Release notes

Enhancements

• [Web] Added structured logging for all command/query bus dispatches and uncaught exceptions on the new kernel.
• [Administration] Centreon Web is now able to connect to the database using TLS 1.3.
• [Dashboards] Status grid widget: a new filter based on the resource state (unhandled, acknowledged, in downtime, flapping) has been added for the condensed view.
• [Resource status] Performance has been drastically improved for many search use cases.
• [Upgrade] A dedicated upgrade.log file now fully traces upgrades, making them easier to troubleshoot.
• [Web] A new logging system has been implemented for centreon-web.

Bug fixes

• [API] Fixed an issue where duplicate host templates were silently accepted by the service template API.
• [Configuration] Fixed an issue where the ‘_’ character was no longer valid in address definitions.
• [Configuration] Fixed stream connector (lua) parameters disappearing after deleting one of them in a Broker configuration.
• [Configuration] Fixed the incorrect Centreon Monitoring Agent install command for pollers that caused a 404 error.
• [Dashboards] It is now possible for users to share a dashboard with:
  • contact groups part of a common acl access group.
  • individual contacts listed in the contact groups they belong to.
• [Graphs] Non-admin users can now export metaservice performance graphs as CSV.
• [Installation] Fixed an issue where the installation wizard would not appear after a fresh install.
• [Resource status] Fixed an error where resources had a severity level above 100.
• [Resource status] Fixed an issue where filters did not return results when a host group name contained spaces around a hyphen.
• [Web] Fixed an issue causing SSO logout to fail due to an invalid format in SSO logout request.
• [Web] Fixed an issue in the extension manager where typing in the search bar or using type/status filters had no effect.

Direct link ↗

Enhancements

• Updated Symfony components.
• [Configuration] Users can now add the log level of the event_script broker output from the broker configuration page
• [Report] Corrected an issue with the “Hostgroup-graphs-v2” report. The report no longer fails to page break when displaying a large number of services.
• [Upgrade] Made the APIv2 update endpoint fully compatible with the upgrade endpoint.
• [VMware Connector] The VMware connector no longer restarts at every configuration export if its associated configuration wasn’t changed.

Bug fixes

• [API] Fixed an issue that occurred when saving the host edition/creation form.
• [API] Replaced an incorrect error message (The HTTP status code “10” is not valid) that was displayed when the database connection timed out.
• [CLAPI] Fixed an issue that resulted in a PHP error when using the APPLYCFG command while Anomaly Detection was configured.
• [Configuration] Fixed an issue with the export configuration button located in the top counter that would occasionally saturate the file system.
• [Configuration] Fixed an issue where configuration for Centreon trapd could not be pushed on pollers.
• [Configuration] The agent installation command no longer fails for pollers with empty certificate fields.
• [Custom Views] Removed unnecessary PHP warnings on the host-monitoring and service-monitoring widgets.
• [Dashboards] Fixed an issue with the Single Metric widget that resulted in a 404 error when using metrics that contained slashes in their name.
• [Dashboards] Optimized the widgets reload rates to avoid lag.
• [Dashboards] It is now possible for users to share a dashboard with contact groups that are part of a common ACL access group and individual contacts listed in the contact groups they belongs to.
• [Monitoring] Removed unnecessary PHP warnings on the service details page.
• [Monitoring] Removed unnecessary PHP warnings triggered by “Add Downtime” action from Service/Host details pages.
• [Navigation] Fixed an issue in legacy pages where applying a filter to a specific resource would incorrectly redirect the user to the Resource Status page.
• [Packaging] Fixed an issue with missing commands that resulted in the cache not being rebuilt.
• [Upgrade] Fixed an issue where upgrade to version 25.10.10 failed when the central broker configuration was not linked to the broker daemon, as commonly configured on HA platforms.

Direct link ↗

Bug fixes

• [Configuration] When creating a new service group, the service selection lists are no longer empty.

Direct link ↗

Bug fixes

• [Remote Server] Fixed an issue where exporting the configuration of a remote server would reset certain settings and ACLs for that server.

Direct link ↗

Enhancements

• TLS configuration is now exported from .env to broker json files.
• [Configuration] Added a dedicated window to ease the deployment of CMA.
• [Configuration] Disabled the Agent Type selector when editing an existing agent configuration.
• [Configuration] Removed an obsolete gorgone error message from the configuration log that appeared when exporting the configuration of a remote poller.
• [Performance] Improved ACL calculations by removing the dependency to an outdated class on legacy pages.

Bug fixes

• Fixed an issue where adding image linked to a host group with a dot in the directory name would result in an error.
• [API] Fixed an issue where filtering on a hostgroup in a host search would not show all relevant host groups. The same issue was found and fixed for categories.
• [APIv2] Fixed an issue with the API response not displaying all the requested elements.
• [Authentication] Fixed authentication failures with SAML. Please manually verify your SAML comparison settings if you previously used a non-default configuration.
• [CLAPI] Fixed an issue where CG objects were not displaying a “members” column.
• [Centreon-Backup] Fixed a mysqldump error 1045 that appeared when the user did not have LOCK TABLES permissions.
• [Configuration] Fixed an issue where Centreon Engine statistics were no longer displayed.
• [Configuration] Fixed an issue where empty/undefined inherited command macros were saved on final resource.
• [Custom Views] Fixed an issue where the number of hosts and services displayed in some widgets was incorrect for non-admin users.
• [Event Logs] Fixed an issue where restricted users saw no results in the Event Log despite having assigned resources.
• [Logs] Fixed an issue where insufficient user permissions triggered excessive PHP warnings, potentially causing disk space issues.
• [Resource Status] Fixed an issue where the Status column would disappear when navigating to the Resource Status page from a Dashboard “Resource Table” widget.
• [Systemd] Allow php-fpm to write in /usr/share/centreon.
• [Upgrade from 24.10.x] Fixed an issue with additional_connector_configuration that resulted in ab SQL error, blocking the upgrade entirely .
• [Virtual metrics] Fixed an error when adding or editing a virtual metric with “VDEF” as the “DEF Type”.

Direct link ↗

Enhancements

• [Install/Upgrade] If a dedicated token & agent configuration do not yet exist when doing a fresh install/upgrading a platform, they will now be automatically created.
• [Pollers] If a dedicated token & agent configuration do not yet exist when when a new poller is added, they will now be automatically created.
• [API] Added a new endpoint to GET Host Template.
• [API] Added a new endpoint to GET Host.
• [API] Added a new endpoint to GET Service Template.
• [API] Added a new endpoint to GET Services.
• [API] Added a new endpoint to GET Service Severities.
• [API] Added a new endpoint to GET and DELETE medias.
• [API] Added a new endpoint to GET and UPDATE Service Category.
• [API] Added a new endpoint to GET and UPDATE Service Groups.
• [Authentication] Specified the list of special characters accepted when creating a password.
• [Configuration] Improved host selection when creating hostgroups: search results are no longer reset when a host is added and clicking “Select all” no longer removes previously selected hosts.
• [Performance] Improved the SQL query construction for better performance in Resource Status.
• [Performance] Removed the deprecated row-counting method and removed an unnecessary SQL join to optimize queries in Resource Status.

Bug fixes

• [API] Fixed an issue with host edition/creation making API calls.
• [API] Fixed an issue where otel_server block was added to otl_server.json when only ‘Connection initiated by poller’ was active in TLS mode.
• [ACL] Fixed an issue that allowed users to see hosts belonging to hostgroups they had lost access to.
• [API] Fixed an issue where adding a host or a service wouldn’t trigger an ACL recalculation.
• [MCP] Fixed an issue that resulted in an SQL syntax error when calling the ‘GET’ API endpoints with certain parameters.
• [Administration] Fixed an issue where unlocking a locked contact would fail with an SQL syntax error.
• [Authentication] Fixed an issue with SAML authentication that caused several API call failure messages and a error 500. Please manually verify your SAML comparison settings if you previously used a non-default configuration.
• [CEIP] Fixed an issue where database name was hardcoded, causing multiple SQL errors.
• [Configuration] Fixed an issue that caused exporting the configuration to be slower on 25.10.
• [Configuration] Fixed an issue where unlinking a host template from a host did not unlink it from the service by host page.
• [Dashboards] Duplicate entries are now removed from the metric selection.
• [Event Logs] Fixed an issue in filter dropdowns where the service list failed to update based on the selected host.
• [Graph] Legend names now display correctly instead of showing the “Default” placeholder.
• [Login] Fixed an issue on login autofill when using Safari that caused the the username field to remain empty.
• [Remote server] Fixed an issue where tasks were not correctly imported.
• [Upgrade 24.10.x] Fixed missing column ‘parameters’ in additional_connector_configuration.
• [WEB] Fixed console error from css MIME type.

Direct link ↗

Enhancements

• [CMA] Hosts can now be automaticaly created when the option for it is checked in Agent configuration.
• [Dashboards] Status Chart widget - Added the ability to filter by the state of resources (in downtime, acknowledged, flapping).
• [Image Administration] You can now upload images weighing up to 5 MB.

Bug fixes

• [CMA] Fixed an issue during the remote server upgrade, regarding the event_script output for CMA.
• [API] Fixed an issue where LDAP users configured to reach the API realtime would get their permission revoked after requesting a login token.
• [API] The API no longer returns “null” when trying to acces the /monitoring/servers endpoint (it will now returns the IP address of the pollers).
• [Administration] Fixed an issue where additional configuration wasn’t updated after deleting a user.
• [Administration] Fixed pagination issues on the LDAP page.
• [Authentication] Changed the default setting for “Requested Authentication Context” to Disabled in SAML/SSO configurations.
• [Configuration] Allowed horizontal resize on select type fields.
• [Configuration] Fixed an issue on additional configuration when changing vCenter name.
• [Configuration] Fixed an issue on macro decryption (use engine-context instead of .env when encrypting).
• [Configuration] Fixed an issue where .mib import logs were unreadable.
• [Configuration] Fixed an issue where changes to the “Broker module configuration file” field weren’t applied.
• [Configuration] Listing pages now display the total count and the range of visible elements.
• [Configuration] Macros defined on a parent resource are now preserved when a child resource overrides its value.
• [Custom Views] Fixed an SQL error that occurred when renaming a widget.
• [Custom Views] Fixed an issue where exporting data for Service Monitoring widgets included all services in the configuration instead of just the selected resources.
• [Custom Views] Fixed an issue with large platforms where the CSV export in the Service Monitoring widget failed.
• [Installation] Fixed an issue with the mariadb password setup.
• [Resource Status] Fixed an issue that caused the Centreon interface to crash when trying to display the graph of a service without any performance data available.
• [Resource Status] Fixed an issue with PNG exports.
• [Resource Status] Fixed an issue with the CSV export not taking into consideration the applied filters.

Direct link ↗

Enhancements

• [CA] CA certificate-related columns have been created in the instances database.
• [Configuration] Provided a script to adapt the threshold format for CMA native checks.
• [Dashboards] Resource Table widget - Options are now available to enable/disable ticket creation (for hosts and services).
• [Pollers] Dedicated token & agent configuration are now automatically created when adding a Poller/Remote Server.
• [Logs] Opentelemetry has been added in the Engine logs menu.
• [Poller wizard] Replaced “service” by “systemctl” in Poller related commands (engine/broker).

Bug fixes

• [API V2] The “hosts” field is no longer required when adding a host.
• [Configuration] Fixed an issue where macros to a service by HG would not be exported.
• [Configuration] Fixed an issue where the new Host Group configuration page would appear twice in the menu.
• [Configuration] Fixed an issue where a trailing comma in string leads to an sql error for hostgroups during a remote server export.
• [Configuration] Macros defined on a parent resource are now preserved when a child resource overrides its value.
• [Custom Views] Group Monitoring widgets - Fixed an issue that occurred when using hyphens in resource names.
• [Dashboards] Fixed an issue preventing metric widgets from being displayed.
• [Dashboards] Metrics Graph widget - Fixed an issue preventing meta services from being used in dataset selection.
• [Downtimes] Fixed an issue when filtering downtimes by service names.
• [API] Fixed an issue where the “Reach API Realtime” option was set to “Yes” even if a “No” was selected when creating the user.
• [Host Group] Fixed an issue where the host group name restrictions would allow characters that then prevented exporting the configuration.
• [Logs] Fixed a wrongful PHP warning that appeared after running CentreonWorker.
• [Monitoring] Fixed an issue where non-local accounts would be wrongfully notified of their password’s expiration date.
• [Monitoring] Fixed an issue with the base values for the graph in the Ressource status and the Performance pages.
• [Performance Graph] Fixed an issue with the legend not reflecting changes to the displayed timeframe.
• [Remote server] Fixed an issue where tasks would not be correctly imported.
• [SNMP Traps] Fixed an issue with credentials exposure.
• [UI Notifications] Fixed an issue where LDAP/local users were not able to see the “UI Notifications” panel.

Security fixes

• This release contains security fixes. More details on our community platform The Watch.

Direct link ↗

Bug fixes

• [Administration] Fixed a blocking issue that caused some LDAP users to be unable to log in.
• [Dashboards] Fixed an issue that caused metric-related widgets to be empty.

Direct link ↗

Enhancements

• [Administration] Token expiration date now also displays with hh:mm.
• [Authentication] SAML IDP form - Added a new field for handling the “requestedAuthnContext” value and renamed the existing “Requested authentication context“ field to “Comparison rule for the requested authentication context” to avoid confusion.
• [Configuration] Additional configuration - the characters in the username field are no longer masked by asterisks
• [Configuration] Agent configuraiton - CMA Token is now mandatory in No TLS mode.
• [Configuration] Agent configuration - “Listening port” has been added as a parameter for agent-initiated connection.
• [Configuration] The format “.cert” is now accepted for certificates in agent configuration.
• [Custom Views] Optimized the performance when retrieving ACLs in widgets.
• [Dashboards] Resource Table widget - Added a link to see the details of a ticket on the provider side.
• [Performance Graphs] The limit of metrics displayed per chart has been raised to 20. Also fixed an issue with the unnecessary display of legends when this limit is exceeded.

Bug fixes

• [Administration] Fixed an LDAP issue that caused the user DN to never update.
• [CLAPI] Fixed an issue where CLAPI would sometimes return an empty code message.
• [CMA] CMA-related resources created or updated by a monitoring connector now have freshness checks enabled by default.
• [Configuration] Added an error-check in the template creation form.
• [Configuration] Agent configuration now allows any certificate path.
• [Configuration] Cleaned up and fixed macro management in for the legacy host/host template forms.
• [Configuration] Fixed an error when duplicating the configuration of an RRD broker that resulted in missing outputs.
• [Configuration] Freshness is activated by default on all CMA-related services, hosts and templates.
• [Dashboards] The list of contacts is now properly displayed when sharing a dashboard or a playlist.
• [Graphs] Graphs now adjust properly to data range.
• [Hosts] It is no longer possible to create a circular parent/child relationship between hosts.
• [Install/upgrade script] “is_encryption_ready” in “isntances.centreon_storage is now a tinyint instead of an enum.
• [Monitoring] Fixed an issue with the hostgroups summary monitoring page.
• [Performance Graphs] Fixed an issue preventing users from selecting multiple graphs when the language selected isn’t “en_US”.
• [Performance Graphs] Fixed an issue that prevented the filters from working together.
• [Playlists] Fixed an issue preventing host problems from being displayed.
• [Resource Status] Fixed an issue preventing services from being displayed when filtering by their parent host severity.
• [Unattended] Fixed an issue that resulted in incomplete ITEE installations when installing a platform with the unattended.sh script.
• [Users] Fixed an issue preventing user from being created when using an autologin key.

Security fixes

• [Security] Fixed a vulnerability in images parameters.
• [Security] Fixed a vulnerability in LDAP configuration.
• [Security] Fixed a vulnerability in virtual metrics.
• [Security] Fixed a vulnerability in hostgroup notifications.
• [Security] Fixed a broken object level authorization in users configuration endpoint
• [Security] Fixed an issue where writeEngineSecrets.sh could not be used with the –insecure option.
• [Security] Token changes are now logged in a dedicated file with a dedicated logger and channel.
• [Vulnerability] Administrators are now the only ones able to edit autologin keys of other users.

Direct link ↗

Bug fixes

• [Custom Views] Host monitoring widget - fixed issue preventing data from being displayed in the widget.

Security fixes

• [Vulnerability] Upgraded PHP dependency onelogin/php-saml.

Direct link ↗

Bug fixes

• Fixed an issue where services associated with multiple hosts would be deleted for all hosts when a host was deleted.

Security fixes

• [Security] Fixed an issue with CLAPI Import.

Direct link ↗

Enhancements

• [Install] The is_encryption_ready column now has the correct data type to support poller encryption.

Direct link ↗

Enhancements

• [Authentication] When a user is authenticated using an IdP, the password fields no longer appear when editing a contact.
• [Dashboards] Status Grid widget: added a new filter for the state of resources (unhandled, acknowledged, in downtime, flapping) has been added.
• [Packaging] Increased the php memory limit in the centreon php configuration.
• [Resource Status] For performance and readability reasons, graphs containing more than 20 metrics are no longer displayed.

Bug fixes

• [ACL] Fixed an issue for users cumulating multiple ACLs that caused the ACL with the highest ID to override other ones.
• [API] Fixed an issue where using Rest APIv1 would change the token expiration date.
• [API] Fixed an issue that caused commands to return an SQL error when requesting services in real time using MySQL 8.
• [API] Fixed an issue with filtering on realtime service categories listing API endpoint.
• [APIv2] Fixed a 500 error when expiration_date = NULL in security_token.
• [Anomaly Detection] Fixed an issue on broker configuration generation with proxy parameters.
• [Authentication] Allowed to access Centreon UI through a reverse proxy/load balancer.
• [Configuration] Fixed an issue where host names could be saved with special characters but would then cause “export configuration” to fail.
• [Authentication] Fixed an issue where users could lose their DN during an LDAP connection.
• [Authentication] Fixed an issue with LDAP authentication crashing right after a success message.
• [Authentication tokens] Fixed an issue when clicking “cancel” in the change confirmation modal that caused the token’s status to be displayed as changed.
• [BA monitoring page] Fixed an issue that caused certain areas of the page to remain in light mode while dark mode was selected.
• [CEIP] Added data-testid on enable button for both direction.
• [CLAPI] Fixed an issue where the APPLYTPL command would take a long time to take effect.
• [Core] Fixed an issue with API routes.
• [Configuration] Fixed an error when changing the host template order in the host configuration form.
• [Configuration] Fixed an issue in Agent configuration where engine was not listening if “No TLS” was activated (poller-initiated).
• [Configuration] Fixed an issue in Agent configuration (Poller-initiated connection) that prevented users from searching for the host.
• [Configuration] Fixed an issue where host categories were not displayed in the listing when not linked to Host.
• [Configuration] Fixed an issue with page contents getting mixed-up when navigating between Host Groups and Additional configuration pages.
• [Configuration] Fixed an issue with special characters not displaying properly in the escalation configuration screen
• [Configuration] Fixed an issue on remote servers, where max auto_increment was reached after many exports causing imports to fail.
• [Configuration] Fixed an issue that allowed users to save changes when switching CMA agent modes without filling all required fields.
• [Configuration] Fixed an issue where Host templates cannot be used in Host categories by non-admininistrators.
• [Configuration] Fixed an issue where Host severities were no longer written in resources table.
• [Configuration] Fixed an issue where inherited macros could not be overrided on Host/Host template.
• [Configuration] Fixed an undefined array key from acl users which were spamming php log.
• [Custom Views - Host-Monitoring] Fixed an issue where only the current page was exported instead of all data
• [Dashboards] Fixed an issue preventing dashboards to be filtered.
• [Dashboards] Fixed an issue where host status icons were displayed incorrectly in the group monitoring widget.
• [Dashboards] Resource Table widget - Fixed an issue with the host name positioning.
• [Dashboards] Single Metric widget - Fixed an issue with the real-time retrieval of metric values.
• [Gorgone] Clarified Apache logs when gorgone connection failed in discovery.
• [Hosts] Fixed an error where the ACL Resource Groups field would lose its value and display a number instead of a string when a form error occurs.
• [Licenses] Fixed an error message concerning the creation of a dynamic property in a class when downloading licences.
• [Log] Fixed an issue where “Error impCompanyPortal” would appear on /var/log/centreon/centreon-web.log.
• [Medias] Fixed an issue preventing pagination from being displayed properly.
• [Monitoring] Fixed an issue on Host Group Summary redirecting users to Resource Status.
• [Open Tickets] Forced BBDO 3.0.1 instead of 3.1 on pollers to prevent a blocking issue.
• [Performance Graphs] Fixed an issue when exporting data in CSV that resulted in an empty file..
• [Resource Status] Prevent services related to a deleted host to appear in menu filter.
• [Translation] Added missing French translations.

Security fixes

• [Authentication] Password change attempts (both successful and unsuccessful) are now logged in a dedicated log file.
• [Security] Enhanced security on password DOM storage in login page.
• [Vulnerability] Fixed an issue on Broken Access Control in Administration Parameters Endpoint.
• [Vulnerability] Fixed IDOR vulnerability on Custom Views.
• [Vulnerability] Fixed XSS vulnerability in the ACL Menus Access page.
• [Vulnerability] Fixed XSS vulnerability in the Hosts Configuration page.
• [Vulnerability] Fixed XSS vulnerability in the Recurrent Downtimes page.
• [Vulnerability] Fixed XSS vulnerability on export configuration page.

Direct link ↗

Security fixes

• [Vulnerability] Securized backup script to prevent command injections.
• [Vulnerability] Fixed IDOR on Custom Views.

Direct link ↗

Enhancements

• [ACL] Added Image Folders in ACL groups to allow access control to images in MAP.
• [Administration] Added INFO logs on API and CMA Tokens Add/Delete/Activate/Revoke and API Tokens usage.
• [Agent configuration] It is now possible to configure both connection direction in the same configuration. The user interface has been improved according to this.
• [Configuration] Added Insecure TLS connection mode to Agent configuration.
• [Configuration] Agent configuration - All certificate fields are now optional, to handle public certificate use case.
• [Configuration] Cleaned up labels in Agent configuration screens.
• [Configuration] Insecure TLS is now available as encryption mode in Agent configuration.
• [Credentials encryption] Configuration generation is now able to handle encrypted credentials.
• Vault paths are now exported in plain-text to pollers.
• [API] Added a new endpoint to bulk Duplicate Host Groups.
• [API] Added bulk enable/disable endpoint for hostgroups.
• [API] Added an endpoint to bulk Delete Host groups.
• [API] Added a new endpoint to bulk Delete services.
• [API] Added missing configuration change logs for service template configuration.
• [Configuration] Hostgroup form is now using REST API for update.
• [Configuration] Host form is now using REST API.
• [Configuration] Hostgroup form is now using REST API for deletion.
• [Configuration] Host form is now using REST API for deletion.
• [Configuration] Service form is now using REST API for deletion.
• [Configuration] Service Template form is now using REST API.
• [Configuration] Default 24/7 notification time period is now defined on base pack Host templates.
• [Configuration] Host_down_disable_service_checks and flapping are now enabled by default on pollers.
• [Configuration] Improved Hostgroup Add/Edit.
• [Configuration] Improved Hostgroup listing (columns, filtering, sorting).
• [Configuration] Improved the tooltip for Broker’s Unified SQL output.
• [Configuration] Replication enabled option has been removed from the Broker output form.
• [Core] Migrated to PNPM 10 and upgraded dependencies (React 19 and Cypress 14).
• [Core] Updated PHP dependencies to 8.2 version.
• [Core] Rectangular logos are now correctly displayed on the login page.
• [CSS] The Tailwind framework is now used, optimizing the loading of CSS elements.
• [Packaging] Increased php memory limit in centreon php configuration.
• [Dashboards] Added default sizes for widgets, and optimized their default positioning on the grid of the dashboard.
• [Dashboards] Custom views menu is now hidden on new installation or if no custom views are present.
• [Dashboards] Improved Status Grid widget responsiveness in condensed mode.
• [Dashboards] It is now possible to use regex (regular expressions) to filter certain resource types in specific widgets.
• [Dashboards] It is now possible to expand an individual widget.
• [Dashboards] Reduced spacing between items of the Dashboard page. It is now possible to resize the widgets horizontally or diagonally, either on the left or the right side.
• [Dashboards] When creating a new widget, the list of existing types of widgets is now categorized and ordered alphabetically.
• [Dashboards][Metrics Graph] Added new time periods: 14 days and 2 months.
• [Resource Status] Improved copy of executed command.
• [Resource Status] Improved the label of the “Sticky” option in the acknowledgement window.
• [Authentication Tokens] Added a welcome page when no token exists in the Authentication tokens page.
• [Configuration] Harmonized the interface for Additional Configurations with other screens.
• [UX] Added a button to copy the breadcrumbs on ReactJS pages.
• [UX/UI] Updated forms and pop-ups to improve readability and added a new tab navigation system for quick access to collapsible sub-menus.

Bug fixes

• Fixed missing French translations.
• A default token has been generated and applied to existing agent configuration.
• [ACL] Fixed issue when cumulating ACLs for a same user.
• [Configuration] Fixed an issue where export wasn’t taking in account macros inherited from indirect template parents.
• [Configuration] Fixed issue preventing user from disabling a meta-service.
• [Dashboards] Fixed contact search when sharing a dashboard or a playlist.
• Fixed an issue where exported tokens was ignored by Engine.
• Fixed an issue where notes weren’t displayed correctly in Administration > Logs.
• Fixed an issue where service deploy endpoint was adding the command line to the service.
• Forced BBDO 3.0.1 instead of 3.1 on pollers, to prevent a blocking issue.
• [LDAP] Fixed an issue on Users & Groups filters validation.
• [Metrics Graph Widget] Fixed an issue where an unexpected application error was occurring when selecting a custom time period.
• [Packaging] Updated permissions of token purge log file.
• [Resource Status] Fixed an issue that prevented the details panel from displaying correctly for a service that is part of a service group.
• [Translations] Fixed issue preventing translations from being displayed.
• [Unattended] On versions that use MySQL 8.0, the default authentication plugin is now mysql_native_password.

Security fixes

• [Administration] Fixed XSS in Administration > ACL > Action Access.
• [Configuration] Fixed XSS in Configuration > SNMP Traps form
• [Vulnerability] Fixed XSS vulnerability on Hosts templates.
• [Vulnerability] Fixed XSS vulnerability on Recurrent downtimes.
• [Vulnerability] Fixed XSS vulnerability on Resources Access parameters.
• [Vulnerability] Fixed XSS vulnerability on SNMP traps.
• [Vulnerability] Fixed XSS vulnerability on Connectors.
• [Vulnerability] [security] Fixed an RCE on poller reload page.

Direct link ↗

Enhancements

• [Resource status] Performance has been drastically improved for many search use cases.
• [Upgrade] A dedicated upgrade.log file now fully traces upgrades, making them easier to troubleshoot.
• [Web] A new logging system has been implemented for centreon-web.

Bug fixes

• [Configuration] Fixed an issue where the ‘_’ character was no longer valid in address definitions.
• [Configuration] Fixed stream connector (lua) parameters disappearing after deleting one of them in a Broker configuration.
• [Dashboards] It is now possible for users to share a dashboard with:
  • contact groups part of a common acl access group.
  • individual contacts listed in the contact groups they belong to.
• [Graphs] Non-admin users can now export metaservice performance graphs as CSV.
• [Host discovery] Importing discovered hosts now reliably completes and reports a genuine status instead of a false success.
• [Web] Fixed an issue in the extension manager where typing in the search bar or using type/status filters had no effect.

Direct link ↗

Enhancements

• Updated Symfony components.

Bug fixes

• [Host creation] Fixed an issue that occurred when saving the host edition/creation form.
• [API] Fixed an issue where adding a host or service wouldn’t trigger an ACL recalculation.
• [API] Replaced an incorrect error message (The HTTP status code “10” is not valid) that was displayed when the database connection timed out.
• [CLAPI] Fixed an issue that resulted in a PHP error when using the APPLYCFG command while Anomaly Detection was configured.
• [Configuration] Fixed an issue with the export configuration button located in the top counter that would occasionally saturate the file system.
• [Custom Views] Removed unnecessary PHP warnings on host-monitoring and service-monitoring widgets.
• [Dashboards] Fixed an issue with the Single Metric widget that resulted in a 404 error when using metrics that contained slashes in their name.
• [Dashboards] Optimized the widgets reload rates to avoid lag.
• [Monitoring] Removed unnecessary PHP warnings on the service details page.
• [Monitoring] Removed unnecessary PHP warnings triggered by “Add Downtime” action from Service/Host details pages.
• [Navigation] Fixed an issue in legacy pages where applying a filter to a specific resource would incorrectly redirect the user to the Resource Status page.

Direct link ↗

Bug fixes

• [Configuration] When creating a new service group, the service selection lists are no longer empty.

Direct link ↗

Bug fixes

• [Remote Server] Fixed an issue where exporting the configuration of a remote server would reset certain settings and ACLs for that server.

Direct link ↗

Enhancements

• [Performance] Improved ACL calculations by removing the dependency to an outdated class on legacy pages.

Bug fixes

• [APIv2] Fixed an issue with the API response not displaying all the requested elements.
• [Authentication] Fixed SAML authentication failure. Please manually verify your SAML comparison settings if you previously used a non-default configuration.
• [CLAPI] Fixed an issue where CG objects were not displaying a “members” column.
• [Configuration] Fixed an issue where Centreon Engine statistics were no longer displayed.
• [Configuration] Fixed an issue where, after unlinking a host template from a host, it would still appear as linked in the services by host page.
• [Custom Views] Fixed an issue where the number of hosts and services displayed in some widgets was incorrect for non-admin users.
• [Dashboards] Fixed an issue preventing “Clock/Timer” widget from being displayed in Playlists.
• [Dashboards] Fixed an issue with the time period selection in the Business Activity status timeline widget.
• [Event Logs] Fixed an issue where restricted users saw no results in the Event Log despite having assigned resources.
• [Logs] Fixed an issue where insufficient user permissions would trigger excessive PHP warnings, potentially causing disk space issues.
• [Monitoring] Fixed a difference of values in the graphs between the Ressource status and the Performance pages.
• [Resource Status] Fixed an issue where the Status column would disappear when navigating to the Resource Status page from a Dashboard “Resource Table” widget.
• [Systemd] Allow php-fpm to write in /usr/share/centreon.

Direct link ↗

Enhancements

• Added examples for the usage of AND / OR in API documentation.
• [Performance] Improved SQL query construction for better performance in Resource Status.
• [Performance] Removed deprecated row-counting method and removed an unnecessary SQL join to optimize queries in Resource Status.

Bug fixes

• Fixed an issue where calling the host edition/creation API resulted in a “You are not authorized to access this resource” error.
• Fixed an issue where an otel_server block was added to otl_server.json when only ‘Connection initiated by poller’ was active.
• [ACL] Fixed an issue where ACL rights were not applied correctly to host groups, resulting in a “You are not authorized to access this resource” error.
• [Administration] Fixed an issue where additional configurations weren’t updated after deleting a user.
• [Administration] Fixed an issue where unlocking a locked contact failed with an SQL syntax error.
• [Authentication] Fixed SAML authentication failure.

  This update may affect custom SAML authentication configurations. If you changed any SAML settings from their default values, manually verify that your configuration still works as expected.

• [Configuration] Fixed an issue where changing the name of a vCenter instance in an additional configuration was causing an error.
• [Dashboards] The metric selection list no longer displays duplicate entries.
• [Event Logs] Fixed an issue with filters where the service list failed to update after a host was selected.
• [Graph] Legend names now display correctly instead of showing the “Default” placeholder.
• [Remote server] Fixed an issue where tasks were not correctly imported.
• [Trapsnmp] Fixed the SQLite database setup for SNMPTrapD to only include custom macros for resources monitored by the poller.
• [WEB] Fixed incorrect MIME type for CSS files that caused an error in the browser console.

Direct link ↗

Bug fixes

• [Authentication] Changed the default setting for “Requested Authentication Context” to Disabled in SAML/SSO configurations.

Direct link ↗

Bug fixes

• [Administration] Fixed pagination issues on the LDAP page.
• [API] Fixed an issue where LDAP users configured to reach the API realtime would get their permission revoked after requesting a login token.
• [API] The API no longer returns “null” when trying to acces the /monitoring/servers endpoint (it will now returns the IP address of the pollers).
• [Configuration] Users can now horizontally resize on select type fields.
• [Configuration] Fixed an issue with MIB import logs being unreadable.
• [Custom Views] Fixed an issue where exporting data for Service Monitoring widgets included all services in the configuration instead of only the selected resources.
• [Installation] Fixed an issue with the mariadb password setup.
• [Performances Graphs] Fixed an issue that prevented filters from working together.
• [Resource Status] Fixed an issue that caused the Centreon interface to crash when trying to display the graph of a service without any performance data available.
• [Resource Status] Fixed an issue that prevented PNG exports of the details panel.
• [Resource Status] Fixed an issue with the CSV export not taking into consideration the applied filters.

Direct link ↗

Enhancements

• [Authentication] SAML IDP form - Added a new field to handle the “Requested Authentication Context” parameter.
• [Configuration] The CMA connector will now automatically link to new commands when deploying monitoring connectors related to CMA.
• [Configuration] Provided a script to adapt the threshold format for CMA native checks.
• [Poller wizard] Replaced “service” by “systemctl” in Poller related commands (engine/broker).

Bug fixes

• [API] Fixed an issue where the “Reach API Realtime” option was set to “Yes” even if a “No” was selected when creating the user.
• [Configuration] Fixed an issue where a host couldn’t be edited after being added by host discovery.
• [Custom Views] Group Monitoring widgets - Fixed an issue occurring when using hyphens in resource names.
• [Dashboards] Fixed an issue preventing metric widgets from being displayed
• [Downtimes] Fixed an issue when filtering downtimes by service name.
• [Host Group] Fixed an issue where the host group configuration name restrictions would allow characters that prevented export configuration.
• [LDAP] Fixed an issue where auto import was ignored when different LDAP configurations coexisted.
• [Monitoring] Fixed an issue where non-local accounts would be wrongfully notified of their password’s expiration date.
• [Playlists] Fixed an issue preventing the Resource Table widget from displaying according to the dashboard settings.
• [Remote server] Fixed an issue where tasks would not be correctly imported.
• [UI Notifications] Fixed an issue with LDAP/local users not being able to see the “UI Notifications” panel.

Security fixes

• This release contains security fixes. More details on our community platform The Watch.

Direct link ↗

Bug fixes

• [Administration] Fixed a blocking issue that caused some LDAP users to be unable to log in.
• [Configuration] Fixed an issue where the value initially set for a host’s SNMP community was replaced by ‘*’ characters when editing its configuration.
• [Dashboards] Fixed an issue that caused metric-related widgets to be empty.
• [Resource Status] Fixed an issue causing graphs to not appear in the service details tab.

Direct link ↗

Enhancements

• [Custom Views] Optimized performance when retrieving ACLs in widgets.
• [Dashboards] Resource Table widget - Added a link to access tickets on the provider side.
• [Packaging] Increased the PHP memory limit in the centreon PHP configuration.
• [Performance Graphs] The limit on the number of metrics displayed per chart has been raised to 20. We also fixed an issue with unnecessary legends being displayed when this limit was exceeded.

Bug fixes

• [Administration] Fixed an LDAP issue where the user’s DN was never updated.
• [Configuration] Fixed an error when duplicating the configuration of an RRD broker that resulted in missing outputs.
• [Dashboards] Metrics Graph - Improved the vertical scale display.
• [Dashboards] Resource Table widget - Fixed an issue with the host name’s positioning.
• [Dashboards] The list of contacts is now displayed correctly when sharing a dashboard or a playlist.
• [Monitoring] Fixed an issue with the “hostgroups summary” monitoring page redirecting users to Resource status when trying to filter on a hostgroup.
• [Performance Graphs] Fixed an issue preventing users from selecting multiple graphs when the language selected isn’t “en_US”.
• [Playlists] Fixed an issue preventing host problems from being displayed.
• [Resource Status] Fixed an issue preventing services from being displayed when filtering on their parent host severity.
• [Unattended] Fixed an issue that resulted in incomplete ITEE installations when installing a platform with the unattended.sh script.
• [Users] Fixed an issue where creating a user with an autologin key resulted in a blank page.

Security fixes

• [Security] Fixed a vulnerability in images parameters.
• [Security] Fixed a vulnerability in LDAP configuration.
• [Security] Fixed a vulnerability in virtual metrics.
• [Security] Fixed a vulnerability in hostgroups notifications.

Direct link ↗

Bug fixes

• [Custom Views] Host monitoring widget - fixed issue preventing data from being displayed in the widget.

Security fixes

• [Vulnerability] Upgraded PHP dependency onelogin/php-saml.

Direct link ↗

Security fixes

• [Security] Fixed an issue with CLAPI Import.

Direct link ↗

Enhancements

• [API Tokens] Added a welcome page when no token exists in the token configuration page.
• [Authentication] Password change attempts are now logged in a dedicated log file.
• [Authentication] When editing a contact, users authenticated by an IdP no longer see the password editing fields.
• [Configuration] The “Deploy Service” action from the hosts list now triggers a “Conf Changed” flag for the related poller in the pollers list.
• [Configuration] Fixed an issue with database partitioning on Amazon Aurora RDS. The next update may take a bit longer for some users while the system catches up.
• [Resource Status] For performance and readability reasons, graphs containing more than 20 metrics are no longer displayed.
• [UI] Changed wording from “IP Address” to “Address” for pollers.

Bug fixes

• [ACL] Fixed an issue for users cumulating multiple ACLs that caused the ACL with the highest ID to override other ones.
• [API] Fixed an issue where using Rest APIv1 would change the token expiration date.
  • [API] Fixed an issue that caused commands to return an SQL error when requesting services in real time using MySQL 8.
  • [API] Fixed an issue with filtering on realtime service categories listing API endpoint.
  • [APIv2] Fixed a 500 error when using expiration_date = NULL in security_token.
• [Anomaly Detection] Fixed an issue on broker configuration generation with proxy parameters.
• [Authentication] Allowed to access Centreon UI through a reverse proxy/load balancer.
• [Authentication] Fixed an issue on LDAP authentication.
• [Authentication] Fixed an issue where users could lose their DN during an LDAP connection.
• [Authentication tokens] Fixed an issue when clicking “cancel” in the change confirmation modal that caused the token’s status to be displayed as changed.
• [CLAPI] Fixed an issue where HTML entities were not correctly decoded when exporting.
• [CLAPI] Fixed an issue where the APPLYTPL command woul take a long time to take effect.
• [Configuration] Fixed an error when changing the host template order in the host configuration form.
• [Configuration] Fixed an issue in Agent configuration where engine was not listening if “No TLS” was activated (poller-initiated).
• [Configuration] Fixed an issue on Agent configuration where results of filters were not as expected if there was no matching data.
• [Configuration] Fixed an issue where host names could be saved with special characters but would then cause “export configuration” to fail.
• [Configuration] Fixed an issue on remote servers, where max auto_increment was reached after many exports causing imports to fail.
• [Configuration] Fixed an issue preventing users from disabling a meta-service.
• [Configuration] Fixed an issue in Agent configuration (Poller-initiated connection) that prevented users from searching for the host.
• [Configuration] Fixed an issue where configuration files were not generated when the poller was disabled in the listing and re-enabled through the form.
• [configuration] Fixed an issue where configuration wasn’t exported for hosts without alias and declared in agent configuration.
• [Configuration] Fixed an issue where inputs/outputs were missing when duplicating a Broker config.
• [Configuration] Fixed an issue where Host categories were not displayed in the listing when not linked to Host.
• [Core] Fixed an issue where the log level wasn’t being taken into account in the token removal script.
• [Custom Views - Host-Monitoring] Fixed an issue where only the current page was exported instead of all data.
• [Dashboards] Fixed an issue preventing to get dashboards filtered.
• [Dashboards] Fixed an issue where host status icons were displayed incorrectly in the group monitoring widget.
• [Dashboards] Single Metric widget - Fixed the real-time retrieval of metric values.
• [Downtimes] Fixed an issue with meta-service names not being properly displayed.
• [Host groups] Fixed an issue while checking for illegal characters on host group name.
• [Licences] Fixed an error message concerning the creation of a dynamic property in a class when downloading licences.
• [LDAP Import] Fixed an issue where a LDAP user with a UID containing a special character would be imported multiple times.
• [Log] Fixed an issue where “Error impCompanyPortal” would appear on /var/log/centreon/centreon-web.log.
• [Monitoring] Fixed an issue on Host Group Summary redirecting users to Resource Status.
• [Packaging] Updated permissions of token purge log file
• [Performance Graphs] Fixed an issue when exporting data in CSV that resulted in an empty file.
• [Resource Status] Fixed error when displaying metrics of a meta service.
• [Resource Status] Services related to a deleted host will no longer appear in menu filter.
• [Translation] Fixed an issue where menu language was set to FR when the “Detection by browser” language option was selected.
• [Translations] Fixed an issue preventing translations from being displayed.

Security fixes

• [Security] Enhanced security on password DOM storage in login page.
• [Security] Fixed an RCE vulnerability on poller reload page.
• [Security] Secured backup script to prevent command injections.
• [Vulnerability] Fixed an issue on Broken Access Control in Administration Parameters Endpoint.
• [Vulnerability] Fixed IDOR vulnerability on Custom Views.
• [Vulnerability] Fixed XSS vulnerability in Configuration > Hosts > hostgroups.
• [Vulnerability] Fixed vulnerability XSS in the ACL Menus Access page.
• [Vulnerability] Fixed XSS vulnerability in the Hosts Configuration page.
• [Vulnerability] Fixed XSS vulnerability in the Recurrent Downtimes page.

Direct link ↗

Bug fixes

• [Core] Fixed an issue with API routes.

Direct link ↗

Enhancements

• [API] Enhanced agent configuration endpoints documentation.
• [Configuration] ACC: vCenter/ESC names are now unique.
• [configuration] Cleaned up labels in agent configuration screens.
• [Custom Views] “Global Health” and “Top 10” widgets: improved display and fixed issue with MySQL8.

Bug fixes

• A default token has been generated and applied to existing agent configurations.
• Added missing French translations for help messages.
• [Administration] Fixed an error occurring when a CMA token was copied.
• [API v1] Fixed an issue with the creation of services by CLAPI with a non-administrator user.
• [API v1] Creating hosts and host groups with an empty name is now forbidden.
• [Authentication] Fixed an issue that prevented users logged in via OIDC from logging out of the interface.
• [Authentication] LDAP users with no email can now authenticate to Centreon using LDAP auto import.
• [CLAPI] Spaces in host names are now replaced by an underscore, making CLAPI’s behavior consistent with that of the interface.
• [Configuration] Fixed a circular dependency issue affecting service template inheritance (interface + API).
• [Configuration] Fixed an issue with Additional Configurations where configuration were lost if the name of the vCenter contained only numbers.
• [Configuration] Fixed an issue where non explicit error messages were displayed when saving host configuration when geographic coordinates were too long.
• [Configuration] Fixed an issue where host aliases were not handling quotes in inputs properly.
• [Configuration] Fixed an issue where the “configuration changed” flag was not updated when changing extended info using CLAPI.
• [Configuration] Increased contact_pager property to allow for longer tokens (e.g. Microsoft Teams tokens)
• [Configuration] The creation of metaservices no longer fails for users with several ACL rules on resources.
• [Custom Views] Host Monitoring: fixed the export functionality for all resources.
• [Dashboards] Metrics Graph widget: fixed a display issue occurring when changing the graph display type.
• [Dashboards] Fixed some issues with contact search when sharing a dashboard or a playlist.
• [Dashboards] Fixed a saving issue occurring when leaving dashboards for a legacy page.
• [Dashboards] Reduced the minimum size for MAP and Resource table widgets.
• [Dashboards] Status Grid: fixed link to Resource Status page.
• [Event Logs] Fixed pagination that was not working properly.
• Fixed an issue where the service deployment endpoint was adding the command line to the service.
• Fixed an issue where exported tokens were ignored by Engine.
• [LDAP] User & Group filters now work correctly when editing an LDAP configuration.
• [Packaging] Removed obsolete dependencies for database-related Centreon packages.
• [Resource Status] Fixed an issue on the notification tab where the same user was displayed multiple times.
• [Resource Status] Fixed the notification tab to display the contact defined on the service template rather than on the host.
• [Resource Status] Deleted resources no longer appear in search results.
• [Resource Status] The pipe “|” character is now handled correctly in the command section of a resource.
• [Resource Status] View by host: fixed an issue preventing resources from being displayed when filtering on a resource that had no metrics.
• [Update] Fixed an issue on modules routes which were no longer up to date.

Security fixes

• [Security] The current password is now required when modifying a user password.
• [Vulnerability] Fixed insecure direct object reference allowing private widget retrieval.
• [Vulnerability] Fixed multiple XSS vulnerabilities.
• [Vulnerability] Securized poller configuration commands to avoid RCE vulnerability.
• [Vulnerability] Upgraded select2 dependency.

Direct link ↗

Bug fixes

• A default token has been generated and applied to existing agent configurations.
• Fixed an issue where exported tokens were ignored by Engine.

Direct link ↗

Security fixes

• [Security] The current password is now required when modifying a user’s password.

Direct link ↗

Bug fixes

• [UI] Fixed missing French translations in menus

Direct link ↗

Enhancements

• [Authentication] Improved SAML configuration by adding a “Requested Authentication Context” parameter.
• [Configuration] Added Tokens management in Agent configuration.
• [Configuration] Host name is now displayed in Agent configuration (poller-initiated connection)
• [Dashboards] Added new widget “Business Activity Status Timeline” that displays the distribution of current statuses on a BA, as a chronological timeline for a given time period.
• [Dashboards] Metrics are now clearly identifiable in the Metrics Graph widget, thanks to the addition of service and/or host related names, when needed.
• [Dashboards][Resource Table widget] Added FQDN, Alias, Parent Alias and Monitoring Server columns.
• [Metaservices] Fixed several issues occuring when using MySQL 8.
• [Monitoring] A new, modern version of the BA monitoring page is now available.
• [Resource Status] Added the possibility to export in CSV format the current data being displayed.
• [Resource Status] It is now possible to avoid performance issues when using free text search, by using a new option named “Free text search behavior” in the Administration > Parameters > Centreon UI menu.

Bug fixes

• [Administration] Fixed an issue on user groups and templates that occurred when importing non-admin users from LDAP.
• [API Tokens] Fixed an issue where an invalid expiration date was sent when creating a token with a custom duration.
• [API] Fixed a 500 error affecting the service template listing endpoint.
• [CLAPI] Fixed an issue where a warning was returned when using getmacro.
• [Configuration] Fixed a display issue affecting some command tooltips.
• [Configuration] Fixed an issue where adding/editing a service failed when a command was configured on a template that was not the direct parent of the service.
• [Configuration] Fixed an issue where mass change on Linked Service Templates caused a 500 internal server error.
• [Dashboards] Fixed auto-adjustment of curves in graphics.
• [Dashboards] Optimized threshold display in the Single Metric widget.
• [Language] Fixed issue preventing modern pages from being translated when choosing “detection by browser” as a language.
• [Metaservices] Fixed several issues occuring when using MySQL 8.
• [Resource Status] Default values for monitoring options are now also applied to non-admins.
• [Resource Status] Fixed an issue preventing the selection of multiple resources when using advanced filters.
• [Resource Status] Optimized legend rendering in graphs.
• [Resource Status] The correct pictogram is now used when displaying a parent resource in downtime.
• [Upgrade] Fixed migration script for version 23.10.8.

Security fixes

• [Vulnerability] Fixed vulnerabilities on several pages.
• [Vulnerability] Added ACL check when exporting configuration.
• [Vulnerability] Fixed an issue allowing a non admin user to logout another user.
• [Vulnerability] Fixed SQL injection in Monitoring > Event Logs page.

Direct link ↗

Enhancements

• [Agent configuration] Added a “No TLS” connection mode for CMA & Telegraf. For CMA, this mode is only active within a limited timeframe.
• [Agent configuration] Sub-directories are now allowed in certificate configuration fields.

Bug fixes

• [Configuration] Cases where no check command is defined when creating or editing a service are now detected before saving.
• [Configuration] Fixed an issue where adding/editing a service failed when a command was configured on a template that was not the direct parent of the service.
• [Configuration] Time period names can now have more than 200 characters.
• [Custom Views] The “Battery Status” information is now available in the Gridmap widget.
• [Dashboards][Public Playlists] Fixed an issue where Metrics Graphs were displaying too many curves.
• [Graph] Fixed an issue preventing “fill” and “invert” options from being considered in the graphs in Resource Status and Dashboards.
• [Install] Upgrades to version 24.10 no longer fail (a duplicate entry in the topology table has been removed).
• [LDAP] Fixed the syntax that validates custom filters for users and groups.
• [Cron] Fixed an issue where some partitioned tables were not deleted from the database.
• [Remote Server] Fixed an issue preventing Business Activities from being displayed on remote servers.
• [Resource Status] Fixed an issue with timeline period filter not being properly applied.
• [Resource Status] Searching for an item containing a slash character is now handled correctly.
• [Resource Status] In the Details panel of a resource, the Calculation type tile is no longer displayed twice.
• [Status Chart widget] Hovering over the legend of the donut now displays the correct list of resources.

Security fixes

• [Install] Fixed incorrect rights on a database configuration file.
• [Vulnerability] Upgraded axios to version 1.8.1.
• [Vulnerability] Upgraded moment.js to version 2.29.4.

Direct link ↗

Bug fixes

• [Upgrade/Install] Fixed an issue on Centreon Monitoring Agent/Telegraf connector creation.

Direct link ↗

Enhancements

• [Resource Status] Optimized search query.
• [CMA] The Centreon Monitoring Agent connector is now automatically created during install/upgrade.

Bug fixes

• [Configuration] Fixed ACL checks on contact/user configuration page.
• [Configuration] Fixed an issue where the notification period field was not saved in some cases.
• [Custom Views] Fixed an issue preventing non admin users from seeing host groups in the Host group Monitoring widget and service groups in the Service group Monitoring widget.
• [Dashboards] Fixed an issue where dashboards containing a Resource Table widget appeared in Edit mode.
• [Dashboards][Metrics Graph] Optimized bar chart rendering performance when modifying opacity or bar radius.
• [Discovery] Fixed an issue where autodiscovery credentials were lost during an update.
• [Downtimes] Fixed an issue where non admin users could not display the downtimes page.
• [Downtimes] Fixed an issue where loading the downtimes page resulted in a gateway timeout error.
• [Graphs] Fixed an issue preventing non admin users from exporting graphs as “.png”.
• [Resource Status] Fixed an issue where the Host & Service columns didn’t contain the right information when displayed in view by host mode.
• [Service Groups] Fixed an issue preventing non admin users from displaying Service Groups.
• [Translation] Fixed a translation issue on menu & breadcrumb and added a “Connectors” submenu that includes Monitoring Connectors and Additional configurations.
• [Web] Fixed an issue where some password managers were preventing users from accessing legacy pages.

Direct link ↗

Enhancements

• [Media] Added the handling of .svg files for images.
• [Resource Status] Added Flapping state in “find resource by parent” endpoint.
• [Resource Status] Added Flapping state in the list of resources and updated the icon in the details panel.
• [Status Grid widget] Optimized the way the health of Business Activities is calculated.

Bug fixes

• [ACL] Fixed an issue where rights were not applied correctly to a hostgroup when it was created by a non admin user.
• [Agent/Poller configuration] Fixed an issue where the list of configurations was still filtered but the search bar was empty.
• [CLAPI] Fixed an issue preventing the list of Business Activities to be displayed after creating a Business Activity using CLAPI.
• [Configuration] Fixed an issue on remote servers where users lost their contact groups when edited.
• [Media - Image Synchronization] Fixed an issue with the case sensitivity of file extensions.
• [Reports/Availability] Fixed an issue where CSV files could not be downloaded if a day was UNDETERMINED in the selected period.
• [Resource status] The host_category filter now works correctly and returns no errors.
• [Resource status] Fixed an issue where graphs were not taking all of the available space in the side panel.
• [Resource Status] All services are now correctly listed in the filters.
• [Resource Status] Using compact mode no longer causes an error.
• [Top counter] Fixed an issue on refresh intervals.
• [Top counter] Negative values are no longer allowed in the “Refresh interval for statistics” fields.
• [Top counter] Unnecessary calls are no longer performed when users don’t have access to the top counter.

Security fixes

• [Image upload] Fixed a security issue on image upload.
• [Security] Fixed extends-tag vulnerability in Smarty.

Direct link ↗

Enhancements

• [Additional Connector Configuration] The Poller filter now displays an error message if users try to create a second configuration for the same poller.
• [API] Added missing configuration change logs for command configuration (ADD).
• [API] Added missing configuration change logs for host categories configuration.
• [API] Added missing configuration change logs for service categories configuration.
• [Authentification] Improved the way errors are logged for authentications with OpenID.
• [CEIP] Added telemetry to the Poller/Agent configuration feature.
• [Dashboards] Added the possibility to mark a dashboard as a favorite one, and to list all favorites.
• [Resource status] In the details panel, the interface of the Export button has been improved.
• [Resource status] In the Resource Status page, custom order for filters can now be saved.
• [Resource Status] Renamed “Edit filters” to “Manage filters” to better reflect what the command does.
• [UI] Centered the reset password form.
• [UI] Login page customizations now also apply to the reset password form.
• [UX] Enhanced translation and user experience for the Additional Connectors Configuration feature.
• [VMWare] Improved the interface for the Additional Connectors Configuration feature.

Bug fixes

• [Administration] Empty values for the “Retention duration for downtimes” parameter are now correctly detected.
• [Cron] The script that deletes expired tokens is now run with the apache user to avoid invalid permissions on the web log file.
• [Dashboards] Selecting multiple resources of the same type now works correctly.
• [Discovery] Fixed incorrect rights on centreon_vmware.json, that triggered an error when executing host discovery jobs.
• [Install] Fixed issue with SQL schema missing when upgrading version.
• [Metrics Graph widget] Legends are now displayed correctly when a lot of metrics are selected.
• [Poller/Agent configuration] Fixed an issue where the listing page was replaced by the default page when searching for an unknown value.
• [Public Playlists] Fixed an issue preventing public playlists to be displayed on some browsers.
• [Resource Status] Linked contacts now appear in the detail panel for hosts and services, even if a timeperiod is not explicitly configured for both of them.
• [Resource status] Fixed an issue with the notification tab for services, where the corresponding contacts were not displayed.
• [Resource Status] Fixed an issue where the notification icon was not displayed in the corresponding column in the Resource Status page.
• [Status Chart/Grid widgets] Passive hosts and hosts without services are now displayed correctly in these widgets.
• [Status Chart widget] Optimized the responsiveness of stacked bars.
• [Top counter] Fixed an issue that prevented users from deploying the configuration on more than 10 pollers.

Security fixes

• [Event Logs] Fixed access issue with non admin users.
• [Security] Fixed a security vulnerability in API Token management.
• [Security] Fixed a vulnerability in the contact management form.

Direct link ↗

Enhancements

• [API] Added missing configuration change logs for timeperiods configuration.
• [API] Added missing configuration change logs for host template configuration.
• [API] Added missing configuration change logs for host severities configuration.
• [API] Added missing configuration change logs for service severities configuration.
• [Configuration] Improved the tooltip for Broker’s Unified SQL output.
• [Dashboards] Added meta-services to metric widgets (Single metric, Metrics graph, Top/Bottom).
• [Install] Added 24.10 support for unattended script.
• [Library - view by card] Added a thumbnail that shows a snapshot of your data, taken when the dashboard is saved.
• [Poller/Agent configurations] You can now manage the configuration of agents through an interface. This includes Centreon Monitoring Agent and Telegraf.

Bug fixes

• [ACC] Fixed an issue with ACC where configuration files were not copied to the central server.
• [Authentication] Fixed an issue preventing LDAP users with more than one email address to log in to Centreon.
• [Custom Views] Fixed an issue with how the edit widget pencil icon was displayed.
• [Custom Views] Fixed an issue preventing some filters from functioning in the “Hostgroup monitoring” and “Host monitoring” widgets.
• [Downtimes] The action details column now displays the correct information in the Action Log page.
• [Dashboards][Widgets] In the resource selection fields, services containing a slash (“/”) in their name no longer trigger an error.

Security fixes

• [Security] Fixed an issue on virtual metrics’ RPN field.
• [Security] Fixed a security issue in media binary.
• [Security] Fixed SQLi in “Hostgroup Monitoring” widget in Custom Views, for authenticated users having sufficient rights to export the results in CSV format.
• [Security] Fixed SQLi in “Hostgroup Monitoring” widget in Custom Views, for authenticated users having sufficient rights to edit the widget.
• [Security] Fixed SQLi in “Host Monitoring” widget in Custom Views, for authenticated users having sufficient rights to edit the widget.
• [Security] Fixed SQLi in “TOP10 CPU usage” widget in Custom Views, for authenticated users having sufficient rights to edit the widget.
• [Security] Fixed SQLi in “TOP10 Memory usage” widget in Custom Views, for authenticated users having sufficient rights to edit the widget.
• [Security] Improved an SQL query triggered via the Event Logs menu for better protection.
• [Security] Updated Symfony Security-Http component.

Direct link ↗

Enhancements

• [API] Added missing configuration change logs for service template configuration.
• [API] Added missing configuration change logs written when the configuration of services is deployed.
• [Core] Improved the way the logo on the login page can be customized.
• [UX] Added a button to copy the breadcrumbs on ReactJS pages.

Bug fixes

• [API] Fixed the listing of commands containing quotes and/or double quotes.
• [API] The is_notifications_enabled value in the host configuration endpoint of the API is now correctly updated when notifications are enabled.
• [API] Time period definitions containing the value 00:00-00:00 are now correctly taken into account.
• [API Token] Fixed an issue with the expiration date of tokens in the API tokens page.
• [API Token] Using pagination, fixed the list of contacts that didn’t return enough results.
• [Authentication] Fixed an issue with SSO authentication with SAML protocol that occurred when users had a legacy page as default page.
• [Clapi] Fixed a duplicate function issue that occurred when using CLAPI with APIv1.
• [Configuration] Adding a Centreon Broker output with lua parameters now works properly: values are no longer mixed up.
• [Configuration] Fixed incorrect links in the Export configuration page.
• [Core] Changed log file for the cron job that removed outdated tokens.
• [Core] The correct user theme is now applied even when options are changed in a user’s profile.
• [Custom Login Page] Fixed the visibility of the text area border.
• [Discovery] Automatic execution of host discovery jobs (export and reload of the poller configuration) no longer fails with an “insufficient rights” message.
• [Install] Added a missing ACL column in the Centreon database.
• [Playlists] Fixed an issue where an unwanted 404 screen blinked when first loading a playlist using its public link.
• [Playlists] Fixed an issue with the order of dashboards.
• [Resource Status] Custom column definitions are now saved correctly.
• [Resource Status] Fixed an issue with the behavior of group chips in the resource detail panel.
• [Resource Status] Fixed an issue with the status_type filter: you can now enter values either in lower or upper case.
• [Resource Status] Fixed the redirection from the Event Logs page to Resource Status: the details panel is now opened on the correct resource.
• [Resource Status] If no notification has ever been sent, the “Last notification” field in the details panel is not displayed.
• [Resource Status] Made downtime and acknowledge icons more visible in light and dark mode.
• [Resource Status] Tooltips on quick action buttons are now displayed only briefely when they are hovered, so as not to block the action button just below.
• [Status Chart widget] Filters on selected resources are now handled properly.
• [Status Grid] Fixed an issue where an incorrect number of resources were displayed on hover.
• [Vmware] Fixed an issue in /ect/sudoers.d/centreon for the vmware service.

Security fixes

• [Security] Improved checks on changed objects that update the “conf changed” column in the list of pollers.
• [Security] Fixed XSS vulnerability on poller name in several menus.

Direct link ↗

Bug fixes

• Fixed an issue preventing users from creating hosts, templates or broker inputs/outputs, when using HTTPS.

Direct link ↗

Enhancements

• Non-admin users can now see freshly-created host groups and service groups in the list of host/service groups immediately.
• The Additional connector configurations menu allows you to define the credentials to access a monitored resource through the Centreon interface rather than having to connect to your pollers manually.

  Warning: If you were using the following monitoring connectors, from version 24.10 you must declare all of their configurations using the Configuration > Additional connector configurations page before deploying the configuration of the corresponding poller:

  • VMware ESX
  • VMware vCenter
  • VMware VM
  • VMware vCenter v4
  • VMware vCenter v5
  • VMware vCenter v6

• Added an endpoint that automatically deploys the services brought by the host template.
• Added an endpoint to list Pollers.
• Added an endpoint to create Broker inputs.
• Added endpoints to create, delete, update and list/get Additional Connector Configurations.
• Added API endpoints to return the complete hierarchy for a given BA.
• Added configuration change logs for hostgroup endpoints.
• Added missing configuration change logs for host configuration.
• CLAPI now manages multiline values.
• Expired tokens are now deleted faster.
• You can now enable/disable API Tokens.
• You can now duplicate a locked command.
• Added an option that allows users to disable checks for a service whose host is down.
• You can now configure several more Broker loggers from the interface.
• Added last update time to widgets and enabled refresh directly from inside widgets.
• Allowed smaller dimensions for widgets through more responsive behavior.
• Optimized data payload required by widgets to retrieve resource data.
• When users select a resource, only the data that is linked to this resource is displayed in the lists for the other types of data. Irrelevant entries are filtered out.
• New widgets:
  • The “Web Page” widget displays a web page using its URL.
  • The “Clock / Timer” widget displays the time according to the selected time zone, or a timer.
• Metrics Graph widget:
  • Curves can now have a linear, smooth or step style.
  • Added multiple options to customize graphs.
  • Colors are now automatically adjusted to distinguish curves for the same metric name.
  • Enabled visualization using bar charts and stacked bar charts.
• Resource Table widget:
  • Added ticketing feature, by third-party provider.
  • Added the same action buttons as in Resource Status (Acknowledge, Downtime, Forced check).
  • Added filtering options by severity and by status type.
  • The “display view” options are now available inside the widget itself.
  • Added meta-services.
• Status Grid widget
  • Pictograms now show the type of the resource and its state (acknowledged, in downtime).
  • A colored banner now shows the resource’s state.
• Status Grid and Status Chart widgets
  • When users filter by service / service group / service category and choose to display the data by host, the tiles corresponding to the hosts are displayed correctly instead of displaying “no host found”.
• In the filter window, you can now filter by resource type.
• Users can now filter by host name in “view by host” mode.
• Removed autocomplete for credentials fields in administration pages.

Bug fixes

• Fixed access control for meta-service endpoint.
• Fixed access control for monitoring servers configuration endpoints.
• Fixed access control for notification configuration endpoints.
• Fixed access control for some v2 API endpoints.
• Fixed access control for some v2 API service configuration endpoints.
• Fixed an issue on ACL checks for Administration endpoints.
• Fixed an issue on ACL checks for Platform endpoints.
• [ACL] Fixed access rights for dashboard configuration endpoints.
• [API] Fixed access control for hosts configuration endpoints.
• [Graphs] Fixed an issue with MySQL 8 that occurred when users edited a curve definition.
• [Packaging] Fixed an issue that prevented centreontrapd from starting properly due to conflicting perl dependencies.

Direct link ↗

Enhancements

• vcpkg has been upgraded.

Bug fixes

• [Broker] Fixed an issue where cbd was storing old connections that no longer existed.
• [Broker] Fixed an issue where centreon-broker could lose monitoring data during database purge operations caused by a MariaDB 10.11.11 regression (empty error packets).
• [Centengine] Fixed time periods being applied only on exception days instead of their normal schedule.
• [Packaging] Added missing libcentreon_pb_bbdo.so.debug file to Collect .

Direct link ↗

Bug fixes

• [Broker] Fixed a crash caused by a dangling pointer that occurred when the cache file grew and was moved to a new location in memory.

Direct link ↗

Bug fixes

• [Broker] Fixed an issue that occurred when moving a host or a service to a different poller, causing it to be removed from the cache.
• [Centengine] Fixed an issue where using time period with an exception as a template for another time period caused the new one to only be active during the exception.

Direct link ↗

Bug fixes

• [Configuration] Unresolved/empty macros whithin macros are now ignored unless surrounded by {{ }}.

Direct link ↗

Bug fixes

• [configuration] Fixed an issue where the ‘$’ character in a macro was removed.

Direct link ↗

Enhancements

• [Broker] Enhanced cache reliability for stream connectors.
• [Configuration] Macros can now be used inside custom macros (recursive).

Bug fixes

• [Notifications] Fixed an issue where escalations would not be sent to the relevant users.

Direct link ↗

Enhancements

• Broker is now able to handle secure TLS connections.
• [CMA] The CMA agent can now retrieve the certificate automatically generated by the poller.

Bug fixes

• Fixed an issue occurring with the perl connector when plugin output was longer than 4096 bytes.

Direct link ↗

Bug fixes

• [CMA] Fixed an issue where peer name was not in the peer certificate, while correctly configured in the self-signed certificate.

Direct link ↗

Enhancements

• [Broker] If an SC write function does not return a boolean, the next write retry is delayed.
• [Configuration] Added a Broker output to handle script execution.
• [Engine] Engine is now able to generate & renew CMA certificates.

Bug fixes

• [Broker][Engine] Fixed an issue with unexpected notifications being sent for “UNKNOWN” services when a host status switches to “DOWN”.

Direct link ↗

Enhancements

• [CMA] Agent configuraiton - CMA Token is now mandatory in No TLS mode.

Bug fixes

• [Broker] Fixed an issue that resulted in an error log when removing a service from a service group.
• [Configuration] Fixed an issue that caused Engine to crash when trying to send a notification without contact address.
• [Configuration] Fixed an issue where some outputs wer truncated for CMA checks.
• [Configuration] Updated logrotate configuration to match packaging permissions.
• [Engine] Fixed an issue that allowed external command executions to segfault.
• [Engine] Fixed an issue where host severities were not removed from the resources table after deletion.
• [Resource status] Fixed an issue with commands not being displayed for CMA Windows services.

Direct link ↗

Enhancements

• [CMA] CMA will now take into account retry_interval and max_attempts.
• [CMA] Freshness check are now taken into account.

Bug fixes

• [Broker] Fixed an issue with RRD error messages being incorrectly added to the logfile.
• [Engine] Fixed an issue where parameters are not correctly inherited from templates.

Direct link ↗

Enhancements

• [BBDO2 sunset] Added BBDO 3.1 in Broker configuration dropdown.
• [Broker] Broker can now read and cache Engine configurations, eliminating redundant configuration transfers. When Engine starts, it checks if Broker already has the current configuration during negotiation. If the configuration is already known, Engine skips the transfer, significantly improving the negotiation process between Engine and Broker.
• Cbmod is no longer needed in the Engine configuration as it is automatically loaded when Engine starts.
• [Configuration] a dedicated whitelist block is now available for Centreon Monitoring Agent.
• [Credentials encryption] Broker is now able to handle encrypted credentials.
• [Credentials encryption] Engine is now able to check its encryption readiness.
• Enhanced configuration generation to handle Insecure TLS.
• Insecure TLS is now available as encryption mode in CMA.
• [gRPC API] GetHostgroups function return information about hostgroups.
• [gRPC API] GetTag function return information about Tag.
• [gRPC API] GetService function have been improved to return more information.
• Added a new function in the lua cache to access hostgroups alias.

Bug fixes

• AES 256 encryption keys are now automatically resized (zero-padded if too short, truncated if too long) instead of throwing an error when not exactly 32 bytes.
• cbmod is no longer needed in the Engine configuration as it is automatically loaded when Engine starts.
• [Collect] Fixed a regression where an engine command could not launch several checks at the same time.
• [Core] Fixed compatibility of Engine with older versions of Linux kernel.
• [Engine] Fixed an issue where parameters are not correctly inherited from templates.
• [Packaging] Fixed package dependency issue with centreon-broker-caching-sha2-password that could block a broker update.
• Fixed a segmentation fault in Engine that could occur if checks were still running when a shutdown was requested.
• Fixed Engine crash when deleting a host during downtime notification.
• “name” attribute is now managed in CMA Tokens.

Direct link ↗

Bug fixes

• [Broker] Fixed an issue where cbd was storing old connections that no longer existed.
• [Broker] Fixed an issue where centreon-broker could lose monitoring data during database purge operations caused by a MariaDB 10.11.11 regression (empty error packets).

Direct link ↗

Bug fixes

• [Broker] Fixed a crash caused by a dangling pointer that occurred when the cache file grew and was moved to a new location in memory.

Direct link ↗

Bug fixes

• Fixed an issue that occurred when moving a host or a service to a different poller, causing it to be removed from the cache.

Direct link ↗

Enhancements

• [Broker] Enhanced cache reliability for stream connectors.

Direct link ↗

Bug fixes

• Fixed perl connector issue that occurred when plugin output was longer than 4096 bytes.

Direct link ↗

Enhancements

• [Broker] If an SC write function does not return a boolean, the next write retry is delayed.

Direct link ↗

Bug fixes

• [Broker][Engine]Fixed an issue with unexpected notifications being sent for “UNKNOWN” services when a host status switches to “DOWN”.

Direct link ↗

Bug fixes

• [Broker] Fixed an issue with Broker that resulted in the message “could not delete membership of service to service group”.
• [Config] Updated logrotate configuration to match packaging permissions.
• [CMA] Fixed an issue where output of some CMA checks was truncated.
• [Packaging] Added logrotate dependency for Debian.

Direct link ↗

Enhancements

• [Configuration] Added insecure TLS connection mode to Agent configuration.

Bug fixes

• [Broker] Fixed issue on RRD error messages.
• [Engine]Fixed a crash after disabling a resource in downtime with notification to contacts.
• [Packaging] Fixed log permissions on collect log directories.

Direct link ↗

Enhancements

• [Engine] Added TLS insecure connection mode for CMA.

Bug fixes

• [Broker] Fixed a segfault on Broker that was occurring when Engine stopped or was restarted, when Engine’s version was older than 24.04.
• [CORE] Fixed compatibility of Engine with older versions of the Linux kernel.
• [Engine] Fixed a segmentation fault in Engine that could occur if checks were still running when a shutdown was requested.
• [Engine] Engine no longer crashes when a host is deleted while downtime notifications are processed.
• The “Name” attribute is now managed in CMA tokens.
• [Packaging] Fixed package dependency issue with centreon-broker-caching-sha2-password that could block a Broker update.

Direct link ↗

Bug fixes

• The Name attribute is now managed in CMA tokens.

Direct link ↗

Bug fixes

• [CORE] Fixed compatibility of engine with older versions of Linux kernel.

Direct link ↗

Enhancements

• New function in the lua cache to access hostgroups aliases.
• [CMA] Check timeout default value has been set to 120s in agent configuration.
• [CMA] Added token management for agent-initiated connection.
• [configuration] A dedicated whitelist entry is now available for Centreon Monitoring Agent.

Bug fixes

• [Resource status] Fixed issues on tags (filters on HG, HC, SG, SC).
• [Collect] Fixed a regression where an engine command could not launch several checks at the same time.
• [Collect] Fixed an issue with long checks that prevented Engine from stopping.

Direct link ↗

Enhancements

• Internal changes that enable new CMA communication modes.

Direct link ↗

Bug fixes

• [Broker] Acknowledgements are now handled for all types of BAs in BAM.

Direct link ↗

Enhancements

• [CMA] Improved error handling for syntax checks.

Bug fixes

• [Broker] Fixed some unnecessary errors that appeared in RRD logs following the upgrade to the new log engine in collect.
• [Broker] Fixed an issue where acknowledgements did not appear in the logs table.
• [Configuration] Fixed an issue where password parameters were incorrectly saved when creating several output-type stream connectors.

Direct link ↗

Enhancements

• [Broker] Added flapping state support for Resource Status.
• [CMA] Added gRPC logs to the agent and the OpenTelemetry engine module.

Bug fixes

• [Broker] Fixed a regression with host name escaping in the Graphite Broker output.
• [Broker] Fixed an issue where the wrong service state was restored when engine re-established its connection to broker after a disconnection.
• [Broker] Fixed Broker crash that occurred if only a graphite output was configured.

Direct link ↗

Enhancements

• [CMA] Added a native Health check for Windows & Linux.
• [CMA] Added a native Service check for Windows.
• [CMA] Added an option in Windows installer to use embedded plugins in case of offline execution.

Bug fixes

• [Engine] Fixed an issue where defining an icon for a service caused the interface to display information concerning another service instead.

Direct link ↗

Enhancements

• [CMA] Added a native CPU check for Windows & Linux.
• [CMA] Added native checks for Windows: Memory, Uptime and Storage.
• [CMA] Agent check scheduling has been optimized to avoid delay in case of check timeouts.
• [CMA] Fixed a listening issue occurring when using the “Poller initiated connection” option.
• [CMA] The Centreon Monitoring Agent and its installer are now signed.

Bug fixes

• [Broker] Adapted Broker parsing so as to avoid breaking a metric name ending with the ] character.
• [Broker] Fixed a typo in an SQL query.
• [CMA] Fixed a listening issue that occurred when using “Poller-initiated connection” mode.
• [Engine] Fixed errors in RRD logs that appeared following the upgrade to the new log engine in Collect.

Direct link ↗

Bug fixes

• [Broker] Adapted Broker to a new behavior of the MariaDB database concerning errors: Broker no longer fails to reconnect after an error.
• [CMA] Added a native CPU check for Windows & Linux.
• [CMA] Agent check scheduling has been optimized to avoid delay in case of check timeouts.
• [CMA] Centreon Monitoring Agent & the installer are now signed.
• [CMA] Fixed a listening issue when using “Poller initiated connection”.
• [Engine] Delivered the correct libraries for Collect, so as to avoid issues with template inheritance or Engine crashes.
• [Engine]Fixed an issue where a segmentation fault could occur when host relations were modified.

Direct link ↗

Bug fixes

• Delivered the correct libraries for Collect, so as to avoid issues with template inheritance or Engine crashes.

Direct link ↗

Enhancements

• Engine can now handle extra configuration files to complement/overload the centengine.cfg file so that custom configurations remain unchanged when the standard configuration is exported.
• Added a new centengine parameter (send_recovery_notifications_anyways) to force sending a recovery notification even when the resource is outside of its notification period. This aims at keeping third-party tools up-to-date at any time when they are fed notifications.
• The whitelist now works with all the commands executed by Engine, including notifications and event handlers.
• [Broker]The spdlog logger library has been mutualized for Engine and Broker, as well as the log files. This change will not impact Broker’s logs, but Engine will log all its messages (including broker-module’s messages) in centengine.log.
• [gRPC API] The GetHost function has been improved to return more information.
• [Packaging] Collect packages are now also available for Debian 12 (bookworm) ARM64 (for pollers on Raspberry Pi).

Direct link ↗

Bug fixes

• Fixed an issue where invalid data could crash the Autodiscovery module.
• Fixed an issue where configuration for centreon trapd could not be pushed on pollers.
• [ETL] Fixed a critical ETL failure path that resulted in empty reports and corrected calculation logic.

Direct link ↗

Bug fixes

• [ETL] Updated database scripts to ensure DB tables support metric names longer than 255 characters, preventing crashes during data processing.

Direct link ↗

Bug fixes

• [Config] Fixed an issue that caused application crashes when a service had no associated category. These services are now automatically assigned to a “NoCategory” dimension, just like hosts.
• [Packaging] The centreon-common package is no longer installed when installing centreon-gorgone.

Direct link ↗

Bug fixes

• Fixed an issue with partitioning and data duplication during the rebuild process.

Direct link ↗

Bug fixes

• [Packaging] Fixed an issue with the gorgoned logrotate configuration file.

Direct link ↗

Bug fixes

• [CONFIG] Updated the logrotate configuration to match packaging permissions.

Direct link ↗

Bug fixes

• [Gorgone] Fixed Gorgone whitelist to allow NRPE service discovery.
• [Packaging] Fixed an issue that cause an upgrade failure due to centreon-perl-libs being split into centreon-perl-libs and centreon-perl-libs-common.

Direct link ↗

Bug fixes

• [Packaging] Upgrade no longer fails because of centreon-perl-libs being split into centreon-perl-libs and centreon-perl-libs-common.

Direct link ↗

Enhancements

• [Gorgone] Added the ability to fetch configuration credentials from a vault.

Direct link ↗

Bug fixes

• Fixed an issue where configuration for centreon trapd could not be pushed on pollers.
• [ETL] Fixed a critical ETL failure path that resulted in empty reports and corrected calculation logic.

Direct link ↗

Bug fixes

• [ETL] Updated database scripts to ensure DB tables support metric names longer than 255 characters, preventing crashes during data processing.

Direct link ↗

Bug fixes

• [Config] Fixed an issue that caused application crashes when a service had no associated category. These services are now automatically assigned to a “NoCategory” dimension, just like hosts.

Direct link ↗

Bug fixes

• [Gorgone] Fixed issues with partitioning and data duplication during the rebuild process.

Direct link ↗

Bug fixes

• [Config] Updated logrotate configuration to match packaging permissions.
• [Packaging] Added logrotate dependency for Debian.

Direct link ↗

Bug fixes

• Fixed Gorgone whitelist to allow NRPE service discovery.

Direct link ↗

Bug fixes

• [Gorgone] Fixed centreontrapd configuration file permissions that were applied when exporting poller configuration.
• [Gorgone] Fixed a bug in MBI where hostnames with semicolons would break database insertion.
• [MBI] Fixed an issue where the ETL would never finish executing if some service templates were referencing themselves.
• [Gorgone] Gorgone now raises an error if the ETL configuration file doesn’t exist.

Security fixes

• [Gorgone] Added an option to restrict discovery commands that were too permissive.

Direct link ↗

Security fixes

• [Gorgone] Added option to disable bash interpolation in discovery commands.

Direct link ↗

Bug fixes

• [Compatibility] Fixed an issue preventing installation from being completed when database tables already existed.
• [Gorgone] Fixed an issue on Alma 9 where plugins were not installed because yum did not exist anymore.
• [Gorgone] Removed unnecessary error present at every first start of Gorgone.

Direct link ↗

Bug fixes

• [Gorgone] Removed an unnecessary error that was present at every first start of Gorgone.

Direct link ↗

Bug fixes

• Fixed a bug where the gorgone API could not use a password containing a UTF-8 character.

Direct link ↗

Bug fixes

• [Database] Adapted queries for MySQL8 compatibility.
• [Packaging] Fixed centreon-engine restart issue affecting pollers, caused by a missing service binary.

Direct link ↗

Bug fixes

• [Gorgone] Fixed a bug in Gorgone affecting platforms with thousands of hosts, where deploying the configuration failed and the connection with Gorgone was lost.

Direct link ↗

Bug fixes

• [Gorgone] centreon-engine and centreon-broker are no longer installed on MBI servers.

Direct link ↗

Enhancements

• [Gorgone] Whitelist errors now have an ERROR level in Gorgone logs.

Direct link ↗

Enhancements

• [CMA] Time periods are now correctly taken into account for check scheduling and freshness calculations.

Bug fixes

• [CMA] Fixed an issue where the agent failed to start with hostnames less than 5 characters long.
• [Packaging] Added missing libcentreon_pb_bbdo.so.debug file to CMA.

Direct link ↗

Enhancements

• [CMA] Installer now handles the upgrade of existing instances.

Bug fixes

• [CMA] Fixed the Swap value on Windows Server 2025 hosts.

Direct link ↗

Enhancements

• [Broker] Enhanced cache reliability for stream connectors.

Bug fixes

• [CMA] Fixed an issue with the certificate being saved in an incorrect location.

Direct link ↗

Enhancements

• [CMA] The CMA agent can now retrieve the certificate automatically generated by the poller.

Direct link ↗

Enhancements

• [CMA] A new “Host template“ parameter is available in CMA configuration, and used for Host registration.
• [CMA] Added a Linux script to ease agent download & deployment.
• [CMA] Added a Windows script to ease agent download & deployment.
• [CMA] File native checks can now trigger alerts on empty result set.
• [CMA] Improved wording for the outpute of the CMA installation script.

Direct link ↗

Enhancements

• [CMA] Full threshold format is now handled for all CMA native checks.

Bug fixes

• [CMA] Fixed issues with uninstaller signature and installer AGENTINSTANCE.

Direct link ↗

Enhancements

• [CMA] Added a native check to allow the exection of custom scripts.
• [CMA] Native checks - Windows - Services - added a filter for startup/service type and delayed services.
• [CMA] Token is now mandatory in No TLS mode.
• [CMA] Windows installer can now handle multiple instances of CMA on the same host.
• [Packaging] Added a RHEL 10 package for CMA.

Direct link ↗

Bug fixes

• CMA is now taking account retry_interval and max_attempts.

Direct link ↗

Enhancements

• [Credentials encryption] CMA is now able to retrieve encryption key & handle encrypted credentials.
• Enhanced configuration generation to handle Insecure TLS.
• Insecure TLS is now available as encryption mode in CMA.
• [CMA] Improved error handling for syntax checks.

Direct link ↗

Enhancements

• [CMA] The File native check now supports alert triggering on empty result sets, allowing you to detect missing files or empty directories using warning-status and critical-status conditions.

Bug fixes

• [CMA] Fixed an issue where the agent failed to start with hostnames less than 5 characters long.

Direct link ↗

Bug fixes

• Fixed the Swap value on Windows Server 2025 hosts.

Direct link ↗

Enhancements

• [Broker] Enhanced cache reliability for stream connectors.

Direct link ↗

Enhancements

• [CMA] Full threshold format is now handled for all CMA native checks.

Direct link ↗

Enhancements

• [Packaging] Provided a RHEL 10 package for CMA.
• [Packaging] Provided a Debian 13 package for CMA.

Direct link ↗

Enhancements

• [CMA] CMA installer and CLI wording have been harmonized to fit with new UI labels.

Direct link ↗

Enhancements

• [CMA] Added a native Files check for Windows & Linux.
• [CMA] Added TLS insecure connection mode for CMA.
• [CMA] CMA installer and CLI wording have been harmonized to fit with new UI labels.

Direct link ↗

Bug fixes

• Fixed an issue where no output was returned from Centreon plugins and custom plugins.

Direct link ↗

Bug fixes

• [CORE] Fixed compatibility of engine with older versions of Linux kernel.

Direct link ↗

Enhancements

• [CMA] Added a native Counter check for Windows.
• [CMA] Added a native Files check for Windows & Linux.
• [CMA] Added a native Task scheduler check for Windows & Linux.
• [CMA] Installer and CLI wording have been harmonized to fit with new UI labels.

Direct link ↗

Enhancements

• [CMA] Added a native Eventlog check for Windows.
• [CMA] Added a native Process check for Windows.
• [CMA] Added a No TLS connection mode. This mode is only active within a limited timeframe.
• [CMA] Improved error handling for syntax checks.

Bug fixes

• [CMA] Added debug.

Direct link ↗

Enhancements

• [CMA] The Centreon Monitoring Agent is now available with a Windows installer, which installs the service and deploys Centreon plugins on the host.
• [CMA] Added a silent mode (CLI) to the agent’s Windows installer.
• [CMA] Made Telegraf and Centreon Monitoring Agent commands compliant with Engine whitelists.

Direct link ↗

Bug fixes

• [Open tickets] Fixed “insufficient privileges” error occurring when opening a ticket from a custom view without notification rules access.

Direct link ↗

Security fixes

• This release contains security fixes. More details on our community platform The Watch.

Direct link ↗

Enhancements

• Updated Symfony components.

Bug fixes

• Fixed an issue where tickets were lost when custom variables were modified after ticket creation.

Direct link ↗

Enhancements

• [Performance] Improved ACL calculations by removing the dependency to an outdated class on legacy pages.

Bug fixes

• Resolved incorrect redirections to status pages when initiated from the Open ticket widgets.
• [EasyVistaRest provider] Fixed ticket creation errors for custom database setups.

Direct link ↗

Enhancements

• [ITSM] Ivanti ITSM is now officially supported.

Bug fixes

• [Services] Fixed an issue where moving a service between hosts would leave remains of the old configuration in some tables used by Open Ticket.
• [Performance] Improved ticket management performance in the Resource Table widget in dashboards.

Direct link ↗

Bug fixes

• [Dashboards] Resource Table widget - Fixed an issue occurring when the ticket ID is not a numeric value.
• [Dashboards] Resource Table widget - Fixed several issues occurring when using Easy Vista Rest API provider.

Direct link ↗

Enhancements

• [Custom Views] Optimized performance when retrieving ACLs in widgets.

Bug fixes

• [Custom Views] Open Ticket - Fixed filter on host categories.
• [Dashboards] Resource Table widget - Fixed issue preventing custom providers from being used for ticket management.

Security fixes

• [BREAKING CHANGE] [Open Tickets] Due to security concerns, it is no longer possible to define a custom command linked to a removed rule.
• [Open Ticket] For enhanced security, two new configuration parameters have been introduced: ‘SSL Verify Peer’ and ‘Certificate Authority Info’.

Direct link ↗

Enhancements

• [GLPI] Fixed group retrieval when using versions 9.5 and above.

Bug fixes

• [Open Tickets] Fixed an issue that exposed passwords when using EasyVista.
• [Open Tickets] Fixed an issue preventing ticket from being closed when the corresponding resource had its status changed since the opening of the ticket.
• [Translation] Added missing French translations.

Direct link ↗

Enhancements

• [Core] Updated PHP dependencies to 8.2 version.

Security fixes

• [Vulnerability] Fixed SQL injection in the Notification > Rules page.
• [Vulnerability] Fixed XSS vulnerability in the Configuration > Notification > Rules page.

Direct link ↗

Bug fixes

• [Open tickets] Fixed “insufficient privileges” error occurring when opening a ticket from a custom view without notification rules access.

Direct link ↗

Security fixes

• This release contains security fixes. More details on our community platform The Watch.

Direct link ↗

Enhancements

• Updated Symfony components.

Direct link ↗

Enhancements

• [Performance] Improved ACL calculations by removing the dependency to an outdated class on legacy pages.

Bug fixes

• Fixed an issue where tickets were lost when custom variables were modified after ticket creation.
• Resolved incorrect redirections to status pages when initiated from the Open ticket widgets.

Direct link ↗

Enhancements

• Ivanti ITSM is now officially supported.

Bug fixes

• Fixed an issue where moving a service between hosts caused duplicate configuration entries.
• [Performance] Improved ticket management performance in the Resource Table widget in dashboards.

Direct link ↗

Bug fixes

• [Dashboards] Resource Table widget - Fixed various issues with the Easy Vista Rest API connector.
• [Dashboards] Resource Table widget - Fixed an issue where the ticket ID field would be empty when the ticket ID was not a numeric value.

Direct link ↗

Enhancements

• [Open Ticket] For enhanced security, two new configuration parameters have been introduced: ‘SSL Verify Peer’ and ‘Certificate Authority Info’.

Direct link ↗

Bug fixes

• [Custom Views] Open Ticket - Fixed the ability to filter on host categories.
• [Dashboards] Resource Table widget - Fixed an issue preventing custom providers from being used for ticket management.

Security fixes

• [BREAKING CHANGE] [Open Tickets] Due to security concerns, the ability to define a custom command linked to a rule has been removed.

Direct link ↗

Enhancements

• [GLPI] Fixed group retrieval when using versions 9.5 and above.

Bug fixes

• Fixed an issue preventing ticket a from being closed when the corresponding resource had its status changed since the opening of the ticket.

Security fixes

• [Open Tickets] Fixed an issue that exposed the passwords when using EasyVista.
  • [Vulnerability] Fixed SQL injection in the notification rules.
  • [Vulnerability] Fixed XSS vulnerability in configuration notification rules.

Direct link ↗

Bug fixes

• [Packaging] Fixed a packaging dependency that could cause the platform to fail.

Direct link ↗

Bug fixes

• [Dashboards] Fixed an issue preventing non-admin users from opening tickets.

Direct link ↗

Security fixes

• [Security] Fixed extends-tag vulnerability in Smarty.

Direct link ↗

Bug fixes

• [Open Ticket widget] Fixed an issue preventing non admin users from opening tickets.

Direct link ↗

Bug fixes

• [Open Tickets widget] Fixed redirection to monitoring pages according to the value of the “use deprecated pages” option.

Direct link ↗

Bug fixes

• Fixed an issue with the GPG signing of the centreon-ha-common and centreon-ha-web RPM packages.

Direct link ↗

Bug fixes

• [Packaging] Added a dependency to the bc package.
• [Packaging] The centreon user can now reload cbd-sql and cbd together.

Direct link ↗

Bug fixes

• Fixed an issue with the GPG signing of the centreon-ha-common and centreon-ha-web RPM packages.

Direct link ↗

Bug fixes

• [Packaging] Added a dependency to the bc package.
• [Packaging] The centreon user can now reload cbd-sql and cbd together.

Direct link ↗

Bug Fixes

• [HA] Fixed an issue on cron for outdated token removal.

Direct link ↗

Compatibility

• Compatibility with other 24.10 components.

Direct link ↗

Enhancements

• Updated Symfony components.

Direct link ↗

Bug fixes

• [AWIE] Fixed an issue with the configuration import/export page that resulted in the “Uncaught ReferenceError: submitForm is not defined” message.

Direct link ↗

Security fixes

• [Security] Fixed an issue with the AWIE Export Module.
• [Security] Fixed an issue with CLAPI Import.

Direct link ↗

Bug fixes

• [Extensions] Fixed an issue on documentation links for extensions which were dont using versioning.

Direct link ↗

Enhancements

• [Core] Updated PHP dependencies to 8.2 version.

Direct link ↗

Enhancements

• Updated Symfony components.

Direct link ↗

Bug fixes

• [AWIE] Fixed an issue with the configuration import/export page that resulted in the “Uncaught ReferenceError: submitForm is not defined” message.

Direct link ↗

Security fixes

• [Security]Fixed an issue with AWIE Export Module.
• [Security] Fixed an issue with CLAPI Import.

Direct link ↗

Bug fixes

• [Extensions] Fixed an issue on documentation links for extensions which weren’t using versioning.

Direct link ↗

Security fixes

• [Security] Fixed extends-tag vulnerability in Smarty.

Direct link ↗

Enhancements

• Updated Symfony components.

Direct link ↗

Bug fixes

• [DSM] Fixed an issue with dsmd daemon being stuck on start.
• [Translation] Added missing French translations.

Direct link ↗

Security fixes

• [Vulnerability] Fixed an XSS vulnerability in the Extensions Dynamic Services Configure page.

Enhancements

• [Core] Updated PHP dependencies to 8.2 version.

Bug fixes

• [Packaging] SQL files are now correctly packaged on centreon-dsm.

Direct link ↗

Enhancements

• Updated Symfony components.

Direct link ↗

Bug fixes

• [DSM] Fixed an issue with dsmd daemon bieng stuck on start

Security fixes

• [Vulnerability] Fixed XSS vulnerability in the Extensions Dynamic Services Configure page.

Direct link ↗

Bug fixes

• [Packaging] SQL files are now correctly packaged for centreon-dsm.
• [Packaging] Updated permissions for DSM purge and cron files.

Direct link ↗

Bug fixes

• [Metaservices] Fixed several issues occurring when using MySQL 8.

Direct link ↗

Bug fixes

• [DSM] Fixed an issue where new pool configurations were disabled, without any possibility to enable them.

Security fixes

• [Security] Fixed extends-tag vulnerability in Smarty.

Direct link ↗

Compatibility

• Compatibility with other 24.10 components.

Direct link ↗