ID: 14494
Title: Dashboard element "Service statistics": Fix "Service" filters
Component: Multisite
Level: 1
Class: Bug fix
Version: 2.2.0i1
For the dashboard element "Service statistics", "Service" context filters could not be applied from version 2.1.0 on.
This is fixed: When editing the dashboard element "Service statistics", under "Context / Search Filters" both "Host" and "Service" filters can be chosen again.
ID: 14881
Title: Add missing service state conditions for alert handler
Component: Setup
Level: 1
Class: Bug fix
Version: 2.2.0i1
It's now possible to use "WARN" - "WARN", "CRIT" - "CRIT" and "UNKNOWN" -
"UNKNOWN" in the alert handler rule option "Match service event type".
Alert handler rely on the last soft state, so this states are needed, e.g. if
you would like to create a rule that should match a WARN state on the second
check attempt.
ID: 14509
Title: add authentication to REST API documentation
Component: REST API
Level: 1
Class: Security fix
Version: 2.2.0i1
It was previously not required to be authenticated to access the site's REST API documentation.
Because custom user tags and comments may appear in the automatically generated documentation,
this would represent an "information leak". Therefore, from this Werk onwards, the site's
REST API documentation is only allowed to be accessed by logged in users.
Vulnerability Management: We have rated the issue with a CVSS Score of 5.3 (Medium) with the following CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. A CVE has been requested
ID: 14869
Title: Fix regression in mk_logwatch plugin in Windows
Component: Checks & agents
Level: 2
Class: Bug fix
Version: 2.2.0i1
Until now mk_logwatch plugin could not create a directory for batch
files because the directory name as a rule contained a colon and the
colon is a forbidden symbol in NTFS. Due to this bug the logwatch
monitoring was impossible.
With this version mk_logwatch plugin replaces the colon in directory
name with an underscore thus fixing the regression.
SUP-11644
ID: 14387
Title: Render all Custom URL Dashlets in iframes
Component: Setup
Level: 1
Class: New feature
Version: 2.2.0i1
This werk removes the option to configure Custom URL Dashlets that are not rendered within an iframe.
Such non-iframe dashlets could not be rendered successfully due to broken update logic.
All Custom URL Dashlets are now rendered in iframes, as was the default behavior previously.
ID: 14756
Title: Fix validation of contact groups on deletion
Component: Setup
Level: 1
Class: Bug fix
Version: 2.2.0i1
The validation for used contact groups in event console rules was missing on
contact group deletion.
You will now be warned if a contact group is used in such a rule.
ID: 13732
Title: mk_oracle on AIX, Solaris and UNIX: Solve sync. vs. async sections on hosts with systemd
Component: Checks & agents
Level: 1
Class: Bug fix
Version: 2.2.0i1
The agent plugin {{mk_oracle}} implements its own caching functionality because
of long running SQL statements (and custom SQLs with own cache interalls). But
the execution of synchronous and asynchronous SQls does not work properly with
systemd anymore if the plugin is installed to {{../check_mk_agent/plugins/}}
because the {{check-mk-agent-sync.service}} would wait for all child processes
and may take too long.
In order to solve this situation on hosts with systemd the {{mk_oracle}} must
be installed to {{../check_mk_agent/plugins/NUMBER}} and is now triggered by
the {{check-mk-agent-async.service}} (which runs permanently, every minute).
Details:
<ul>
<li>The plugin is now able to detect the installation folder</li>
<li>On distros without systemd you can keep the plugin below {{../check_mk_agent/plugins/}}</li>
<li>On distros with systemd you have to install the plugin to {{../check_mk_agent/plugins/NUMBER/}}</li>
<li>The recommended NUMBER for this folder is 60</li>
</ul>
If the {{mk_oracle}} is installed to {{../check_mk_agent/plugins/NUMBER}} the
result (which consists of the sync. and async. SQLs) is saved into the Checkmk
agent's spool directory
The limit of this spoolfile is three times the NUMBER (interval).
If the plugin is executed with any CL option, then the output is shown on
{{stdout}} as before.