OpenNMS Meridian Release Notes

org.opennms.newts.nan_on_counter_wrap: If you are using Newts, returning NaN when a counter-wrap is encountered now defaults to true. If you relied on the old behavior, you can change it back by setting org.opennms.newts.nan_on_counter_wrap=false in a file in opennms.properties.d.

Event parameters have been moved to their own table, rather than being embedded (preformatted) in the events table. If you have a large number of events and/or event parameters in your database, the conversion while running install may take as long as an hour or even more. It is recommended that you archive and delete old events you do not need anymore before upgrading.

NMS-9303: Deprecated Capsd and Linkd event definitions are removed. Otherwise unused event definitions are also cleaned up and removed from the code and configurations. For a detailed list of all removed events see NMS-9303.

Elasticsearch 1 API: The old Elasticsearch API has been removed in favor of the Elasticsearch ReST plugin, which should support most Elasticsearch API versions. Instructions on configuring the Elasticsearch ReST plugin are available in the Administrators Guide.

Property format change of opennms.alarmTroubleTicketLinkTemplate: Originally the opennms.alarmTroubleTicketLinkTemplate defined in $OPENNMS_HOME/etc/opennms.properties requires the full <a href="…​">${id}</a> link to be configured. This is changed to the ticketer system url, e.g. https://issues.opennms.org/browse/${id} instead of <a href="https://issues.opennms.org/browse/${id}">${id}</a>. If the opennms.alarmTroubleTicketEnabled is true then the opennms.alarmTroubleTicketLinkTemplate must be updated as well in order to not break the link to an external ticketing system on the Alarm Details Page.

Event parameters: There are a few side-effects of the event parameter changes.

Changes to TCPAddress and UDPAddress format in eventd-configuration.xml: When Eventd was converted to use Camel under the covers, the format for listening on all interfaces changed from a wildcard (*) to 0.0.0.0. Note that despite looking like an IPv4 format, the JVM interprets 0.0.0.0 as listening on all interfaces, IPv4 and IPv6.

Minion: OpenNMS Meridian now supports running Minions.

IBM Tivoli Event Integration Facility: Support has been added to bridge EIF events into OpenNMS Horizon. (more details)

Asset Topology Provider: The Asset Topology Provider generates a GraphML topology based on node metadata including asset fields. (more details).

Alarm Sounds: The web UI can now optionally flash and play an alert sound when alarms are created and optionally updated. (more details).

ReST Updates: A new experimental ReST API (/opennms/api/v2) has been enabled which supports JEXL.

The topology UI now supports scriptable vertex status.

Alarm Northbounders: There are new alarm northbounders for running arbitrary BSF scripts or forwarding to Drools.

Web UI: It is now possible to customize the date format used in the UI. You can configure it by overriding the org.opennms.ui.datettimeformat property in opennms.properties.

Hawtio: Hawtio is now included as an optional webapp package (opennms-webapp-hawtio) for convenience.

IFTTT: Support has been added for triggering IFTTT events based on alarms.

IBM EIF

IETF DLSW

IETF DOCSIS

Other IETF traps

The Karaf OSGi container has been upgraded from 2.x to 4.1.5.

The IPLIKE C and Pl/pgsql versions have been cleaned up and normalized to work the same between implementations.

Many ActiveMQ/Camel/Kafka/etc. RPC-related APIs have been cleaned up and improved.

Much of the data collection infrastructure has been updated and cleaned up as part of adding and improving Minion support.

Asset addresses are now resolved to coordinates during provisioning, rather than at runtime.

A number of improvements have been made to RADIUS support.

It is now possible to reload Drools configuration without restarting OpenNMS.

Many improvements were made to Enlinkd, especially in the bridge discovery code.

Drools has been updated to 7.x. It should be backwards compatible with existing 6.x-based Drools configurations.

Many other small enhancements and fixes for the topology UI.

Jetty 9.4.38 security issues CVE-2021-28164, CVE-2021-34428 and CVE-2021-28169 (Issue NMS-13449)

CVE-2020-13956: Update commons-httpclient to 4.5.13 (Issue NMS-13360)

CVE-2017-5929: bump logback-classic version to latest (Issue NMS-13361)

IP interface link in Response Time graph page is broken (Issue NMS-13158)

Location aware Requisitions from DNS (Issue NMS-13278)

Apache Commons IO Security Update: CVE-2021-29425 (Issue NMS-13279)

CVE-2020-27223: Jetty DoS vulnerability (Issue NMS-13201)

Minion SNMPv3 trap configuration query is done every 60 seconds (Issue NMS-13217)

Change Jetty default settings to eliminate TLS 1.0 and TLS 1.1 support (Issue NMS-10256)

Newts Cache priming flag is inverted (Issue NMS-13156)

Dependabot: Upgrade Apache POI to 3.17 (CVE-2017-12626) (Issue NMS-13161)

JEXL expression handling updates (Issue NMS-13103)

RRD files for SNMP data are not created until a Service Restart (Issue NMS-12974)

CVE-2020-27216: Jetty webserver vulnerability (Issue NMS-13009)

Snmp Interface Poller is not using location specific SNMP Config (Issue NMS-12902)

Update Copyright notice for 2020 (Issue NMS-12933)

Slack-compatible notification strategies expect "url" for switch name, should be "-url" (Issue NMS-10552)

Can’t install Horizon on Ubuntu 20.04 LTS (Issue NMS-12693)

Wildcard certificate rejected after upgrade (Issue NMS-12805)

SslContextFactory needs to be changed to SslContextFactory.Server in jetty.xml (Issue NMS-12847)

Support for optional snmpTrapAddress varbind needs documenting (Issue NMS-12795)

RRD-to-Newts Converter doesn’t handle fully-overlapping RRAs (Issue NMS-12835)

AbstractSnmpValue.allBytesDisplayable() IndexOutOfBound Exception (Issue NMS-7547)

RRD-to-Newts converter only handles AVERAGE RRAs (Issue NMS-12722)

dependency commons-beanutils 1.8.3 vulnerability (Issue NMS-12757)

Reduce Docker container image size (Issue NMS-12284)

Bump Docker base dependencies in build-env and OCI artifacts (Issue NMS-12699)

upgrade to latest Jetty security/bug fixes (Issue NMS-12743)

SystemExecuteMonitor fails with exit code 6 (Issue NMS-12564)

Reloading the Pollerd daemon causes multiple nodeDown messages (Issue NMS-12681)

Add an example for SystemExecuteMonitor into the docs (Issue NMS-12568)

Authenticated RCE vulnerability via ActiveMQ Minion payload deserialization (Issue NMS-12673)

Security issue disclosures, 31 Jan 2020 (Issue NMS-12513)

Drools working memory facts are not restored properly on engine reload (Issue NMS-12586)

Confd download fails silently on Docker install (Issue NMS-12642)

Backport CircleCI pipeline to foundation-2018 (Issue NMS-12476)

The Karaf poller:test command is not location aware (Issue NMS-12460)

NPE while compiling a MIB (Issue NMS-12472)

Cannot process SNMPv3 Informs due to random Engine ID associated with users (Issue NMS-12473)

Backport date/time format fixes to Meridian 2018 (Issue NMS-12514)

HQL Injection (Issue NMS-12572)

Cannot define a specific layer in topology app URL (Issue NMS-12431)

Syslog incorrect dates being parsed into database (Issue NMS-10605)

Cannot use poller:poll karaf command with WsManMonitor through Minions (Issue NMS-12365)

Upstream Drools Bug: From with modify fires unexpected rule (Issue NMS-12367)

"Page Not Found" in alarm-list when choosing number of alarms in dropdown-list (Issue NMS-12379)

Elasticsearch event forwarder manipulates in-flight event (Issue NMS-12390)

Listing monitoring locations from the administrative WebUI is not working (Issue NMS-12377)

Availability boxes on node pages including sub pages differ (Issue NMS-12321)

"Graph all" fails with 'Request Header Fields Too Large' error (Issue NMS-8712)

No class found exception in OSGi for org.osgi.service.jdbc.DataSourceFactory (Issue NMS-9341)

Updating external lists referenced by include-url requires restart OpenNMS (Issue NMS-10071)

Telephone PIN Field in User Details is Misplaced (Issue NMS-10073)

Cannot change the type of a scheduled outage (Issue NMS-12255)

Short outages are not visible in Availability-Bar (Issue NMS-12262)

vmwarereqtool freezes and never return to the prompt after is executed (Issue NMS-12265)

On the scheduled outage UI, the day is displayed as null for weekly schedule (Issue LTS-233)

Using special characters on the scheduled outages name breaks the UI (Issue LTS-234)

DNS Requisition import fails if location is specified (Issue NMS-11748)

Drools engine hangs on shutdown (Issue NMS-12201)

Improve diagnostics and resiliency of JMS RPC (w/ embedded ActiveMQ) (Issue NMS-12222)

KSC Reports search box on home page is case sensitive (Issue NMS-12137)

Add a command to show configuration diffs (Issue NMS-12129)

Timeline missing for service names including slashes (Issue NMS-12097)

Memory Leak on Drools while reloading config (Issue NMS-10678)

Node detail page renders with no content when invalid node ID specified (Issue NMS-10679)

Apparent memory leak in JMX collector, possibly restricted to "weird" JMX transports (Issue NMS-10684)

CVE-2018-20433: XXE Vulnerability in c3p0 < 0.9.5.3 (Issue NMS-10694)

Memory leak in WS-Man (Issue NMS-10696)

Jetty HTTPS selectors can become unresponsive following CancelledKeyException (Issue NMS-10701)

Reflected XSS vulnerability in notification/detail.jsp and outage/detail.htm (Issue NMS-10707)

Cannot run Minion as non-root (Issue LTS-231)

ROLE_PROVISION doesn’t work on the UI when the ACL feature is enabled. (Issue NMS-9786)

Search on KSC Reports page in WebUI does not work (Issue NMS-10416)

Incorrect date formatting in send-event.py (Issue NMS-10602)

The MIB Compiler is unable to parse certain MIBs (Issue NMS-10609)

ArrayIndexOutOfBoundsException during error handling in SNMP MIB Compiler (Issue NMS-10647)

When editing a surveillance category from Admin flow, lists of nodes are not sorted by node label (Issue NMS-10654)

Karaf shell history thrown out with bathwater on upgrade (Issue NMS-10664)

Improve test coverage of SNMPv3 traps and informs (Issue NMS-10630)

Allow the "step" (or interval) to be referenced from a Measurement API expression (Issue NMS-10633)

"Event text contains" should search beyond eventlogmsg (Issue NMS-8444)

Collection results via Minion is limited to MAX_INT (Issue NMS-10516)

JDBC via Minion fails to find 3rd party classes (Issue NMS-10559)

Poor performance when using filters in the Measurements API (Issue NMS-10589)

Update webapp copyright dates to 2019 (Issue NMS-10591)

Bad response from SNMP agent leads to infinite loop in SNMP tracker (Issue NMS-10621)

Upgrade to Jetty 9.4.12 (Issue NMS-10558)

JDBC collector event reason provides no useful information (Issue NMS-9633)

syslog events are creating notifications and disregarding rules in place (Issue NMS-10486)

Node page very slow to load for nodes with more than 1000 events (Issue NMS-10506)

SNMP configuration UI should select location "Default" by default, not the first location alphabetically (Issue NMS-10514)

Wallboard URLs with board name should be permalinks, but return "Nothing to display" instead (Issue NMS-10515)

Event parameters table have strong limits for the columns (Issue NMS-10525)

Cross-Site Scripting: Reflected (Issue NMS-10546)

Cross-Frame Scripting (Issue NMS-10547)

syslog parsing of messages without a year will sometimes infer the wrong year (Issue NMS-10548)

BestMatchPingerFactory returns NullPinger when better options are available (Issue NMS-9659)

When selecting a vertex which is neither visible nor in focus the ui state is stuck (Issue NMS-10451)

Building the menu takes forever if a visible node has an invalid ip address set (Issue NMS-10452)

"Use Default Focus" may not show the "add nodes manual" indicator if "getDefaults().getCriteria()" returns empty list rather than null (Issue NMS-10453)

Kafka Producer: Sync timing issues cause erroneous deletes (Issue NMS-10474)

When using the events:stress command, the node-id or interface passed as parameters are ignored when using jexl (Issue NMS-10475)

Alarm Dashlet CriteriaBuilder In-Restriction not working (Issue NMS-10479)

Performance problems with the Topology Map on large networks (Issue NMS-10369)

Find out why intial loading of the topology map takes so long, fix for CDP (Issue NMS-10398)

Apply initial loading improvements to IsIs, lldp, ospf protocols (Issue NMS-10439)

Allow PostgreSQL 11.x (Issue NMS-10450)

Support Additional EIF Protocol Version (Issue NMS-10454)

Meassure and improve performance of Interface loading and mapping (Issue NMS-10459)

Meassure and improve performance of Cdp/Lldp/IsIsElement loading (Issue NMS-10487)

Other classes that use Http (Issue NMS-10379)

Sink API drops messages when there is no connectivity with Kafka (Issue NMS-10395)

Discovery UI should not allow selection of Minions as Foreign Source (Issue NMS-10400)

Find out why selecting a node takes so long in a big topology (Issue NMS-10419)

Typo in BSFMonitor Documentation (Issue NMS-10428)

Default Metaspace configuration is insufficient (Issue NMS-10437)

Improve performance of node search (Issue NMS-10445)

Change eventconf for newSuspect to include location name in logmsg (Issue HZN-814)

Be able to use Proxy for any Monitor or Collector that uses HttpClient (Issue NMS-9710)

Detect and Attempt to Restart Failed Drools Engines (Issue NMS-10363)

Wrong data type for certain Cassandra JMX counters (Issue NMS-10352)

Cannot override TTL when running the Karaf Command collections:collect through Minions (Issue NMS-10367)

Erroneous INFO-level log messages during every forced node rescan (Issue NMS-10370)

Wrong JMX MBeans for minions (Issue NMS-10372)

find-java.sh doesn’t understand newer JDK output (Issue NMS-10401)

int overflow in InstallerDb causes bamboo failures (Issue NMS-10402)

Be able to use Proxy for any Monitor or Collector that uses HttpClientWrapper directly (Issue NMS-10312)

Be able to use Proxy for any Monitor or Collector that uses HttpClient via UrlFactory (Issue NMS-10313)

Improve concurrency in Vmware Connection Pool (Issue NMS-10373)

Minions without nodes should show "unknown" status (Issue NMS-10338)

navbar.ftl not rendering (Issue NMS-10342)

add polling interval definition on service UI (Issue NMS-9747)

Improve CDP topology calculation performance (Issue NMS-10317)

Memory related env-variables from /etc/sysconfig/minion are not honored (Issue NMS-10332)

Manage Minions page should link to the node for the minion (Issue NMS-10296)

maxRetCode in HttpDetector does not work (Issue NMS-3974)

VMWare-Center-Monitoring make for every virtual machine a login/logout (Issue NMS-8204)

bridge topology is wrong on nodelink.jsp (Issue NMS-8295)

The ReST API used to return XMLs with namespace, and now it doesn’t (Issue NMS-8524)

Content-Type tag wrong in emailed reports (Issue NMS-9027)

The upgrade task for magic-users.properties fails because of the read-only attribute (Issue NMS-9267)

Topology on Map is not properly displayed (Issue NMS-9288)

Exceptions in Bridge Discovery (Issue NMS-9557)

Config-tester not validating varbind matching in event files (Issue NMS-9821)

Wrong initial message displayed on AngularJS based tables. (Issue NMS-9932)

Home Page Map does not display node details (Issue NMS-10008)

Asset record is not being updated with user name that performed the update (Issue NMS-10087)

wrong statement in event description for serviceDeleted (Issue NMS-10148)

Radius Login Problem (Issue NMS-10212)

Trapd does not validate config against XSD (Issue NMS-10242)

Drools correlation engine do not always respond to targeted reloadDaemonConfig events (Issue NMS-10257)

newSuspect events do not get processed when they reference a missing system id (aka distpoller) (Issue NMS-10261)

Change in JMS NBI Date Format (Issue NMS-10282)

NoClassDefFoundError for net/sf/json/JSONSerialize with the JSON collector on Minion (Issue NMS-10286)

DefaultProvisionService logs noisily for monitored service having state "N" (Issue NMS-10291)

Doughnut chart shows certain closed outages as "current" (Issue NMS-10293)

KSC Report Changes Destroys Existing Reports (Issue NMS-10309)

Minions can’t be deleted from minion menu (Issue NMS-10321)

Remove Telemetryd from the configuration files to avoid confusions (Issue LTS-223)

Release notes in Help / Support links to 2015 (Issue LTS-214)

UI stack trace is truncated (Issue NMS-7555)

Add Ironport AsyncOS Mail Gateway Events (Issue NMS-9794)

Make hawtio available for OpenNMS as installable RPM/DEB (Issue NMS-9858)

Upgrade Drools to 7.x (Issue NMS-9923)

Subsume "Event Configuration How-To" from wiki into admin guide (Issue NMS-9926)

Can’t receive SNMP v3 Trap (Issue NMS-10009)

Enhance AlarmPersisterImpl to support updating acknowledgment values on reduction (Issue NMS-10067)

Normalize date formats across the WebUI (Issue NMS-10072)

Support customizing the default time zone when parsing dates in syslog messages (Issue NMS-10164)

Consolidate Kafka client library versions (Issue NMS-10165)

Link to privacy policy from Data Choices UI elements (Issue NMS-10169)

Karaf shell command to enumerate nodes that match a given filter (Issue NMS-10172)

Optionally persist the results when calling collectors:collect (Issue NMS-10173)

Two Port Bridge - Topology mismatch (Issue NMS-10225)

use user defined time zone for date formatting (Issue NMS-10228)

render date for Javascript with moment.js (Issue NMS-10233)

plpgsql IPLIKE does not behave the same as the C version (Issue NMS-10238)

apply centralized datetime rendering to freemarker template(s) (Issue NMS-10239)

apply custom tag to ncs-alarms.jsp (Issue NMS-10243)

Update log4j2.xml with kafka logging (Issue NMS-10269)

Syslog messages should default to using the time at which they were received (Issue NMS-10271)

Syslog messages should default to being associated with the hosts from which they were received (Issue NMS-10272)

implement minion "status" field (Issue NMS-10295)

expose datetimeformat in InfoService REST Endpoint (Issue NMS-10301)

Set the default resource graph time range to "Last Day" (Issue NMS-10324)