27. 09. 2024
Downloads / Release Notes, NetEye, Unified Monitoring
01. 08. 2024
Mattia Codato
Downloads / Release Notes, NetEye, Unified Monitoring
NetEye 4.37 Release Notes
Welcome to version 4.37 of our NetEye v4 Unified Monitoring Solution. Santa Maddalena in Bolzano greets you with its picturesque vineyards, the birthplace of the renowned red wine Magdalener. Situated on a hillside, this charming village is part of the famous South Tyrolean Wine Road, a route that offers a delightful journey through one of the region’s most celebrated wine areas. In the login picture, you can catch a glimpse of Bolzano, and if you look closely, you might notice the Renon cable car, an iconic feature connecting the city to the Renon plateau.
General
NetEye installation
We are thrilled to introduce a major enhancement in NetEye 4.37: the parallelization of key installation scripts. This significant improvement is designed to streamline and accelerate the NetEye installation process, making it more efficient and time-saving.
Additionally, we have improved the NetEye User Guide, which now includes dynamically generated images to further assist users in understanding how the parallel execution of the NetEye procedures is run.
This update represents the initial phase of a broader, long-term strategy to continually optimize our procedures.
Monitoring – Detection
Tornado Iterator Node
The feature continues our journey into improving Tornado. With NetEye 4.37 we made a huge step forward and introduced the first new node into the Processing Tree since the beginning of Tornado: the Iterator Node. This new node allows you to iterate over parts of the Event, effectively splitting it into multiple Events and processing them. This greatly improves the ergonomics for certain webhook events, that can contain bulk requests.
Together with the introduction of this new node, we also took the chance to overhaul the configuration layout on the filesystem to disambiguate the parsing process and make it more suitable for future changes. The config will be automatically migrated for you, however the layout is not fully compatible with the old layout.
To read more about the Iterator node, check out the dedicated section in the user guide. To learn more about the breaking changes of the config layout, please check out breaking changes.
Tornado Testing – Error Reporting
We have improved the Test Events process to show errors that occurred during each test run, making it simpler for users to find problems with Tornado’s configuration.
In the Test Results tab, errors will now appear before triggered actions and extracted variables, each with an explanatory message containing the cause of the error. Additionally, just like how extracted variables and triggered actions are handled, clicking on each error will make the interface scroll and highlight the specific action or extractor that raised the exception.
For more details about these new features, refer to the NetEye User Guide.
Removal of Tornado Legacy and Event Handler modules
The Tornado Legacy and the Event Handler modules were deprecated starting from NetEye 4.32 and have been completely removed in NetEye 4.37 since all their functionalities are now integrated into the Tornado module.
It is essential to migrate all Event Handler events processing configurations to Tornado before proceeding with the upgrade. For more details please refer to the NetEye User Guide.
SIEM – Log Management
Upgrade of Elastic Stack to version 8.14
To allow SIEM users to get the latest features and bugfixes brought by Elastic, NetEye 4.37 upgrades the component of the Elastic Stack from version 8.11.3 to version 8.14.3. Please note that the new Elastic version also brings important security fixes.
To have some highlights on the new functionalities brought by the new version, you can refer to the blog posts Elastic Stack 8.12, Elastic Stack 8.13, and Elastic Stack 8.14.
For the full set of improvements and bug fixes, please refer instead to the official release notes of Elasticsearch, Kibana, Logstash, Beats, and Elastic Agent.
APM – User Experience
Alyvix
Multitenancy enabling
In this NetEye version, Multitenancy in Alyvix is now automatically enabled. Please make sure to update and migrate all your Alyvix nodes to the new Multitenant-compliant version before upgrading, as support for older versions is no longer provided.
More information about the Multitenancy migration procedure can be found in the NetEye User Guide.
Alyvix Tenant Viewer
In previous releases, we have implemented Multitenancy in the NetEye Alyvix module along with the Tenant Admin role. This enhancement enables administrators to provide users with more specific access, limiting their privileges to certain tenants. However, there are scenarios where administrators may need to grant users access to particular test cases while safeguarding sensitive settings.
To address this need, NetEye 4.37 introduces the Tenant Viewer role. This role allows users to view nodes, sessions, and test cases of a tenant without the ability to create or modify them.
For detailed instructions on configuring the Tenant Viewer role, please refer to our NetEye User Guide!
NetEye User Guide
Tornado – Elasticsearch Actions
In order to clarify the procedure of creating an Action to send the extracted data to Elasticsearch outside of NetEye, a default authentication method was specified, as well as how to define a specific authentication method if needed. For more details please consult Tornado Actions.
Mattia Codato
Software Developer - IT System & Service Management Solutions at Würth Phoenix
Author
Latest posts by Mattia Codato
14. 11. 2024
Bug Fixes
NetEye 4 – Security Advisory
12. 09. 2024
Development, DevOps
Publish NPM Package to GitHub Packages Registry with GitHub Actions