Bisschen nervig, dass ich #ICINGA nicht unter rocky linux installieren "kann" weil es hinter der PayWall steckt.

#BSI WID-SEC-2025-1149: [NEU] [hoch] #Icinga: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Icinga ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1149

A customer recently reached out to us that their #Icinga UI no longer showed the embedded #Grafana visualizations.

The "grafana" module for Icingaweb2 has undergone a lot of changes in the past, including a fork and support for newer #PHP versions.

Thanks to our #troubleshooting the reason was quickly identified: A major release upgrade of Grafana caused a breaking change in the dashboard UIDs.

In the latest post on our Infiniroot #blog we share our analysis and fix.

https://www.infiniroot.com/blog/1487/embedded-grafana-visualization-not-loading-icingaweb-ui-dashboard-not-found

Announcing Icinga for Kubernetes v0.3.0

https://icinga.com/blog/announcing-icinga-for-kubernetes-v0-3-0/ #Monitoring #kubernetes #Releases #Icinga

Observability vs Monitoring: Enhancing, Not Replacing

https://icinga.com/blog/observability-vs-monitoring-enhancing-not-replacing/ #observability #monitoring #opensource #General #Icinga

All our managed #Kubernetes clusters are monitored and fully integrated into our #Icinga core #monitoring.

When we recently got a cluster alert, we first suspected one or more cluster nodes running into a "node pressure" situation.

But as the analysis went on - it turned out to be a Kernel bug!

On our Infiniroot blog, we share our #troubleshooting and analysis steps in our latest post.

Happy Weekend. May your clusters stay online. ☀️

https://www.infiniroot.com/blog/1484/kube-proxy-pod-crash-netfilter-bug-linux-kernel

We've had an article published on the Icinga blog:

https://icinga.com/blog/how-to-pick-the-correct-metrics-for-your-monitoring/

Check it out #Icinga #Monitoring

@da_667 I would rather consider #Icinga oder #Checkmk instead of Nagios.

Is there an on-premise, open source option for a monitoring/telemetry platform comparable* to say New Relic or Dynatrace with an approachable query language?

Is Prometheus+Grafana pretty much it?

Simpler the better, approachable for a casual user (i.e. curious non-technical tenants) would be great.

* Caveats for "comparable" apply!

#Linux #RunBSD #telemetry #OpenTelemetry #NewRelic #Dynatrace #Datadog #PlatformMonitoring #Monitoring #DevOps #HomeLab #soho #infrastructure #Network #CloudNative #CNI #FOSS #FLOSS #prometheus #grafana #zabbix #icinga #nagios

Security Release #Icinga Web v2.11.5 and 2.12.3, Icinga Director 1.10.4 and 1.11.4, Icinga Reporting 1.0.3

#adminlife #opensource
https://icinga.com/blog/icinga-security-releases-web-q1-2025/

Icinga DB fails after update - https://thomas-leister.de/en/icinga2-db-fails-after-update/

#icinga

Hm....

host packages.icinga.com
packages.icinga.com has address 185.233.189.126
packages.icinga.com has IPv6 address 2a02:ed80:3:1700:f816:3eff:fec5:887b

vs.

https://github.com/Icinga/icinga-packaging/issues/93

Because we like open issues.

#icinga

#icinga2 #icinga "You say “Eee-Chingaa”, I say “Aye-Singa” – but how do the Zulus say it? We consulted a couple Zulu speakers and even received a pronunciation guide from Megan Wells to help us all out. As she told us:
“The I in Icinga is actually a Romanized representation of the Zulu click. The easiest way to approximate the click is by putting your tongue behind your top teeth and pulling it down, kind of like a tsk-tsk noise. The vowels on either side of the click are “eee” noises, like in “see”. There is no hard “g” sound in Icinga – the “ng” is pronounced like the end of “sing”. Finally, the “a” is pronounced like the “a” in “father”."
https://icinga.com/blog/archive/a-lesson-in-zulu-icinga/

#Icinga is an open-source computer system and network monitoring application.
Except for users of #RedHatEnterpriseLinux and #RockyLinux and #AlmaLinux must pay a subscription to use #Icinga packages.
Free alternatives:
#Checkmk
#Netdata
#Centeron ...

There might be a situation where you forgot (to document 🤓) the password for the icingaadmin user in #Icinga 's UI (Icingaweb2). With access to the backend database you can easily change the password - as a last resort.
https://www.claudiokuenzler.com/blog/1464/how-to-change-icingaweb2-password-icingaadmin-user-database

Ich war nie ein großer Freund von #checkmk, aber seitdem ich mal mit #zabbix arbeiten musste geht's sogar.

Lies: Ich kann den Hype um Zabbix nicht nachvollziehen. Das Ding mag toll sein, aber mir erschließen sich viele Dinge einfach im Gegensatz au #checkmk oder #icinga nicht.

#BSI WID-SEC-2024-3429: [NEU] [hoch] #Icinga: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Icinga ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3429

An alle #icinga Nutzer: Denkt dran, dass ihr heute (12.11.2024) eure Icinga 2-Instanzen updaten wollt.

To all #icinga users: You should update ALL of your Icinga 2 instances today (2024-11-12).

https://icinga.com/blog/2024/11/04/icinga2-security-pre-announcement/

As announced by the #Icinga team in August, the key, which is used to sign the icinga2 packages, has expired.

Here's how to renew the repo key on #Debian and #Ubuntu Linux systems.

https://www.claudiokuenzler.com/blog/1452/how-to-renew-expired-icinga2-repository-key

Veranstaltungshinweis: Der Countdown läuft und das Programm steht fest! Vom 19.-21-11.2024 findet in Nürnberg die OSMC statt. Verpasse nicht die Vorträge zu #Observability oder #Cloudnative Security mit international renommierten Sprechern von Red Hat, NGINX oder den Grafana Labs. Natürlich gibt es auch News zu #Icinga von Projekt-Mitbegründer Bernd Erk.

Am besten sicherst du dir gleich einen der wenigen noch verfügbaren Plätze: https://osmc.de/ticket-details/