ID: 7083
Title: Apache sends out minimal information about the running software and platform to HTTP clients
Component: Site Management
Level: 1
Class: Security fix
Version: 1.6.0i1
The site apache reports information about the running software and platform to
the HTTP clients with each HTTP response using the "Server" HTTP header. It is
common practice to minmize this information using the apache configuration
option "ServerTokens Prod" which we do now for the site apache by default.
We don't modify this setting for the system wide apache. You'll have to
configure the system apache on your own in case you want to configure it to
work in the same way.
ID: 7141
Title: mk_docker: Inventorize RepoTags and RepoDigests unprocessed
Component: Checks & agents
Level: 1
Class: Bug fix
Version: 1.6.0i1
Previously, the last RepoTag was picked, and inventorized as 'Repository' and 'Tag' separately. This was somewhat arbitrary, so we now inventorize all RepoTags and RepoDigests without any further interpretation.
ID: 7095
Title: oracle_sql: New check for monitoring custom SQLs
Component: Checks & agents
Level: 1
Class: New feature
Version: 1.6.0i1
The mk_oracle allows the execution of parametrizable custom SQLs. Note that
the following configuration is not bakeable.
First of all you have to register sections and configure their options. This
can be done in the {{mk_oracle.cfg}} via
<code>
SQLS_SECTIONS=sec_a,...
sec_a () {
#OPTIONS
}
</code>
In general there are two types of check plugins which handle the output of the
custom SQLs:
<ol>
<li>{{oracle_sql}} for generic custom SQLs</li>
<li>own check plugins if {{SQLS_SECTION_NAME}} is used (see below)</li>
</ol>
The following configuration variables can be stated globally or locally (within
a section definition; this overwrites the global variable).
<code>
SQLS_SIDS=sid1,sid2,... (comma separated)
SQLS_DIR=/path/to/dir (no trailing '/')
SQLS_SQL=name.sql (the SQL name which must exist in SQLS_DIR)
SQLS_PARAMETERS=params (parameters as string, double quotes are removed)
SQLS_MAX_CACHE_AGE=X (x in seconds)
SQLS_SECTION_NAME=sec_name (optional, for own check plugins; if not stated, 'oracle_sql' is used; generic check plugin)
SQLS_SECTION_SEP=separator (optional; only useful if SQLS_SECTION_NAME is stated; ASCII code, eg. '58' means ':')
</code>
<ul>
<li>{{SQLS_SIDS}: For which SIDs the SQL is executed.</li>
<li>{{SQLS_DIR}}: The folder of the SQLs.</li>
<li>{{SQLS_SQL}}: The SQL name within SQLS_DIR.</li>
<li>{{SQLS_PARAMETERS}}: Declare parameters if needed. Mostly they are declare
within double quotes. In this case you have to escape them if yu need them as
characters within the parameters.</li>
<li>{{SQLS_MAX_CACHE_AGE}}: How long the cached data is recent enough.</li>
<li>{{SQLS_SECTION_NAME}}: The output of the SQL is stored below this section.
That means you have to build your own check plugin.</li>
<li>{{SQLS_SECTION_SEP}}: At which character the output is separated.</li>
</ul>
If the generic {{oracle_sql}} section header is used then the item within the
custom SQL service can be influenced by {{SQLS_ITEM_NAME}}:
<code>
SQLS_ITEM_NAME=item_name (optional, if not stated, sql name is used)
</code>
Otherwise the SQL name {{SQLS_SQL}} is used.
ID: 7034
Title: mk_logwatch: Parse files only
Component: Checks & agents
Level: 1
Class: Bug fix
Version: 1.6.0i1
Previously the configuration of logfile patterns (like e.g. /var/log/*) which
matched directories lead to errors during parsing of logfiles because directories
have not been skipped. This werk adds filtering of directories and limiting of parsing
to files (inlcuding soft linked and hard linked ones).
CMK-1633
ID: 6869
Title: Fixed all crashes in Windows Agent caused by UTF-16 to UTF-8 conversion
Component: Checks & agents
Level: 1
Class: Bug fix
Version: 1.6.0i1
Some Windows checks may produce invalid UTF-16 symbols or symbols
which are difficult to convert into UTF-8 using standard library.
As a result the Agent may crash with exception 'range_error' during 'to_bytes' call.
Now in such cases the Agent uses native Win32 API call avoiding the crash.
Provided output from above mentioned Win32 API call conforms to the UTF-8 standard.
ID: 7081
Title: Reworked "Distributed Monitoring" page
Component: WATO
Level: 2
Class: New feature
Version: 1.6.0i1
The "Distributed Monitoring" pages have been reworked to make it easier
to manage multiple Check_MK site connections.
The list page is now showing less site configuration details. Instead of
these columns status columns have been added to visualize whether or not
your site connections can currently be used.
One column shows the current status of the Livestatus connection, which
is needed by the GUI to gather the monitoring status from the site. In
case your livestatus connection is not configured properly, you may
have a look at the status and hover the icon for more information about
the reason.
One possible reason for a non functional Livestatus connection may be
a TLS connection issue (if you use encrypted Livestatus). You can use
this site to inspect the remote site certificate and establish a trust
with this certificate to allow the GUI to connect with that site.
The replication status column tells you whether or not the configuration
replication connection is working.
ID: 7082
Title: Fixed "omd create" when fstab has 0 bytes
Component: Site Management
Level: 1
Class: Bug fix
Version: 1.6.0i1
The "omd create" command failed with a "IndexError: string index out of range"
in case a /etc/fstab file existed but was empty. While regular systems most likely
have entries in there, this can often happen for containers.