After a first semester full of great opportunities (many colleagues like to say so), the wheels have started turning again for NetEye Extension Packs. Now, a big evolution is beginning: in the near future, NEP will encompass the entire NetEye infrastructure, meaning it will also configure and manage NetEye Satellites. To do so, the current…
Read MoreAs you have surely read from the release notes of NetEye 4.27, we have integrated ClickHouse to be able to use the historical flows and alerts feature of ntopng. What is ClickHouse? Directly from the official website: ClickHouse is a column-oriented database management system (DBMS) for online analytical processing of queries (OLAP). ClickHouse’s performance exceeds…
Read MoreIn August I had the opportunity to assist an experienced consultant who was upgrading a NetEye cluster. Now, I’m a software developer, and while I know the consultants here who work with clients, I’ve always worked at the Würth Phoenix offices. I’ve never actually gone out in the field. So my goal was to try…
Read MoreWithin our Research and Development team we maintain a set of both physical and virtual machines for many purposes: internal repository mirrors, CI/CD, testing, internal docker registry, etc… Maintaining them is demanding, especially considering that our infrastructure has grown over the years and was often configured by different colleagues using different software and tools. And…
Read MoreEver since NetEye 4.11, the NetEye upgrade procedure has been automated with the neteye upgrade command. This command performs several checks to ensure that: The currently installed version is eligible to obtain the upgrade The system is healthy The latest OS and NetEye updates and bug fixes have been installed Then, if the checks are…
Read MoreDuring the NetEye User Group in November 2019, I presented the future vision of a new, completely distributed architecture to allow more flexibility, performance and scalability. In particular, a more flexible and scalable architecture is helpful for large environments such as Managed Service Provider infrastructures or for monitoring solutions as a service (i.e., NetEye 4…
Read MoreNetEye SIEM is a very powerful tool that allows you to ingest logs from many different sources. However, by default it does not ingest the ssh-login attempts on the NetEye Servers themselves, nor does it check the integrity of important configuration files. In this blog post I will describe a procedure to configure an Auditbeat…
Read MoreAs a NetEye User I want to handle node failures when they happen in my cluster. When a node becomes unresponsive, it might still be accessing your data: the only way to ensure that a node is truly offline is to shut it down. This procedure is called fencing. NetEye 4 relies on Corosync/Pacemaker, also…
Read MoreWhat is DRBD? DRBD is a distributed replicated storage system for the Linux platform. It is implemented as a kernel driver, several user-space management applications, and some shell scripts. DRBD is traditionally used in high availability (HA) computer clusters, but beginning with DRBD version 9, it can also be used to create larger software defined storage pools with…
Read MoreA common issue in cluster environment is the split brain condition. A split brain occurs when some nodes of the cluster are not able to communicate properly, but instead continue to work like two separate, distinct clusters leading to data or service inconsistency. To prevent this situation a common solution is to introduce the concept…
Read MoreUntil NetEye 4.8, customers who needed to expand the capacity of their Elasticsearch cluster running alongside their Red Hat cluster could add new standard nodes to NetEye clusters. This meant, however, that the new nodes would dedicate their resources not just to improving the capacity of the Elasticsearch cluster, but also to maintaining all services…
Read MoreThe Problem If you’re trying to monitor a Microsoft Cluster, you’ll surely want to monitor the disk space of a single cluster service. In this case there’s a problem with Icinga2 Agent: you can’t use it with more than one IP address. So you can’t simultaneously monitor the resources of the “physical” host and a…
Read MoreA new package neteye-clustering-1.2.1 has been released fixing this issues: – Small fix in neteye script – Small fix in nfs-mount and neteye-virtual-ip script creating and not deleting temporary files in /tmp – Moved neteye-init-cluster script to /opt/neteye/sbin out of normal PATH – Added solr directory to /data migration It also added this new feature:…
Read MoreRelease of neteye clustering version 1.1.3 Features: – integration of netraphandler daemon and OTRS service into cluster handling logic – Handling of cluster file unmount in case of force resource lock. Include logic to free system from locked NSCA processes of passive Nagios check results Supported NetEye Versions: 3.2
Read MorePer ottenere, oltre la completa replicazione dei dati con RAID, anche una flessibilita’ di continuita’ dei servizi NetEye in caso di problemi, tanti clienti hanno installato un cluster con tutti i servizi di monitoraggio, capacity view/management ed asset management (inventario hw / software ) in failover. La configurazione di questo cluster comprende la funzionalita’ di…
Read More