Tornado: Allow disabling forwarding of local system logs to Tornado By default, rsyslog on NetEye nodes forwards all logs it handles to the Tornado event engine. These include the system logs of the NetEye node itself, which can generate a large number of syslog events on Tornado. Until now, there was no way to turn…
Read MoreImportant: Elastic Stack security update Type/Severity NetEye Product Security has rated this update as having a High security impact. Topic Updates for the Elastic Stack packages are now available for NetEye 4. Security Fix for NetEye 4.50 CVEs Elastic Agent Elasticsearch Kibana Most of the 8 CVEs are resource-exhaustion weaknesses in Elasticsearch. These are Uncontrolled…
Read MoreImportant: Keycloak security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the keycloak packages is now available for NetEye 4. Security Fix for NetEye 4.50: Summary This Keycloak update (version 26.8.0) resolves several security issues identified in upstream Keycloak, including those fixed in upstream release 26.7.5:…
Read MoreOIDC group synchronization with read-only LDAP federation Fixed an issue that occurred when OIDC group synchronization was enabled alongside a read-only LDAP federation. The OIDC mapper attempted to modify LDAP-managed group memberships, resulting in the error: Not possible to delete LDAP group mappings as mapper mode is READ_ONLY. The synchronization logic now respects the LDAP…
Read MoreImportant: GLPI security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the glpi packages is now available for NetEye 4. Security Fix for NetEye 4.50 Summary This is the list of vulnerabilities patched in this update: For details on how to apply this update, which includes the…
Read MoreNATS: Fix multi-tenancy configuration corruption in cluster environments When executing commands such as neteye install –restrict-services-to nats-server, neteye tenant config apply, or neteye satellite config create from a cluster node while nats-server was active on a different node, the shared /neteye/shared/nats-server/conf/multi-tenancy.conf configuration file could get corrupted. Unreplaced template placeholders (such as @@ACCOUNTS@@, @@TORNADO_IMPORTS@@, and @@TELEGRAF_IMPORTS@@)…
Read MoreUpgrading an existing NetEye cluster to 4.49 introduces a networking question that’s easy to underestimate. The existing environment may already have everything we normally associate with a NetEye cluster: a corporate network for frontend access and integrations, a private trusted network for internal cluster communication, and the corresponding virtual IPs. With Kubernetes entering the architecture…
Read MoreImportant: Grafana security update Type/Severity NetEye Product Security has rated this update as having a medium security impact. Topic An update for the grafana packages is now available for NetEye 4. Security Fix for NetEye 4.49 and 4.50 Summary Four medium-severity CVEs were fixed (CVSS 4.3–5.4). Three concern permission scoping: alert rules listable from folders a user may…
Read MoreWelcome to version 4.50 of our NetEye Unified Monitoring Platform. As you log in, you’ll be greeted by the wide-open autumn meadows of Alpe di Siusi, the largest high-altitude plateau in Europe, with the jagged peaks of the Gruppo delle Odle and the distinctive ridge of Seceda rising in the distance. Their pale rock faces…
Read MoreAt NetEye we’re always working towards more and more integration with Kubernetes. The NetEye Operator is the first piece of that journey we’re working on, with the goal of obtaining a component that ships as a Kubernetes operator rather than as an RPM. The process of building it gave us a rare opportunity, a chance…
Read MoreThe use of containers has now become part of our everyday activities. In many cases we use them as software appliances or black-boxes. Sometimes, however, these black-boxes don’t work as we expect, or we’d like to be able to evaluate their performance as the load increases. Today we’re going to talk about a real use…
Read MoreToday, I’d like to share some exciting news about the latest feature we’re about to introduce to NetEye Cloud. As the title suggests, the Automatic Discovery of Monitoring Objects feature is now ready for rollout and will be made generally available to all NetEye Cloud customers within the next few weeks, if not days. In…
Read MoreFixes for nginx and nginx-satellite We identified and fixed two issues affecting nginx resource management during service and resource restarts. nginx-satellite.service An issue could leave nginx worker processes running after nginx-satellite.service entered a failed state. These processes could continue listening on the configured ports and cause Address already in use errors during a restart. The…
Read MoreMore tools don’t mean more intelligence. Especially when the model runs on your own hardware. Let’s be honest: Ever since the Model Context Protocol became the de facto standard for connecting an LLM to the outside world, a sort of hoarding race has begun. One MCP server for the filesystem, one for Git, one for…
Read MoreIn this article, I will show how we automated the creation of customer tickets from relevant NetEye Cloud monitoring events.
Read More