Product Updates

A new update for Centreon map 21.10 is available. Click the version button in Product Updates to access detailed release notes:centreon-map-21.10.8

A new update for Centreon map 22.04 is available. Click the version button in Product Updates to access detailed release notes:centreon-map-22.04.2

A new update for Centreon map 22.10 is available. Click the version button in Product Updates to access detailed release notes:centreon-map-22.10.3

Dear watchers,This end of the year comes with some presents for Plugin Packs users! New monitoring packs available  Three new connectors are joining the family! This month’s release includes Packs for various purposes, such as: Voice over IP with Patton SmartNode (via SNMP) Security with  Stomshield (via API) Environment sensors with APC Sensors (via SNMP), allowing to monitor recent sensors, such as Netbotz 250  Enhancements Great enhancements this month! The Thales Mistral pack now includes more complete monitoring for clusters.Office 365 now comes with a mode to monitor license usage.Storage monitoring for Hitachi NAS and NetApp Ontap (via Rest API) gets improved by the ability to monitor quotas. Enhancements impacting current configurations  Watch out if you are using sql-statement mode from one of the above Plugin Packs, an improvement in the way the query is protected may affect your existing services.

A new update for Centreon map 22.10 is available. Click the version button in Product Updates to access detailed release notes:centreon-map-22.10.2 centreon-map-engine-22.10.2

A new update for Centreon web 22.10 is available. Click the version button in Product Updates to access detailed release notes:centreon-web-22.10.2

A new update for Centreon web 22.10 is available. Click the version button in Product Updates to access detailed release notes:centreon-web-22.10.2

Long wait is now over, the new MAP is available!As of now it is compatible only with the 22.10 version but will be with the 22.04 in the coming days.You will find all necessary information for installation and migration of your existing views in our official documentation.We also renamed the beta program “The Watch” group as “MAP (Web) Early adopters”. You’ll find some interesting documentation and can freely exchange with the community, raise feedback or just share thoughts on this new extension.In a nutshell, new MAP implementation is: A new online editor Graphical views can now be created and edited directly from the Centreon web user interface, by any user with the proper user rights.The user interface is still an easy-to-use drag and drop drawing tool that retains all the capabilities from the legacy desktop client, albeit with a slightly different look and feel.Based on the widely distributed Draw.io open source library, map edition becomes as easy as pie.  A new server to increase performances The MAP server stores all graphical views and serves them to the Centreon web interface. On very large monitoring platforms, with thousands of views showing thousands of objects in real-time, the legacy version of the server could struggle to keep up.A brand new server has been developed, implementing a new data model, to increase the performance in all circumstances.  A migration process  As it was key for us that you can still use your existing views, we have implemented a fully automated migration process. During this, all the views you created with the desktop client will be converted to the new format and stored in the new database. From here, you will be able to edit your maps and create new ones directly from your Centreon web interface.At any time, you can roll back to the previous version and find your views exactly as you let them before the migration. It is important to note that any modification you do on your views and any newly created maps with the web interface will not be backported to the legacy MAP environment after roll back. MAP is now ready to evolve and new features will be available on each and every (even minor) versions. The MAP team is eager to hear your feedback and ideas. See also:Blogpost EN Blogpost FR

Amongst this month's monitoring packs release, there are some exciting new modes if you run your cloud deployment on Azure or migrate to the Microsoft cloud.  These modes are part of the Azure Management Costs Pack. Initially, we just added a Budget mode to check your spending for a given allocation. Still, thanks to your feedback and contributions from the centreon-plugins community, we can now check much more things, including: Cost explorer; do you need to quickly know the cost of a subscription or a resource group? Do you need to filter on specific tags to rebill part of your Azure Costs to one particular department or project? Embrace this new mode that will help you track your spending in real-time!  Hybrid Benefits; make sure you're optimizing your licensing costs and that your configuration grant eligible resources with this optimized license allocation.  Orphaned Resources; sometimes, you might have disks and network cards that aren't linked with anything, and this mode will help you find these. Tags Compliance; these metadata are essential and widely used to help the DevOps teams manage resource lifecycle, automation, and cost optimization. That's why this mode shows up to help you ensure that within a subscription, tags are correctly set. Check for a tag key, a key value, and even multiple pairs! All these new features are here to help you be more efficient in your day-to-day Azure management and automation, grab compliance-oriented metrics, and do faster troubleshooting! Give it a try :)    

Hello fellow watchers,Pretty interesting release this month, it really highlights how Centreon is a very adaptive monitoring system with trendy connectors, and some that just a few will ever need!  New monitoring packs available  Eight new connectors are joining the family! This month’s release includes security-oriented templates and plugins to help you track your devices’ health and performance (Thales Mistral VS9, PineApp Mail Secure).It also includes network and communications features, with the new Avaya Communication Manager Pack, Enterasys SNMP, and PICOS, which is shipped embedded in Pica virtual switches. Because energy management is crucial– and now that, given the current energy crisis, a closer look at energy consumption is more than called for– you can monitor your on-site Himoinsa power devices with a brand new connector. Enhancements Great enhancements this month! The Azure Management Costs pack now includes compliance checking modes and extends monitoring use cases to FinOps. Check the detailed post on this topic.New Generic SNMP discovery is available! Scanning the network with the existing rule was great, but we thought it’d be interesting if we could discover all IP addresses and VLANs for a given host to then check each of them with ICMP. So now, you can achieve this  with this pack,thanks to this new discovery provider.See beyond the storage pool dimension: You can now monitor LUNs configured on Huawei OceanStor. Enhancements impacting current configurations  After a first security update at the beginning of the year, allowing you to get passwords from vaults and encrypt your cache files, we are again enhancing security to further prevent malicious users from running unauthorized commands on monitored systems. This security update required rewriting and modernizing some connectors’ code. So if you are using some of the connectors shown above, make sure to run a careful update and that you are always using the latest version of both plugins and packs. Bugfixes Several fixes are shipped with this release:  the missing Aggregates service template was added to the NetApp Ontap Rest API connector Some mode names were corrected in Windows NSClient 0.5 connector’s command definitions Removed typos in Mikrotik SNMP uptime command.  In latest Centreon versions (>= 22.04), IP-Label Ekara host discovery provider now correctly obfuscates sensitive macros . If you use some of the packs shown above, you should consider upgrading. Bug fixes may have more or less impact depending on how you use them. To know if a quick upgrade is required, simply check the release note. Centreon Plugins Indeed, all connectors above are fueled by awesome underlying open-source plugins, if you want to know everything about what happen within its codebase (more than 30 pull-requests from 7+ contributors)  that hasn’t necessarily impacted IT-100 and IT Edition packages, feel free to check these links: Bug fixes Enhancement Breaking changes In the next days, I won’t be part of Centreon headcount anymore. What a great adventure it has been and how blessed I feel to have worked with such a wide and wonderful community these past ten years. Thank you all, I wish you the best. 

SummaryAn exploit for a critical vulnerability (CVE-2022-37454) impacting PHP and other middleware was publicly released on October 20, 2022.A detailed description of the vulnerability can be found on Red Hat Customer Portal.The Centreon Security Group has conducted an initial assessment across the codebase to determine the impact of this vulnerability.   ImpactsNot specified by publisher Data Privacy Breach Affected systemsPHP 8.0.x versions prior to 8.0.25 PHP 8.1.x versions prior to 8.1.12 State of investigationRed Hat is currently under investigation on potential effects.Centreon doesn’t use SHA-3 mechanism, so no Centreon Editions is impacted.However, PHP versions 8.0.25 and 8.1.12 are already available with fixes to this vulnerability, so PHP can be updated on your Centreon platforms using following commands:For all supported Centreon versions (21.10 to 22.10) on Enterprise Linux 7 et 8:yum update php\*systemctl restart php-fpmFor Centreon 22.04 on Debian 11:apt updateapt upgrade phpsystemctl restart php8.0-fpmFor Centreon 22.10 on Debian 11:apt updateapt upgrade phpsystemctl restart php8.1-fpm This advisory will be updated as additional information becomes available. Please make sure to subscribe to updates.

A new update for Centreon web 22.10 is available. Click the version button in Product Updates to access detailed release notes:centreon-web-22.10.1

 SummaryA zero-day exploit for a vulnerability code-named Text4Shell (CVE-2022-42889) was publicly released on October 12th 2022. The Centreon Security Group has conducted an initial assessment across the codebase to determine the impact of this vulnerability.  The vulnerability is embedded in a java component named Apache-commons-text, in versions from 1.5 to 1.10. It can only be exploited in a very specific context. ImpactCentreon components that could have been affected are the ones that uses Java code: Centreon MAP server Centreon MBI AS400 plugin No other component (including opensource) is affected.No Centreon Cloud service is affected. State of investigationMAP, MBI and AS400 plugin do not use this dependency in any version.If this library is present on your Centreon environment you need to check which software uses it. MAP, MBI and AS400 plugin are not affected by Text4Shell. ---- UPDATE 11/08/2022 17.00 ---- The library commons-text-1.9.jar is actually retrieved indirectly by one of our MAP software dependencies.Even if present on the file system, this library is not used by any component of Centreon.Therefore, there is no way the flaw can be exploited through the Centreon product.We will generate new versions of MAP with the commons text library removed.However if you would like your vulnerability scanners to not raise a false positive, there is no harm in simply deleting the library file located in /usr/share/centreon/www/modules/centreon-map4-web-client/editor/WEB-INF/lib/  

Released during the Fall of 2022, Centreon software version 22.10 is applicable to both Centreon Cloud (the SaaS version of the platform) and Centreon On-Premises (for Self-Hosted deployments). Centreon 22.10 is also applicable to all software editions: Open Source, IT Edition, Business Edition and MSP Edition.This is 22.10 in a nutshell:User Authorization with OpenID Connect Monitoring Configuration, with Auto-Discovery More productivity with a better User Experience Platform Architecture and Operations Stay tuned for a new MAP user experience  So, what’s new with Centreon Platform 22.10? This is what you will discover by clicking on the button below 😉  Read more/EN       Read more/FR     

A new update for Centreon mbi 22.04 is available. Click the version button in Product Updates to access detailed release notes:centreon-mbi-22.04.3

New monitoring packs available   Three newcomers this month:  You can finally monitor your vCenter appliance using SNMP, including memory consumption Aruba Orchestrator, if you manage your WAN network migration to SD-Wan using this tool, check this pack and discover all your assets painlessly.  There’s already a stream connector to send monitoring data to Splunk and now there’s a dedicated pack to monitor the health of  its main components, ensuring that your indexes are correctly ingesting data. You may only want to run a SPL query and trigger an alert based on the number of matches.  Enhancements  The Centreon Base Pack has been  enhanced, that’s a rare occurrence. No need to run an update unless you want to add extra options and parameters to Ping probes.  The Kadiska integration is extended once more, with added discovery capabilities, new metrics, and new way to display Watcher metrics, splitting them according to sites or gateways or tracking WFA (work from anywhere) performance.  The Alcatel Omniswitch integration has been enhanced to support more hardware series within this single pack.  Windows packs include a new Update service, whatever the protocol you’re using to monitor your servers. Enhancements impacting current configurations   A great part of the Fujitsu Eternus DX Pack  was rewritten. This enhanced pack now supports more hardware series and more flexible SSH connections. It may impact some configurations so be careful when upgrading it.  Bugfixes   Many packs were subjected to fixes this month of p, mainly to account for a regression found in discovery jobs, a consequence of the recent Amazon Secure Token Service update.  Minor typos were corrected in the HP 3PAR and Azure AD  packs. If you use one of the packs above, you should consider upgrading. Bug fixes may have more or less impact depending on how you use these packs. To know if a quick upgrade is required, simply check the release note.

An internal audit has identified security vulnerabilities in Centreon MBI and Centreon Web.Centreon is unaware of situations where these could have been exploited.These vulnerabilities have a low likelihood of being exploited but have a severe impact if exploited which results in a high risk.It is therefore highly recommended to apply the provided product updates as early as possible. Who is impacted?Your Centreon platform is vulnerable if Centreon MBI has been installed.Centreon Cloud platforms are not impacted. Applying the fixFixes have been provided for all supported versions and it is recommended to update both Centreon Web and Centreon MBI: Centreon Web 22.04.7 and Centreon MBI 22.04.2 Centreon Web 21.10.13 and Centreon MBI 21.10.2 Centreon Web 21.04.20 and Centreon MBI 21.04.5 These versions include cumulative fixes from prior updates. If you are running an unsupported version, it is strongly recommended that you upgrade your platform to 22.04.

A new update for Centreon mbi 21.04 is available. Click the version button in Product Updates to access detailed release notes:centreon-mbi-21.04.5

A new update for Centreon mbi 21.10 is available. Click the version button in Product Updates to access detailed release notes:centreon-mbi-21.10.2

A new update for Centreon mbi 22.04 is available. Click the version button in Product Updates to access detailed release notes:centreon-mbi-22.04.2

A new update for Centreon web 21.04 is available. Click the version button in Product Updates to access detailed release notes:centreon-web-21.04.20

A new update for Centreon web 21.10 is available. Click the version button in Product Updates to access detailed release notes:centreon-web-21.10.13

A new update for Centreon web 22.04 is available. Click the version button in Product Updates to access detailed release notes:centreon-web-22.04.7

A new update for Centreon map 21.10 is available. Click the version button in Product Updates to access detailed release notes:centreon-map-21.10.6

A new update for Centreon web 21.10 is available. Click the version button in Product Updates to access detailed release notes:centreon-web-21.10.12