2012R2.9 - 02/11/2014 ===================== - Fix to the backup_xi.sh to get place the config.dat that it sources in, into a specific directory. Added quotes around password variables as they could have special chars. -SW - Fix for CSV export on Availability report. Thanks Brian Christiansen for the patch! -SW - Fix for old graphexplorer dashlets to now show up again with new graph explorer -JO - Fix for graphexplorer giving an error in the error log -JO - Fix graphexplorer to show custom selected times properly -JO - Fix bug where autodiscovey jobs never complete -SW - Fixed graphexplorer to show hosts with perfdata that don't have _HOST_ perfdata -JO 2012R2.8c - 01/20/2014 ===================== - Fix premature release of switch wizard slated for 2014 release that was missing dependencies -SW 2012R2.8b - 01/17/2014 ===================== - Fix bug where Configure -> Re-configure this host/service would not work if notification optiona had not been set -SW 2012R2.8 - 01/15/2014 ===================== - MIB upload page now runs the custom SNMPTT addmib command if present and process mib box is checked -SW - Fix hostgroup/servicegroup grid dashlets to sort services listed alphabetically -SW - Fix bug where Configure -> Re-configure this host/service would not work if additive inheritance was set in CCM -SW - Add ability to schedule recurring downtime for wildcard services as well as all services on a host. Thanks Brian Christiansen for the patch! -SW - Fixed bug where status table with downtime filter was not showing the correct results. Thanks Brian Christiansen for pointing us in the right direction! -SW - Fixed bug where in the Manage Variable Definitions popup under Misc Settings in CCM, if you insert new definitions the old values don't get cleared. Thanks Brian Christiansen for the patch! -SW - Fixed bug where when creating a user, if you choose the "Admin" authorization level the checkboxes below are greyed out (except for read-only access). When you go back into that user the boxes are not greyed out and you can select them. If you change the level to User and then back to Admin the boxes are greyed out again. Thanks Brian Christiansen for the patch! -SW - Fixed bug where read_only users were not being added to the nagios cgi.cfg -SW - Fixed bug where key indexes were not getting added to nagios DB until first upgrade was performed -SW - Change graphexplorer to a be a core component -SW - Added ntpd to install and run by default. -SW - Added the ability to perform the Nagios XI upgrades from the web UI with logging (2014 feature) -SW, JO - Fixed check for update button to force an update check -JO - Added proper pagination that doesn't show all available pages and jump to tables to the CCM on pages that have tables -JO - Added theme section and themes to Nagios XI (2014 feature) -JO - Added ability to change the highcharts graph theme from grey (2014 feature) -JO - Add gauges dashlets to service/host detail pages (2014 feature) -SW - Added timeframe selection to host/service "Performance Graphs" tab (2014 feature) -JO - Clicking the title in a timeline graph will now redirect to the host/service page for the host/service in the graph -JO - Dashlets now snap to each other borders if they are within 10px of eachother -JO - Dashlets now have a slimmer bounding box (2014 feature) -JO - All dashlets will now outline in a light color when resizing or dragging a dashlet -JO - Forgot password now sends an email to confirm resetting a password before actually resetting it -JO - Added new advanced options to availability report (2014 feature) -JO - Updated Availability, Alert Histogram, Executive Summary to use high charts graphs -JO - Updated TAC to use different verbage for active/passive checks, change passive icon to only display if active checks are disabled. Thanks Brian Christiansen for the patch! -SW 2012R2.7 - 11/26/2013 ===================== - Fixed bug with 2014 features and search bar dissappearing -JO 2012R2.6 - 11/25/2013 ===================== - Added view rotation users setting so views will remain stopped/started for users when they return to the views page based on their last setting -SW - Add saved user-based collapsible menus (2014 feature) -SW - Added script to allow contacts to send notification using XI mail settings (e.g. via SMTP) -SW - Fix calendar selection on Audit Log -SW - Added exit codes to backup_xi.sh -SW - Fixed bug which was preventing CCM template options to persist -SW - Updated Spanish translations. - LC, SW - Updated reporting to work even if there is a external url the xi server can not connect to. -JO - Added back in links inside PDFs. -JO - Fix bug where clicking on hosts in hostgroup summary, should display the hosts grid, not the services grid. -SW - Fix encoding of imported RSS Feeds -SW - Fix calls to the CLI use compliant languages, updating for the en_EN to be en_US in nearly all locations.. -SW, NS - Fix encoding with imported RSS Feeds -SW - Added base for upgrade through the web UI -SW - Fixed Save button (again) in CCM for all IE versions -SW - Removed console.log debug outout which was causing some browsers to stop processing javascript -SW - Fix XSS vulnerability in Tools Menu. User would have needed account on system to be able to inject items in their own page, but is now resolved. -SW - Additions and fixes to the deadpool (2014 Feature). -SW - Added the ability to create system backups through the UI (2014 Feature) -JO - Add logic to upgrade from the Web UI (2014 Feature). -SW - Remove requirement of installing from /tmp -SW - Added ability to select dates for report with the calendar icons that have been there all along... -SW - Added the ability to DELETE archived config snapshots. Added the ability to RENAME the archived snapshot's filename. (2014 Feature) -JO 2012R2.5 - 10/11/2013 ===================== - Fix the broken recurring downtime script -SW - Fix further issues with Wizard form buttons in various browsers. -SW - Fix missing do_page_end in CCM that was possible causing old browsers to not be able to submit form -SW - Fix Mass Acknowledge problem if language was set to en_EN -NS - Fix for Scheduled Reports if they are scheduled in the 12AM hour. -AB - Fix obsess over service in CCM. -AB 2012R2.4b - 09/30/2013 ===================== - Fix issue with upgrade caused by premature NagiosQL db upgrade run -SW - Fix issue with Chrome submitting the back button instead of Next on Wizards when the Enter Key is pressed. -SW 2012R2.4 - 09/24/2013 ===================== - Many CCM Internationalization updates/additions -SW - Fix for SQL injection vulnerability in NagiosQL -SW (Thanks Denis Andzakovic) - Fix for multi-byte chars in PDF files -JO,NS - Fixed bug which prevented scheduling recurring downtime if a host did not have any services -SW - Added additional security for old links if $cfg['secure_response_url']=1; in config.inc.php -SW - Fix encoding of form search boxes and tooltips to display UTF-8 chars -SW - Add ability to allow HTML in comments if Allow HTML Tags in Host/Service Status is checked. Thanks Nate Broderick & Brian Christiansen. -SW - Addition of HelpSystem including videos and links to documentation in most pages of XI -SW 2012R2.3 - 08/25/2013 ===================== Add Japanese language support. Thanks Jupiter Technology for all the hard work! -SW Fix where unicode chars entered in comments/acknowledgments are now displaying properly -SW Fixes for internationalization of email messageCharSet to UTF-8 -SW Fix "Add User" was not giving descriptive errors when failing -SW Fix scheduled downtime script to work with RAM disk -SW Fix PDF on availability report of Host has no services -SW Add ability to secure notification %responseurl% by setting $cfg['secure_response_url']=1; in config.inc.php -SW Fix permalink copy to clipboard -SW User Dashboards are now sorted alphabetically -SW Removed language conversion from text that goes in images on Availability report as all languages not supported -SW Reworked CCM to be able to include XI functions. -SW Fixed CCM Bug where Hostgroups and contactgroups are not added to host/service escalations when you add them for the first time -SW Fix bug where users without permissions on a host could not set (or view) recurring downtimes for services they are a contact for -SW Change to load splash page images locally to avoid mixed content -SW Fix sort order on host, hostgroup, servicegroup dropdown list to be ASC -SW Fix to allow locale get variable to pass through auto-login -SW Fixed PNP default template bug that allowed comments to overflow the RRD memory and cause a legend is too long error. - NS Fix so Host Graphs will display all datasources of performance data for services, not just the first -SW Fix in CCM to allow quotes in the value section of free variables -SW Fixed links to localhost issues in Executive summary and NagiosXI pages when sending out schedule reports - NS/SW 2012R2.2 - 06/05/2013 ===================== - Fix bug causing SSL users to experience some ajax items not loading, apply configuration to go on forever and submitted commands to not return -SW - Fix in CCM where templates didn't maintain order applied -SW - Fix in CCM where Limit Results didn't stick if you selected 250 -SW 2012R2.1 - 05/24/2013 ===================== - Fix upgrade order so new sourceguardian extensions get upgrade BEFORE new encrypted files are applied -SW - Fixed CCM Bug where 'Static Configuration Directory' in Config Manager Settings was always /tmp -SW 2012R2.0 - 05/20/2013 ===================== - Updated sourceguardian extensions to version 9 to allow support for PHP 5.4 -SW - Updated some link references from the Legacy CCM to the New CCM -SW - Add ability for notification templates in Admin -> Notification Management to be deleted - SW - Added inode filesystem check to the profile.zip -SW - Fix for php-mcrypt bug writing module.so instead of mcrypt.so in the mcrypt.ini -SW - Upgrade ndoutils to 1.5.2 -SW - Upgrade to Nagios Core 3.5.0 -SW - Patched Nagios Core 3.5.0 Fixed bug #445: Adding triggered downtime for child hosts causes a SIGSEGV on restart/reload (Eric Stanley) -SW - Patched Nagios Core 3.5.0 Fixed bug #375: Freshness expiration never reached and bug #427: freshness threshold doesn't work if it is set long (Scott Wilkerson, Eric Stanley) -SW - Fix to support multi-digit sub-versions in components and wizards -SW - Updated the profile component to now fetch system and apache log information - SL / AB - Fixed bug in CCM where clicking "Remove All" left select items disabled (versions 1.6 & 1.7 affected) - MG - Fixed CCM bug where groups couldn't select objects as members if they had the same name - MG - Fixed bug with Nagios Mobile where host escalations was not authorizing contacts properly - MG - Fixed MIB upload bug where if it didn't contain any TRAP or NOTIFICATION definitions it would fail -NS - Updated CURLOPT_SSL_VERIFYHOST to 2 in load_url() since support for 1 is about to be removed in PHP 5.4 and Curl - MG - Fixed BPI javascript bug with "Clear All" and re-enabling disabled select options - MG - Fixed BPI bug where syncing host/servicegroups added a duplicated definition and prevented the group from being edited - MG - Fix for object case sensitivity lookup where case sensitivity was not alway ignored - EG - Added ability to turn off HTTPPROXYTUNNEL from proxy component -SW - Added changes so custom logos display on reports if they are added to the custom logo component -SW - Added v3_priv_proto for SNMP v3 in SNMP Wizard -SW - Added ability for Quick find auto-complete to include host alias field -SW - Fixed html entities showing up in the second column of the CCM table -NS - Fixed bug that would perfdataproc cron to stack up processes if host set for outbound transfer was down or entered incorrectly -SW 2012R1.8 - 04/17/2013 ===================== - Fix bug introduced with mixed case usernames/contacts -EG/SW/MG 2012R1.7 - 03/27/2013 ===================== - Added /var/lib/mrtg and /etc/mrtg/mrtg.cfg to the XI backup/restore scripts -SW - Mods to speed up availability report and executive summary for users with "can see all hosts and services" privileges -SW - Fix Bug in Tactical Overview where it wasn't displaying the correct totals -SW - Allow a locale to be passed to the login page to force a certain language upon login. login.php?locale=en_ES - MG - Added language selection icons on the login page. These will override default settings for the duration of the session - MG - Fixed pass by reference bug that was causing deprecation warnings. - NS - Fixed bug #368 with Notification Deployment templates - MG - Fixed iframe display issues with Ipads/Iphones - MG - Fixed CCM bug with action_url and notes_url not being escaped properly - MG - Updated system profile component to fetch a downloadable zip with useful log information - SL / MG - Fixed CCM bug where wildcards weren't working correctly - MG - Fixed bug where child hosts weren't able to be deleted with the nagiosql_delete_host.php script - MG - Fixed BPI PHP warning about division by 0 - MG - Fixed BPI bug with long plugin output not being truncated for display correctly - MG - BPI: Updated to HTML 5 and forced IE to display in Edge mode so it will work correctly without having to manually set compatibility mode - MG - BPI: Fixed bug with BPI groups not re-populating the form for selected child groups - MG - Fixed CCM bug with (+,null,standard) inheritance options not saving correctly - MG - Added CCM feature to denote Service->Servicegroup relationships from Servicegroups page - MG - Fixed bug in CCM where illegal macro characters (`~$&|'"<>) were allowed to be saved - MG - Fixed bug in CCM where @ was being read as an illegal object name character - MG - Forced username to lowercase upon login to prevent problems with Nagios Core permissions - EG - Fixed bug where apache crontab wasn't being initialized on some systems - used for scheduled reporting - MG - Fixed CCM bug where host and contact description fields were required - MG 2012R1.6 - 02/05/2012 ===================== - Fix for case-sensitive object ID lookups from NDOUtils - EG - Fix for CCM case-sensitive Config Names not being written to file - MG - Fix for host fields VRML image and statusmap image not repopulating correctly - MG - Fixed Reflected XSS vulnerability related to dashlet AJAX loads (Reported by James Clawson) - MG - Fixed vulnerability where read-only users could access auto-discovery directly (Reported by James Clawson) - MG - Fixed shell vulnerability for autodiscovery tool (Reported by James Clawson) - MG - Removed use of the 'at' command for CCM audit log entries. Only selective entries are forwarded along to XI's audit log now. - MG - Removed setting of putenv(LC_ALL) in CCM, apache was complaining on Cent/RHEL6+ systems - MG - Fixed JS function calls in CCM that used attr() and updated them to use prop() where appropriate. (Chrome Fix) - MG - Fixed bug in notifications report where pdf exports came back empty if the search field was used - MG 2012R1.5 - 01/30/2013 ===================== - Fix upgrade script so users customized commands aren't overwritten -SW - Fixed CCM bug with Chrome where selected table rows weren't being deleted properly - MG - Fixed CCM 1.4-specific bug where CGI Config and Core Config weren't resaving properly - MG - Forced IE browser mode for maximum compatibility with IE - MG - Mods to quickstart text and links - EG - Fixed bug #348 in Bulk Mods related to object names with spaces not working correctly. - MG - Fixed CCM bug where contactgroups could be assigned to themselves - MG - Fixed bug where login alerts popup would display twice - MG - Fixed a bug where the CCM (apache) was emailing the root user with STDERR output when audit logging - MG - Added fix to prevent CCM configuration file from having improper permissions - MG - Fixed JQuery conflicts causing AJAX load problems in IE9 - MG - Fixed 1.4-specific bug on Tac overview where Up hosts count was always 0 - MG - Fixed CCM bug with IE where notification period wasn't repopulating the form correctly - MG - Fixed issue where password changes weren't updating properly in htpasswd.users file - MG 2012R1.4 - 01/16/2013 ===================== - Fix permissions for unconfigured objects file to allow removing or deleting objects. -SW - Fixed issue in CCM where free variables weren't escaping backslashes properly - MG - Fix bug where Scheduled Downtime backend API threw error -SW - Fixed bug where CCM audit logging wasn't working correctly - MG - Fixed bug #325 where cloning a host, service, template, or contact moved custom variables instead of copying them - MG - Fixed tracker item #323 to support custom file locations with Unconfigured objects - MG - Refactored data fetches for status information, resulting in a major decrease in page load times, and less CPU overhead for mysqld/httpd - MG - Fixed 1.3-specific bug with Nagios BPI checks - MG - Fixed 1.3-specific bug with Nagios BPI groups not repopulating the form correctly - MG - Added link for admins to be able to edit the BPI config file at any time. - MG - Added new host commands to the host object details page - MG - Fixed several issues with the screen dashboard - MG - Added a default POT file for easy updates of other translation files - MG - Fixed issue where menu items were not being translated - MG - Added fuzzy translations for German, Spanish, French, Italian, Portuguese, Russian, and Chinese - NS - Added fix to installation script to check for new RHEL subscription method - SR - Fixed "Scheduled Events Over Time" chart to work over https -SW - Updated SQL query for timedeventqueue chart data to pull from host and service status tables instead. - Check statistics are now fetched from Nagios Core status, eliminating the need to use ndoutils hostchecks/servicechecks tables - The following setting can be implemented in ndomod.cfg to reduce SQL overhead on larger installs: data_processing_options=67108669 - Refactored Tactical overview dashlets for a substantial improvement in load times - MG - Added host alias to search criteria. Tracker item #337 - MG - Updated default notification messages to use %hostalias% macro - EG - %hostalias% macro now defaults to use value of %host% if not specifically set - EG - Removed empty PNP template for check_smtp checks causing missing performance graphs - MG - Fixed bugs with CCM variable sanitization - MG / NS 2012R1.3 - 12/05/2012 ===================== - Fix permissions for restore script. -SW - Fix so state history works for individual services -SW - Fix bug in CCM where selected None in Limit Results would reverts back to 15 -SW - Fix bug where users couldn't change Max Notifications Age on database cleanup -SW - Fix bug where users couldn't change address for mobile carriers, always used defaults. -SW - Nagios BPI: Fixed bug with empty auth_users printing lots of commas in bpi.conf - MG - Nagios BPI: Added additional commands to be used with the api_tool.php script. Use -h to see usage for available commands. - MG - Nagios BPI: Fixed issue where BPI group states were being calculated unnecessarily on page loads. - MG - Nagios BPI: Fixed bug with empty hostgroups creating ghost entries- MG - Nagios BPI: Fixed bug where config changes could cause both success and error messages to show up in the UI - MG - Add ability for wizards to add unlimited services,processes, mountpoints etc. Many wizards updated in this release -SW - Add ability to automatically process uploaded trap MIBS into snmptt.ini -SW,NB - Added support for internationalization. PO files can be added to /usr/local/nagiosxi/html/includes/lang/locale - MG - Updated CCM command test to use escapeshellarg instead of escapeshellcmd for improve command tests - MG - Updated sourcegaurdian loaders to eliminate issues with segmentation faults on enterprise components - MG - Update default notification message to just use %host% as %hostalias% isn't always set -SW - Fixed bug in CCM where notifications_enabled defaulted to "off" if left blank in the form - MG - Fixed bug with duplicate key entries on bulk modifications. - MG - Fixed bug #317 in CCM where using the search bar could cause CCM insert, edit, and delete commands to be rerun - MG - Fixed bug in CCM where renaming config_name for a service could leave behind ghost service configs - MG - Fixed bug in CCM with form validation for required fields - MG - Added feature request #300, services can now be searched by host address. - MG - Added callback functions to allow custom status icons and custom table columns to be added to status tables by components - MG - Added support for a custom login splash page using the Custom Login component - MG - Fixed potential SQL injection vulnerability in legacy CCM for authenticated users - MG - Fixed bug with component/wizard update check not allowing additional uploads - MG/SW - Added proxy support for component/wizard update check - SW 2012R1.2 - 10/5/2012 ===================== - Removed perl-DBD-mssql package from 2012 prereqs - MG - Fixed CCM bug where notification options weren't saving properly for services/service templates - MG - Added fix so fresh CSS / JS files get automatically refreshed in the browser with each version update - MG - Enterprise license trial expiration now lasts at least as long as normal trial - EG - Fixed 1.1-specific bug where CCM page crashed when adding new contacts - SW - Added missing "is_volatile" setting in CCM - MG - Fixed CCM bug where hostgroup->hostgroup relationships could cause circular relationships - MG - Enterprise-only components are now automatically updated with every release. - MG - Updated highcharts library to 2.3.3. Fixes bug with timestack graph - MG 2012R1.1 - 10/25/2012 ===================== - Added ability to upload MIB's up to 5MB - SW - Added preliminary gettext support for internationalization - MG - Fixed UI bug in CCM with duplicate contactgroups in selection box -MG - Wkhtml installs now - AG - Updated all Jquery libraries to latest versions to allow all jquery functions to work in IE9 - MG - Fixed bug with IE9 where dashlets were not draggable - MG - Fixed issue in CCM where check commands with single quotes could break javascript functions (bug #305) - MG - Fixed bug #157 in new CCM where free variables weren't being copied with an object copy. - MG - Fixed issue where Nagios Mobile was not installing on upgrades - MG - Revised fix for bug #201 where unconfigured objects failed to stay deleted - MG - Fixed bug where host template notification_option 'd' wasn't saving correctly - MG - Added fix to CCM import tool to prevent static and pnp configs from being imported - MG - Fixed CCM page navigation bug after users are deleted - MG - "Open Service Problems" page now hides any host that is acnowledged or in scheduled downtime - MG 2012R1.0 - 10/03/2012 ===================== - Fixed bug #201 where unconfigured objects failed to stay deleted. List can now also be manually cleared - MG - Fixed bug where multiple scheduled reports weren't all sending - MG - Fixed page bounce on scheduled reporting - MG - Fixed bug with CCM search not repopulating correctly - MG - Fixed CSS issue rounded corners on footer - MG - Fixed issue where some users were seeing Configure tab when they weren't supposed to - MG - Components and Wizards can check to see if updates are available... -SW - Fixed BPI bug where the drill down wouldn't happen if there were orphan groups - MG - Added failsafe to Ajaxterm installer to rollback ssl.conf if an apache config issue is created - MG 2011-2012 Upgrade Notes: ======================== - Nagios XI 2012 will have both a Standard Edition and an Enterprise Edition - Upgrade to 2012 Standard Edition is free for existing 2011 customer with an active support and maintenance contract - Feature Comparison for Enterprise vs Standard at: http://www.nagios.com/products/nagiosxi/whatsnew - The upgrade from 2011 to 2012 will backup all currently installed wizards, components, and dashlets to the /tmp directory to account for custom modifications to any Nagios XI addons. - The upgrade from 2011 to 2012 update any current wizards, components, and dashlets released by Nagios enterprise to their latest versions. This particular upgrade step will only happen one time once the full production version of 2012 is posted. This is done to allow users to safely modify components and wizards without being overwritten with each upgrade. - The Admin->SSH Terminal access uses SSL and requires browser acceptance of the certificate the first time it is used. (Open in a new tab). - Any new components and wizards can be removed after the upgrade if not desired - Home dashboards will be updated to the new default home splash after the upgrade. The default home dashboard can be brought back by selecting the "Change my default home page" link at the top right of the home page. - Nagios BPI 1.x users will have to migrate their configuration for use with Nagios BPI 2.x, since groups are now calculated differently. - The previous version of the Core Config Manager is still available in the menu system by selecting "Legacy CCM" - Report issues through xisupport@nagios.com or support.nagios.com/forum. - Enterprise-only components are automatically updated with each new update of Nagios XI. 2012RC4 - 09/20/2011 ===================== - Fixed bug in new CCM where command defs would fail to save with single quotes - MG - Fixed bug in new CCM with timeperiod definitions not loading with certain versions of mysql - MG - Removed deadpool feature until later in 2012 - MG - Fixed bug introduced in RC3 that broke result limit logic in new CCM - MG - Updated audit logging to summarize the log entry for a large config deletion - MG - Fixed bug with CCM nagios.cfg and cgi.cfg editor - MG - Fixed bug where hosts/services with more than one : in the name showed as unauthorized - SW - Fixed bug in the new autodiscovery component related to scans against single IP addresses - SW 2012RC3 - 09/11/2012 ===================== - Fixed bug where ajaxterm installer failed when installer was run from outside of the /tmp directory -SW - Fixed typo in deadpool.php - MG - Fixed bug where executable permissions were not properly being applied to newly installed components and wizards - MG - Fixed bug with exec summary exporting as the event log - MG - Fixed bug with duplicate report export options - MG - Fixed bug where PDF export was on some reports that can't actually export to PDF - MG - Fixed bugs with "Email this report" - NS / MG - Fixed issues with search and back buttons on Escalation Wizard and Bulk Renaming tool - MG - Fixed bug #291 where services with a / in the name didn't display their performance graph (Fix by forum user nagiosadmin42)- MG - Fixed bug #292 with multiple concurrent searches for host graphs. Expanded flexibility of search as well - MG 2012RC2 - 09/04/2012 ==================== - New 2012 Features implemented 2012 Standard Edition: - New Core Config Manager - Configuration Rollback - Tools menu for external URL tools - Bandwidth Report - Executive Summary Report - Custom Action URL's - Nagios BPI 2 - Emailed Reports - SSH Terminal access built into the UI - Nagios Mobile now included - Automatic installation of all current components, dashlets, and wizards - Deadpool for obsolete hosts and services - Improved Autodiscovery Wizard - Custom Home page - NRDS Config Manager 2012 Enterprise Edition - *All features mentioned above* - Capacity Planning Report - Bulk Renaming Tool - Bulk Modifications Tool - Escalation Wizard - Scheduled Reporting - Scheduled Page Report - Notification Settings Management - Nagios BPI Hostgroup and Servicegroup Syncing - Audit Logging