01. 08. 2025
Downloads / Release Notes, NetEye, Unified Monitoring
01. 10. 2025
Oscar Zambotti
Downloads / Release Notes, NetEye, Unified Monitoring
NetEye 4.44 Release Notes
Welcome to version 4.44 of our NetEye v4 Unified Monitoring Platform.
As you log in, you’ll be greeted by a crisp view of Lago di Braies, where summer’s warmth yields to autumn. The larches are turning brilliant shades of yellow and burnt orange, forming a vivid contrast with the deep green of the pines and the clear blue of the lake. Just as the landscape shifts into a new season, this release brings refined clarity and subtle improvements to your monitoring experience—explore what’s new below.
General
Satellite configuration improvements
NetEye 4.44 improves configuration generation for NetEye satellites. This update reduces the impact on cluster operations, eliminates the need for maintenance mode, and delivers configuration to Icinga2 with a deployment that minimizes restarts.
Satellite updates and upgrades improvements
To simplify and speed up update and upgrade procedures on satellites, we removed the manual steps required for satellite setup and finalization in previous versions. These steps are now integrated into our standard procedures.
Updates and upgrades of satellites are now quicker due to a dedicated procedure, separate from the Master, which reduces the number of operations and accelerates the update process.
To standardize installation procedures, we have deprecated the NetEye satellite setup command in favor of the new NetEye satellite install.
For more information, refer to the revised satellite upgrade procedure and the satellite installation procedure.
Authentication
NetEye 4.44 includes an update to Keycloak, now at version 26.2.5, which enables login session persistence by default. This eliminates the need for a new login when the resource restarts.
Additionally, our NetEye OIDC Group Path Mapper allows the import of groups from external Identity Providers into another group, preventing group collisions and simplifying the use of this core feature.
Monitoring
Introduction of IcingaDB
With this release, we are introducing IcingaDB into NetEye. While it does not yet provide new features for end users, it represents a strategic step in the transition from the legacy IDO backend. IcingaDB delivers a more robust and reliable data handling layer, improving the performance and throughput of the NetEye monitoring stack.
During this initial phase, both IDO and IcingaDB operate in parallel. As a result, you may notice an increase in disk usage, which is expected and normal since IcingaDB also collects and stores monitoring data. In upcoming releases, once the transition to IcingaDB is complete, the IDO backend will be removed, reducing the additional disk space required during this phase.
In the next release, we will introduce IcingaDB Web, which will make the new backend directly visible to users and provide access to all the new features of IcingaDB.
Tornado
This update introduces improvements to the Tornado Webhook Collector, aimed at supporting more robust and scalable integrations in large deployments.
There are scenarios where teams need to collect webhook payloads that are larger than what the system allows, such as when transmitting detailed events or enriched data. To address this, we increased the default max payload size, and the webhook configuration now supports a max_payload_size parameter. This gives users the flexibility to raise the maximum accepted payload size in every webhook configuration, enabling support for data-heavy integrations while still maintaining predictable and stable system behavior.
In large-scale environments, a high number of incoming events from distributed sources can lead to excessive concurrency and memory usage, especially on machines with many CPU cores. To give teams more control over resource consumption, the webhook collector configuration now includes a workers property. This setting lets the user limit the number of concurrent worker threads, helping to maintain system stability and prevent unnecessary RAM usage. This feature ensures more efficient resource management.
Especially in complex environments, gaining visibility into system behavior and performance is essential for effective monitoring and troubleshooting. To support this need, we’ve enhanced the Webhook Collector with improved logging and new metrics. These additions offer deeper insight into processing performance, helping teams better understand operational patterns, detect anomalies, and maintain system reliability.
To learn how to use the Webhook Collector and configure the new parameters, please refer to the User Guide.
Icingaweb2 security enhancement with automated CSP
To increase security and provide robust protection against Cross-Site Scripting (XSS) attacks, we are strengthening our Content Security Policy (CSP) enforcement.
Building on the strong recommendation to activate CSP introduced in version 4.42, starting with version 4.44, enabling this policy is now a mandatory and permanent action. From this version onwards, once CSP is active, it will no longer be possible to disable it. The user setting to disable the policy will be removed permanently after activation to ensure your application remains secure by default.
Lastly, to simplify management, the system now automatically handles policy updates. Whenever you add a new external navigation link, the system instantly and automatically updates the CSP header to authorize that domain. This approach eliminates the need for manual changes, reduces the risk of configuration errors, and ensures your security policy is always aligned with your needs, without any additional effort.
Elastic Stack
Elastic Stack 9 upgrade
Staying current with technology is essential to delivering reliable, high-performing solutions – and we are pleased to announce that NetEye 4.44 will introduce Elastic Stack 9, marking its ninth major release.
While several features of Elastic Stack 9.0 were already available in version 8.18, this upgrade brings notable improvements in performance and efficiency, thanks to the underlying Lucene engine, which has been upgraded to version 10.
Additionally, Elastic Stack 9 makes the Elastic Distribution of OpenTelemetry (EDOT) generally available. This enables advanced observability features not present in the standard OpenTelemetry collectors, along with full support from Elastic.
For a comprehensive overview of new features and breaking changes, please refer to the official Elastic release notes and the NetEye Upgrade Guide.
Oscar Zambotti
Software Engineer in the R&D Team of the IT System & Service Management Solutions group, Würth Phoenix.
Random trivia: from Trentino (Italy), in love with everything is technology, gamer, TV shows enthusiast, AC Milan supporter, once a DJ, but most of all father and husband.
Author
Latest posts by Oscar Zambotti
30. 06. 2025
Automation, Development, DevOps
“Pipeline as Code” Quest Unlocked: A Grizzled Beginner Leveling Up in CI/CD
27. 03. 2025
Development, Front-end, UI
The Song of a Main Road and Intriguing Paths: The Challenging Journey from Vue 2 to Vue 3