Recently active topics

Centreon 24.10.2: API issues

Hello,I recently upgraded my Centreon dev platform to version 24.10.2. While most features are functioning as expected, I am encountering issues with certain options.For instance, when I switch from Light to Dark mode or add/delete columns on the Resource Status page, I receive the following error:Error on updating a userImmediately after this, I am automatically redirected to the login screen.However, upon logging in again, I notice that the changes were successfully applied. In developer mode, I can see...Request URLhttps://mydomain/centreon/api/latest/configuration/users/current/parametersRequest Method: PATCHStatus Code: 500 Internal Server ErrorRemote Address: XX.XXX.XXX.XXX:443Referrer Policy: strict-origin-when-cross-originResponse HeadersApi-version: 24.10cache-control: no-cache, privatecontent-type: application/jsondate: Wed, 27 Nov 2024 17:36:09 GMTserver: Apacheset-cookie: PHPSESSID=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/; secure; HttpOnly; SameSite

4335

[network::huawei::standard::snmp::plugin]: Extend Huawei SNMP plugin to include additional hardware checks (Faultlight, Image Version, Max CPU, PoE, PSU, VLAN validation)Needs Votes

cima-wpSteward *

ContextWe currently use the Centreon Huawei SNMP plugin for switch monitoring.However, several important metrics available via Huawei MIBs are not yet covered by the existing plugin.We would like to request an enhancement to include the following additional checks, based on the MIBs listed below and verified via working internal scripts. Device InformationVendor: HuaweiModel: S5720 series (tested on S5720-52X-LI-AC)SNMP version: v2c Checks RequestedCheck Description Example Output MIB / OID (symbolic) Faultlight Detects hardware fault indicator light OK: Stack slot 1 Light Status OK HUAWEI-ENTITY-EXTENT-MIB::hwEntityFaultLight.OID Image version Retrieves current system image version OK: Stack slot 1 Version: V200R021C00 HUAWEI-SYS-MAN-MIB::hwSysImageVersion.INDEX Max CPU Reports maximum CPU usage since last boot OK: Stack slot 1: Max CPU: 45 HUAWEI-ENTITY-EXTENT-MIB::hwEntityCpuMaxUsage.OID PoE available power Displays total PoE power available per slot

network::fortinet::fortigate::snmp::plugin ap-usage enhancementPlanned

katskaSteward **

Hi,Could you please add channel utilisation, interference, tx power and noise monitoring for Fortigate access-points via RestAPI or snmp? It can be added as a separate mode or ap-usage extra option.I can help with testing the plugin.

437

--plugin=network::fortinet::fortigate::snmp::plugin --mode=sdwan interface filterPlanned

katskaSteward **

Hi,Could you please add interface filter to --plugin=network::fortinet::fortigate::snmp::plugin --mode=sdwan.Currently it is only possible to filter by ID, VDom and Name. We have devices where only MPLS is active or only Inet is active. For example:checking sd-wan 'emea_hub' [vdom: root] [interface: emea-inet] state: up traffic in: 0.00 b/s, out: 0.00 b/s, bi: 0.00 b/s latency: 53.682ms jitter: 0.072ms packet loss: 0.000%checking sd-wan 'emea_hub' [vdom: root] [interface: emea-mpls] state: down traffic in: 0.00 b/s, out: 0.00 b/s, bi: 0.00 b/s latency: 0.000ms jitter: 0.000ms packet loss: 100.000% If I filter using name as emea_hub I will get critical alert. So I need to filter by interface name. bash-5.1$ /usr/lib/centreon/plugins//centreon_fortinet_fortigate.pl --plugin=network::fortinet::fortigate::snmp::plugin --mode=sdwan --hostname=1.2.3.4 --snmp-version='2c' --snmp-community='acb' --warning-traffic-in='' --critical-traffic-in='' --warning-traffic-o

1392

[network::fortinet::fortigate::snmp::plugin] Mode VPN : Service DiscoveryPlanned

SavCentBuilder *

Bonjour,Nous utilisons le plugin Fortigate pour monitorer nos firewalls en SNMP, le discovery du service "Interfaces" fonctionne bien mais Nous aurions voulu mettre en place le discovery pour le mode "vpn".Actuellement le check du mode vpn est un check global qui remonte tout le temps Critical.Fortigate fait la différence entre le check de l'interface d'un tunnel VPN (qui peut être UP) et le check du VPN en lui-même avec toutes les phases 2 (Qui peuvent être down).Nous avons donc actuellement 2 checks distincts or il faudrait que le discovery vpn remonte tout les vpn+phase deux de manière indépendante (Il y en a des centaines par équipements en moyenne).Nous avons créer des commandes de Macro et Discover pour le mode vpn en en modifiant le script perl basé sur le discover du interface (En ajoutant les sections pour les paramètres --disco-show et --disco-format).Cette solution ne fonctionne pas...Y a t'il un autre moyen d'automatiser la création de ces services ?Cordialement conf comman

572

Fortigate's SDWAN Service DiscoveryPlanned

Roterdan_macedoSteward *

Hi,The Fortinet Fortigate SNMP already have the ability to filter sd-wan links by name.W'll be great if a new Disvery Rule to create Services by individual sd-wan links.Using just one service to all sd-wans links can obscure a new CRITICAL error when multiples links fail, and creating one service per sd-wan link can be massive when I manage 500+ Fortigates each with 10+ sdwan link.We need to create SD-WAN services in the same way that we create Interfaces services… Thnaks

693

Possibility to delete services not found by autodiscovery instead of disabling themNew

mikailSteward *

Hello,Is this possible to add a feature to delete the services not found by autodiscovery while initially created by it ? Basically, this option below in the autodiscovery rules with delete instead of disable.As we have a several rules and a service can change rule perimeter, if it is disabled by its previous rule, it won’t be added by the new one as it is already existing in the configuration. Besides having a clearer configuration.Thank you in advance.

154

22 hours ago

florent95Steward *

Update centreon 24.04.17 required current password when admin change a user password

hi,Since version 24.04.17, the current password is required, even if you are an administrator.What is the new menu for resetting a forgotten password?best regard.

533

lpinsivyCentreonian

Removing the ability to create services linked to multiple hosts or host groupsFeature Sunset

Dear users, In order to simplify and improve the user experience of our software, we plan to remove two features in an upcoming major update:Creating services linked to multiple hosts. Creating services by host group.We understand that these features may still be used by some of you, but we believe they can be replaced by the use of templates. We are making this decision to optimize the software and make it more intuitive. Proposal of solutions when updating the Centreon platform Services linked to multiple hostsCreating a service linked to multiple hosts allows you to have an identical configuration of this service for multiple hosts.This service can be transformed into a service template. A single service will be created for each linked host and will inherit the template you previously created.This update will be performed automatically during the Centreon platform update process (target: Centreon 25.10). Services by Host GroupCreating a service by host group allows for the same serv

18210

lpinsivyCentreonian

CVE-2025-54889 - Centreon Web all versions - MEDIUM severitySecurity Bulletin

Publication date: September 24th, 2025Components: centreon-webDescription: A user with elevated privileges can inject XSS in the SNMP traps manufacturer configuration page.Reference: CVE-2025-54889CVSS: 6.8 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)Severity: Medium Status: Fixes have been provided for all supported versions and it is recommended to update Centreon Web on Central Server:Centreon Web 24.10.13 Centreon Web 24.04.18 Centreon Web 23.10.28These versions include cumulative fixes from prior updates.Reporter: Marcelo QueirozStay ahead of potential threats by subscribing to the Security Bulletin section. You’ll receive instant notifications whenever a new bulletin is published, ensuring your infrastructure remains secure and up to date.

640

lpinsivyCentreonian

CVE-2025-54891 - Centreon Web all versions - MEDIUM severitySecurity Bulletin

Publication date: September 24th, 2025Components: centreon-webDescription: A user with elevated privileges can inject XSS in the ACL Resources access configuration page.Reference: CVE-2025-54891CVSS: 6.8 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)Severity: Medium Status: Fixes have been provided for all supported versions and it is recommended to update Centreon Web on Central Server:Centreon Web 24.10.13 Centreon Web 24.04.18 Centreon Web 23.10.28These versions include cumulative fixes from prior updates.Reporter: Marcelo QueirozStay ahead of potential threats by subscribing to the Security Bulletin section. You’ll receive instant notifications whenever a new bulletin is published, ensuring your infrastructure remains secure and up to date.

530

lpinsivyCentreonian

CVE-2025-54892 - Centreon Web all versions - MEDIUM severitySecurity Bulletin

Publication date: September 24th, 2025Components: centreon-webDescription: A user with elevated privileges can inject XSS in the SNMP Traps group configuration page.Reference: CVE-2025-54892CVSS: 6.8 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)Severity: Medium Status: Fixes have been provided for all supported versions and it is recommended to update Centreon Web on Central Server:Centreon Web 24.10.13 Centreon Web 24.04.18 Centreon Web 23.10.28These versions include cumulative fixes from prior updates.Reporter: Marcelo QueirozStay ahead of potential threats by subscribing to the Security Bulletin section. You’ll receive instant notifications whenever a new bulletin is published, ensuring your infrastructure remains secure and up to date.

460

lpinsivyCentreonian

CVE-2025-54893 - Centreon Web all versions - MEDIUM severitySecurity Bulletin

Publication date: September 24th, 2025Components: centreon-webDescription: A user with elevated privileges can inject XSS in the Hosts templates configuration page.Reference: CVE-2025-54893CVSS: 6.8 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)Severity: Medium Status: Fixes have been provided for all supported versions and it is recommended to update Centreon Web on Central Server:Centreon Web 24.10.13 Centreon Web 24.04.18 Centreon Web 23.10.28These versions include cumulative fixes from prior updates.Reporter: Marcelo QueirozStay ahead of potential threats by subscribing to the Security Bulletin section. You’ll receive instant notifications whenever a new bulletin is published, ensuring your infrastructure remains secure and up to date.

520

lpinsivyCentreonian

CVE-2025-8459 - Centreon Web all versions - HIGH severitySecurity Bulletin

Publication date: September 24th, 2025Components: centreon-webDescription: A user with low privileges can inject XSS in the Monitoring Recurrent downtimes page.Reference: CVE-2025-8459CVSS: 7.7 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)Severity: High Status: Fixes have been provided for all supported versions and it is recommended to update Centreon Web on Central Server:Centreon Web 24.10.13 Centreon Web 24.04.18 Centreon Web 23.10.28These versions include cumulative fixes from prior updates.Reporter: Marcelo QueirozStay ahead of potential threats by subscribing to the Security Bulletin section. You’ll receive instant notifications whenever a new bulletin is published, ensuring your infrastructure remains secure and up to date.

670

lpinsivyCentreonian

CVE-2025-8430 - Centreon Web all versions - MEDIUM severitySecurity Bulletin

Publication date: September 24th, 2025Components: centreon-webDescription: A user with low privileges can inject XSS in the Monitoring Recurrent downtimes page.Reference: CVE-2025-8430CVSS: 6.8 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)Severity: Medium Status: Fixes have been provided for all supported versions and it is recommended to update Centreon Web on Central Server:Centreon Web 24.10.13 Centreon Web 24.04.18 Centreon Web 23.10.28These versions include cumulative fixes from prior updates.Reporter: Marcelo QueirozStay ahead of potential threats by subscribing to the Security Bulletin section. You’ll receive instant notifications whenever a new bulletin is published, ensuring your infrastructure remains secure and up to date.

470

lpinsivyCentreonian

CVE-2025-8429 - Centreon Web all versions - MEDIUM severitySecurity Bulletin

Publication date: September 24th, 2025Components: centreon-webDescription: A user with elevated privileges can inject XSS in the ACL Action access configuration pageReference: CVE-2025-8429CVSS: 6.8 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)Severity: Medium Status: Fixes have been provided for all supported versions and it is recommended to update Centreon Web on Central Server:Centreon Web 24.10.13 Centreon Web 24.04.18 Centreon Web 23.10.28These versions include cumulative fixes from prior updates.Reporter: Marcelo QueirozStay ahead of potential threats by subscribing to the Security Bulletin section. You’ll receive instant notifications whenever a new bulletin is published, ensuring your infrastructure remains secure and up to date.

500

Create a new Cato Network connectorPlanned

fixSteward **

Hello !It would be great to have a Cato Network Monitoring connector.Here is some metrics that could be very usefull that we can get throught the GraphQL APIDevice HA (with “site id” and “device id” then haRole propertie)Device Info Device Interface StatusSite Status (connectivityStatus)Number of SDP users connected We did a small one but in Python not integrated with all Perl ecosystems and parsing of Monitoring Connector Ps : I saw it was allready on the roadmap presented yesterday during CEntreon Summit but maybe those input may help !Regards

825

[os::linux::local::plugin] Calculated value of the max open files and percentage thresholds in "open-files" modePlanned

AlekseySteward **

Hello.Now the "open-files" mode assumes that we must set the threshold values statically.Please make a small improvement to this mode.We can get the system open file threshold with the command cat /proc/sys/fs/nr_openThis value can be set to default as the maximum if not explicitly set.This will add convenient percentage WARN/CRIT thresholds.PS: https://github.com/centreon/centreon-plugins/issues/3969

607

Plugin for Splunk : return value of spl requestReleased

FredericGerardSteward **

Hi Persona: operators and adminsProblem to solve: The Monitoring Connector Splunk brings a host template App-Monitoring-Splunk-Api-custom which allows to configure search request using Query-Matches-Number template. This service returns the number of response to the request. But there's no way, with this plugin, to get a value calculated by Splunk.For instance : it'd be useful to monitor ratio of splunk scheduled requests skipped by the scheduler. Proper SPL request exists and return a percentage(index=x blablabla | table skippedRatio). Since the service template counts the number of response, the best one can do is to add condition to the SPL request (index=x blablabla | table skippedRatio | where skippedRatio > y) so that it would generate a response only in case of threshold crossing. It's a shame because threshold is coded in the request, return value can not be historised.Expected outcome: a Query-Number-Value service template.Potential solutions: Enrich plugin to get back a

525

luca.bettiolSteward *

Use separate FQDNs: one for pollers, one for web UI

Hello everyone, I have Centreon installed and configured using the FQDN central.domain.tld, and the pollers (with ZMQ / Gorgone) are all pointing to that.The Poller are configured in Pull Mode.What I want is to keep that FQDN for all poller-side communications, but introduce a second FQDN (monitor.domain.tld) just for the web interface / dashboard / services configuration (HTTPS, port 443). In short: two FQDNs pointing to the same central server, but with different “roles” — one for backend poller traffic, the other for GUI access. Is this configuration feasible with Centreon? What pitfalls should I watch out for? Should I just create a second DNS record? (PS. The Centrale Is configure in HTTPS with a Wild card Cert for *.domain.tld.) Thanks!

Centreon Monitoring Agent

BasileSteward *

Centreon Monitoring Agent - Restrict Command

Hello,I did some tests with the new Centreon Monitoring Agent with a Windows Server host and I was wondering if there was a possibility to restrict some check or command on the host directly ?I tested with the connexion agent to poller and I was able to restart the server (so I think that shutdown is possible also) using the centreon plugin with the mode cmd-return just by putting shutdown /r in the --command option.That means that anyone with an access to Centreon can reboot or shutdown a server if the CMA is configured on the host.Thanks for the help !

373

rachidkhSteward **

Centreon broker - SQL errors

Hi evryone How can I solve the problem below? It happens to me every 2 or 3 days and it disappears after restarting the broket service. [2024-12-26T14:21:12.461+01:00] [sql] [error] mysql_connection 0x7f7b680225a0 attempts 2: could not store logs correctly: errno=0[2024-12-26T14:21:14.419+01:00] [bbdo] [info] BBDO: received pb acknowledgement for 1000 events[2024-12-26T14:21:19.351+01:00] [bbdo] [info] BBDO: received pb acknowledgement for 1000 events[2024-12-26T14:21:22.474+01:00] [sql] [error] connection fail to execute statement 0x7f7b680225a0: error: errno=0[2024-12-26T14:21:22.474+01:00] [sql] [error] mysql_connection 0x7f7b680225a0 attempts 2: error: errno=0[2024-12-26T14:21:23.589+01:00] [bbdo] [info] BBDO: received pb acknowledgement for 1000 events[2024-12-26T14:21:27.476+01:00] [sql] [error] connection fail to execute statement 0x7f7b680225a0: could not store logs correctly: errno=0[2024-12-26T14:21:27.477+01:00] [sql] [error] mysql_connection 0x7f7b680225a0 attempts 2: c

845

LmarySteward *

Centreon-broker - SQL error

Hello everyone, I have a problem with my connection between my centreon-broker and my SQL database. in file /var/log/centreon-broker/central-broker-master.log i have these errors : mysql_connection 0x7fc69c13a970 attempts 2: could not store logs correctly: errno=5026 Server returned an error packet without further information connection fail to execute statement 0x7fc69c13a970: error: errno=5026 Server returned an error packet without further information mysql_connection 0x7fc69c13a970 attempts 2: error: errno=5026 Server returned an error packet without further informationWith this error i dont have event-logs and history for my hosts and services and thise is critical for my company. I search since 3 days but nothings … I juste need to restart centreon-broker and the connection is ok but only for a few hours. After i need to restart again centreon-broker. Help me please to repear my centreon !Thanks

141

New Monitoring Connectors Release – October 2025product updates

ltirandCentreonian

Every month, Centreon extends its monitoring connector catalog and implements new ones, allowing you to connect your IT monitoring with more ITOps tools. The result: increased visibility and business observability capabilities. We also offer enhancements and fixes on existing connectors.Here is the latest news on your best allies: our monitoring connectors!This October update includes a lot of enhancements and bug fixes, as well as one new connector : Microsoft WSUS CMA. More details on this month’s monitoring connectors can be found in the release note. And more information about the 24.10 new release here Would you like to contribute or suggest improvements? Join us on The Watch or GitHub, where you can also show your support by giving us a star. Additionally, feel free to participate in discussions about plugins and connectors (monitoring packs, Plugin Packs) right here on The Watch. See you next month for more new features!

860