It-sa is Europe’s largest trade fair for IT security… and we were there! This fair has taken place in Nuremberg since 2009, and is the meeting point for all decision makers and experts in IT security. It’s the #placetobe for all those searching for security solutions and for learning from major experts in the field. …
Read MoreMost physical NetEye servers have an SMS Gateway attached in order to send CRITICAL notifications via an SMS message, since this will work even when the main network is down. However, sometimes you just want to send messages to your NetEye server’s SMS Gateway in order to effect certain actions, for example just to check…
Read MoreAnyone who has joined the beautiful world of logging has collided, sooner or later, with the collection via syslog protocol. More than 40 years have passed since syslog was invented, and in that time there have been several attempts by the IETF to create a standard around this world (RFC 3164 and RFC 5424). Even…
Read MoreThe performance graphs present in NetEye are very useful for getting an immediate idea of the trend related to a service check, but they’re still limited to the metric being viewed. Also, the “Show all graphs” option available from the Actions menu of each monitored Host can have different usage limits due to the presence…
Read MoreAs you’ve probably read in a previous blog by my colleague Jürgen Vigna, we use GlusterFS for particular requirements in our NetEye 4 cluster environments. After we completed the migration from the operating system CentOS 7 to RedHat 8, a few small things have changed or been updated. For all those who are new to…
Read MoreFor those who don’t know, several of us at Wuerth-Phoenix often participate in Capture The Flag (CTF) events. CTFs are programming challenges where a message (the flag) is hidden somewhere inside code, an application or a website. Usually they are divided into different categories, and within this article we’ll focus on a forensics challenge. I…
Read MoreHere we go again! 🤩 Join us for the physical NetEye User Group, Italian edition, on 9th November 2022, from 9.30 AM to 5 PM at the Winter Garden Crowne Plaza in Verona! A day full of vITality! After a welcoming introduction, you’ll get to know all the news and strategic info about NetEye and…
Read MoreCommunication is the single most important thing whenever and wherever people interact. Communication is the key to great relationships both in business and also in personal life, however it seems like it’s also the hardest thing to get right. When a software product evolves, between the birth of a good idea, the formalization of a…
Read MoreIn my time at Wuerth Phoenix I’ve worked on upgrading the customactions and ondutymanager neteye modules, as well as developing a new module called AIA, which stands for Alert Interval Adjustment. In this blog post I’ll talk about the AIA module. The Pitch Suppose you’re a large company with a vast and complex IT infrastructure….
Read MoreCommvault software is an enterprise-level data platform used to back up, restore, archive, replicate, and search data. The software is available across cloud and on-premises environments, and a lot of customers are using this solution as part of their infrastructure. And in such situations the necessity arises to develop a solution for integrating COMMVAULT information…
Read MoreIn my previous blog post, we modified the boot parameters to enable cgroups v2 and the user namespace in CRI-O. In this second part I’ll show you how to run a sample container with systemd and check that the modifications we made actually worked. Setting up a Test Docker To test the new config, let’s…
Read MoreFor our ongoing transition from Jenkins to OpenShift, we’re currently working on porting our testing infrastructure to OpenShift. Our tests involve installing and running our product, NetEye, in a container. The installation requires a working systemd environment inside the container, and systemd needs to run with PID 1 and as root user (UID 0). Until…
Read MoreSynopsis Important: Multiple Security updates for NetEye 4 Type/Severity Security Advisory: Critical Topic Wuerth Phoenix has released some Critical Patches (CPs) for NetEye 4. These CPs resolve multiple vulnerabilities related to SQL injections, Cross Site Scripting and an unauthenticated remote command execution (RCE) exploit. Description GLPI was affected by: [Critical] RCE using a third-party library script…
Read MoreIn our migration journey from multiple VMs to OpenShift, one mandatory step is the integration with our company’s Active Directory. This is the default IdP for our services like Jenkins, NetEye, etc., and we want to centralize authentication and permissions as much as possible. Integration with OpenShift is less straightforward than it is with other…
Read MoreBy default all metrics in InfluxDB are stored forever, but for certain metrics we need to store them for a much shorter time span. One example is when we’re receiving very large amounts of raw data, when we’re much more interested in derived characteristics of that raw data. In this blog we’ll discuss how to…
Read More