Fix unnecessary action retries in Tornado’s Smart Monitoring component
We fixed a bug affecting Tornado in NetEye 4.45 for a specific edge case in Tornado’s Smart Monitoring component that was causing unnecessary system overhead and log bloat.
Specifically, when Tornado attempted to perform a “check result” in Icinga2 for a host that had been disabled on the Icinga2 side, the action would fail. Because Tornado viewed this as a transient failure (such as the object not being activated in time), it would trigger its action retry logic. Since a disabled host will never successfully accept a check result, the system would repeatedly attempt the action until the retry limit was reached.
We have updated the smart monitoring component to now consider the edge case when inspecting the cause of failure before deciding to retry. If the failure is caused by a target host being disabled, Tornado will now recognize this as a deterministic failure and not trigger the retry logic.
List of updated packages
To solve the issue mentioned above, the following packages have been updated for NetEye 4.45:
tornado, tornado-autosetup, tornado-common, tornado-devel, tornado-neteye-config, tornado-rsyslog-collector-logmanager to version 1.39.2-1
Important: Elastic Stack security update Type/Severity NetEye Product Security has rated this update as having a Medium security impact. Topic Updates for the Elastic Stack packages are now available for NetEye 4. Security Fix for NetEye 4.48 9.4.4_neteye3.101.4-1 CVEs Elasticsearch CVE-2026-63263CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-63144CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-63140CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Read More
Fix Soft States Some checks that were actually failing showed up as green/OK in Icinga. The cause: two parts of the system stored the same status in different formats, so the web interface misread it and hid early-stage problems. A Read More
Fix Director self-service api We fixed the uncaught exception on bad Basic autm but in doing so we introduced a 302 redirect for API requests as well. Net result: a curl client expecting a 401 gets redirected to the login Read More
Important: Icinga 2 security update Type/Severity NetEye Product Security has rated this update as having a critical security impact. Topic An update for the icinga package is now available for NetEye 4. Security Fix for NetEye 4.48 2.15.5_neteye1.71.2-1 Summary The vulnerabilities include an Read More
Important: Elastic Stack security update Type/Severity NetEye Product Security has rated this update as having a Medium security impact. Topic An update for the Kibana package is now available for NetEye 4. Security Fix for NetEye 4.48 9.4.3_neteye3.101.2-1 CVEs CVE-2026-56148CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-56149CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-56151CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H All Read More