Is it possible to add Geo IP information automatically to my events even if it’s not present in the original log? How can I automatically decode a URL to dissect all its components? How can I convert a human readable byte value (e.g., 1KB) to its value in bytes (e.g., 1024) so I can use…
Read MoreNetEye SIEM is a very powerful tool that allows you to ingest logs from many different sources. However, by default it does not ingest the ssh-login attempts on the NetEye Servers themselves, nor does it check the integrity of important configuration files. In this blog post I will describe a procedure to configure an Auditbeat…
Read MoreIn a previous post we talked about how in NetEye we migrated all the Tornado communications from direct TCP to NATS. Since then, we’ve extensively and successfully adopted NATS as a communication channel for many of the components present in NetEye. As often happens when approaching new technologies, the initial straightforward approach did not turn…
Read MoreWe fixed an issue related to the logs written by Logstash. For NetEye 4.14 we updated: logstash* packages to version 7.6.2_neteye3.9.1-1
Read MoreRelease Date: September 30, 2020 Welcome to version 4.14 of our NetEye v4 Unified Monitoring Solution. We leave the summer behind us and say hallo to the autumn with a beautiful panorama from Alpe di Siusi/Seiseralm towards the snow-capped peaks of Sassopiatto/Plattkofel and Sassolungo/Langkofel, ranging towards the distant peaks of Cir, Puez and Piz Duleda…
Read MoreIn this article I’ll talk about Icinga DSL and how it can be extremely useful if you want to compute thresholds. Our goal today is to be able to change certain monitoring thresholds when some parameters change. Example The example I propose is the following: I’m a system administrator, and I would like the warning…
Read MoreAn RPM (RedHat Package Manager) package is the file format used by RHEL and CentOS, and their package manager yum (now called dnf). Since NetEye is based on CentOS, we use this standard package manager for distribution. How an RPM is constructed is defined in so-called spec files. In this blog post I’m going to…
Read MoreDistributing software content and making it available to users is not an easy task. First, you can have many different types of content like RPMs, ISO files, Python packages, and so on and so forth. And then, repositories often change. In the R&D team, we’re always implementing new features and fixing bugs, which in other…
Read MoreBeginning with GLPI version 0.83 a very useful plugin to record SIM card data was available. The plugin was created by Walid Nouh and then updated by Anthony Piesset and Thierry Bugier Pineau, and was very convenient for keeping track of company SIM card data. In addition to the specific data of the SIM like…
Read MoreIn the last few weeks, we collaborated with the Icinga2 developers to create a new powerful API, called “Execute Command“. The main purpose of this new API is to execute specific commands on a node by sending the request to the parent node. This is useful when the user cannot reach the desired node (an…
Read MoreWe fixed an issue related to the eventhandler/icinga2 cluster resources relocation. For NetEye 4.13 we updated: icinga2* packages to version 2.11.5_neteye1.21.1-1
Read MoreAs already mentioned in my previous Blog Post, I would like to present our Design System project, based completely on Vue.js. It’s not just a modern UI component library. The whole purpose of a Design System is to define the design principles, style guide, patterns, content tone, and the rules and specifications of “reusable” components….
Read MoreWe fixed an issue in the Log Analytics GUI (Kibana) that was caused from a URL change. If the user saved a bookmark for a dashboard, the link was not working anymore. Now the old links are working again. For NetEye 4.13 we updated: icingaweb2-module-kibana and icingaweb2-module-kibana-autosetup to version 1.10.2-2 neteye-setup to version 1.55.0-2
Read MoreDear EriZone customers! Some of your EriZone VMs are still working on CentOS 6, which will reach its End of Life on November 30th, 2020. This means that no new security or bugfix updates will be released after this date. You can check this by running the command: rpm -q centos-release which will tell you…
Read MoreWe fixed an issue in the Tornado GUI, for which it was possible to create and deploy a Filter with a space in the name from the GUI, which would cause Tornado to fail to restart. For NetEye 4.13 we updated: tornado, tornado-autosetup, tornado-common, tornado-neteye-config, tornado-rsyslog-collector-logmanager to version 0.39.8-1 icingaweb2-module-tornado, icingaweb2-module-tornado-autosetup to version 0.22.3-1
Read More