI [TPS#9008] -LG
- Added translation of USER macros to all eligible wizard input fields [TPS#6739] -LG
- Added custom API endpoint functionality [TPS#8979] -BH
- Added ability to save tabs selected on scheduling page report [TPS#9050] -BH
- Added tab to system settings in admin section for password complexity, lockout, and max trials [TPS#8729..8730] -BH
- Added more verbose logging for PHPmailer which shows action, method and referer and will include successfully sent messages [TPS#9136] -LG
- Added snmptt restart to nagios init script [TPS#9234] -BH
- Added improved warning/critical lines in Highcharts graphs which can be toggled on and off -LG
- Added rel=”noreferrer” to target=”_blank” hrefs -BH
- Added core detection for speeding up compilation during fullinstall/upgrade -BH
- Added default cURL SSL connection type to TLSv1.2 and added editing setting in System Settings page [TPS#9483] -JO
- Added clipboard.js and removed the old zclip jquery plugin which relied on ZeroClipboard -JO
- Added options in global settings to customize Highcharts Avg/Max/Last values (or disable them) [TPS#9611] -JO
- Added option in global settings to tell Highcharts graphs to ignore null values when calculating ‘Avg’ [TPS#9611] -JO
- Added event_handler cron job to process events from DB queue -BH
Fixed
- Fixed non-admin users who had large quantity of services recieving SQL error [TPS#7820] -BH
- Fixed load_url function to send error messages to apache error_log instead of never giving an error message -JO
- Fixed recurring downtime to not accept invalid days of month [TPS#8487] -BH
- Fixed view start/stop reverting to English when different language is selected [TPS#7107] -BH
- Fixed reports not respecting show host/service alias options [TPS#6518] -BH
- Fixed buttons to show config changes and errors on Apply Configuration page merging together [TPS#6902] -JO
- Fixed check_mssql to use PDO opposed to deprecated MSSQL_* functions [TPS#8633] -BH
- Fixed nagiosxi DB engine type on newer versions of MySQL/MariaDB -BH
- Fixed admin user not being added to CGI config if configuration cannot be applied [TPS#8819] -BH
- Fixed searching for host in host status reverting to status detail [TPS#8867] -BH
- Fixed xiprepimport tool saving comments in filename [TPS#8865] -BH
- Fixed re-configure object (host/service) not respecting removing hostgroups/parent hosts/servicegroups [TPS#8931] -BH
- Fixed slow Host/Service Status Details page load for non-admin users [TPS#9024] -SS,BH
- Fixed newly scheduled pages sending corrupt .pdf files [TPS#8874] -JO
- Fixed API help section that showed the improper usage of deleting a user [TPS#8634] -LG
- Fixed SANS Internet Storm Center Top 10 Rising Ports dashlet to use new SANS backend [TSP#9044] -BH
- Fixed Multistacked Graph Numbers displaying more than 3 decimal points on hover [TPS#9169] -BH
- Fixed javascript searchable dropdown boxes to be easier to use and have proper styling -JO
- Fixed unconfigure objects remaining in list even after pressing delete [TPS#9215] -BH
- Fixed snmptt daemon restart on MIB upload on el7 systems [TPS#9237] -SS,JO
- Fixed scheduled downtime showing a maximum duration of 9hrs (only a display issue) -JO
- Fixed LDAP/AD component LDAP is_user to accept organizationalPerson and person [TPS#9272] -JO
- Fixed LDAP/AD component issue with popup not centering [TPS#9272] -JO
- Fixed invalid service configuration when using bulk host import to import a service with multiple hosts defined [TPS#9369] -BH
- Fixed ‘this week’ time period in reports showing the last 8 days if a report is ran on sunday [TPS#9357] -JO
- Fixed issue with the + symbol in hostnames not creating a proper URL to service details pages for services on that host [TPS#9443] -JO
- Fixed process_perfdata.pl setting counters for output with ‘c’ values making graphs show up as 0 [TPS#9479] -JO
- Fixed persistent comment/acknowledge checkbox on host/service details page [TPS#9488] -JO
- Fixed issue where LDAP would not close if start TLS failed [TPS#9498] -JO
- Fixed issue with perfdata that has a space in the value [TPS#9523] -SS,JO
- Fixed scheduled backups local backups page to be sorted by timestamp -JO
- Fixed event_handler scripts to push to DB queue for event_handler cron -BH
Component Updates
Core Config Manager (CCM) 2.6.0
- Added ability to set host/hostgroups as “exclude” for services, service templates, host groups, service escalations, and host escalations [TPS#3966] -JO
- Added icons for tools, configuration, and other nav links -JO
- Added escape key binding to close overlays [TPS#8911] -BH
- Updated theme to match the rest of Nagios XI (Modern) -JO
- Updated splash page to have more information about current configuration -JO
- Updated ‘Run Check Command’ to evaluate user macros [TPS#8264] -BH
- Updated ‘Run Check Command’ to use cmdsubsys and execute as nagios user [TPS#6578] -BH
- Updated ‘Run Check Command’ User Interface to be more intuitive and friendly and use NSP [TPS#9185] -BH
- Fixed de-activating a contact from the edit page not respecting dependency check [TPS#8777] -BH
- Fixed services table loading nothing if you delete all of a configs service definitions when selecting a config name from dropdown -JO
- Fixed CCM not respecting etc/nagios.cfg illegal_object_name_chars [TPS#8864] -BH
- Fixed various minor security vulnerabilities (thanks John Page aka HYP3RLINX) -JO
