NetXMS Forum

Victor Kirhenshtein

We just published patch release 3 for version 7.0.

Notable changes

New server configuration variable Agent.TLS.ReverseTunnels (disabled/allowed/preferred) for controlling use of TLS tunels to agents
Modbus: unit ID from DCI metric and from Modbus sensor is honored; DCIs on sensors are collected with sensor's unit ID
File transfer over encrypted connection is aborted on encryption or send failure instead of being reported as successful with missing data
New agent and server configuration parameter CurlSSLBackend
libcurl uses Windows certificate store when no CA bundle is configured
Docker connector no longer disables TLS verification on Windows
New AI assistant tool get-node-health (one-call OS health snapshot of a node with pre-evaluated findings)
AI security fixes
DCI data export includes delta method, transformation flag, time zone and SHA-256 digests
Network map link color calculation script can access link via global variable $link
FDB entries with status other(1) (e.g. MAC addresses authorized by port security or 802.1X) are no longer discarded
JUNIPER driver recognizes CLI prompt on devices without configured host name
SYS_NODE_UNREACHABLE events caused by agent tunnel being down are correlated to SYS_NETWORK_CONN_LOST
Hardware inventory: storage device and network adapter index changes no longer cause spurious component added/removed events
Windows: mysql.ddr is treated as alias for mariadb.ddr (MySQL driver removed from Windows build)
Agent web service requests: fixed bearer authentication; improved workarounds for memory leaks in old libcurl versions
Added Chinese (Simplified) translation of management console

Fixed issues

#3868 (Hardware inventory: storage device index changes cause spurious component added/removed events)
#3869 (Bundled libcurl on Windows has no trusted CA roots, https verification fails with curl error 60)
#3871 (Docker connector disables TLS verification on Windows and depends on OpenSSL-only curl callback)
#3872 (Empty user variable values cannot be stored on Oracle (ORA-01400 on user_profiles.var_value))
#3873 (Decommission with "Clear IP addresses" leaves interfaces in zone address index: former IP "already in use" until server restart when zoning is enabled)
#3874 (Windows server installer: upgrade from <7.0 with DBDriver = mysql.ddr leaves server unable to start)
#3875 (Create public SSH key from private automatically)
#3876 (SSH terminal via agent proxy disconnects after login (libssh 0.11+))
#3877 (Modbus data collection ignores unit ID from DCI metric and from Modbus sensors)
#3879 (Web console: inactivity timeout never fires while node Overview is open)
#3881 (HPE Comware FDB entries with status other(1) are discarded — configurable acceptance policy requested)
#3883 (AI tool get-node-health: one-call OS health snapshot of a node with pre-evaluated findings)
#3885 (MinGW subagent build: embedded resource (parser XML) is not rebuilt when the embedded file changes)
#3892 (MCP endpoint must work standalone without AI provider: core tools, NXSL ai_tool scripts and disabled-items list are skipped when InitAIAssistant() bails out on missing provider)
#3893 (Device driver data is not reset when node's network device driver changes)
#3895 (Data export download fails in web console)
#3897 (aifileops log_tail/log_grep only see the first 10000 lines of a file)
#3898 (AI log/incident search tools: no row limit on Oracle, negative limit accepted, hard-coded LIMIT breaks MSSQL/Oracle/DB2)
#3899 (execute-agent-tool discards agent error details and returns only numeric error code)
#3900 (Add server configuration variable Agent.TLS.ReverseTunnels (disabled/allowed/preferred) to control server-initiated (reverse) agent TLS tunnels globally)
#3901 (Node::connectToAgent() establishes reverse TLS tunnel while reusing alive legacy NXCP connection, leaving tunnel unused)
#3903 (Allow map link color scripts to distinguish parallel links)
#3904 (JUNIPER driver: CLI prompt without host name not recognized, {master:0} line left in configuration read via interactive SSH)
#3905 (File transfer over encrypted connection reported success with missing data)
#3906 (AI operator owner can be set to any user, allowing privilege escalation via MANAGE_AI_OPERATORS)
#3907 (Race condition in server object index reader/writer handshake)
#3908 (NetXMS 7.0.2: recurring agent tunnel timeouts, proxy polling failures and unexpected agent process termination)

Victor Kirhenshtein

Thank you! Just added to the source tree. Note that before nxmc had only Chinese Traditional translation, so I have added yours as separate language entry "Chinese (Simplified)".

Could you please also translate client error messages in src/client/java/netxms-client/src/main/resources/netxms-client-messages.properties?

Best regards,
Victor

Victor Kirhenshtein

We just published patch release 2 for NetXMS 7.0.

Notable changes

- Built-in SNMP agent supports SNMPv3 (USM, authNoPriv and authPriv) and honors SNMP.Agent.AllowedVersions; community, allowed versions and SNMPv3 user are reloaded on configuration change
- SNMP: FLOAT, DOUBLE, INTEGER64 and UINTEGER64 values are encoded as Opaque-wrapped varbinds and accepted by nxsnmpset and NXSL SNMPSet(); fixed decoding of Opaque-wrapped DOUBLE values
- Agent tunnels with externally provisioned certificates can be bound from tunnel manager, management console, NXSL and WebAPI
- Agent ListenAddress accepts comma-separated list of addresses
- Automatic network map layouts fit map size or visible area and use deterministic Spring, Radial and tree layouts; Grid layout removed; management console no longer hangs on network maps with many objects
- Chart data sources can be toggled on and off by clicking legend entries or via "Data sources" submenu
- Agent file manager: path bar to open folder by typed path, optionally as tree root
- User groups: "close other sessions after login" option
- AI assistant: context window usage indicator in chats with auto-detection of model context size; new "object-management" skill for setting interface expected state and object management status
- Configuration export reports agent policy files that cannot be exported; file delivery policy files are restored on configuration import and validated before being written
- WebAPI: bulk DCI current values endpoint, endpoints for radio interfaces and wireless stations; DCI origin, data type, status and threshold severity are reported by symbolic names ("sourceType" replaced by "origin"); login and status responses include user details
- Device configuration backup module (devbackup) moved to open source core
- Fixed memory leaks in management console table and tree viewers and dashboards; fixed UI deadlock in alarm list when blinking of outstanding alarms is enabled
- Agent tunnel sessions from servers not listed in server access lists get minimal access
- MS SQL and ODBC drivers: re-executing prepared SELECT no longer fails with "Invalid cursor state"
- Hardware inventory: storage device serial numbers are reported; fixed possible agent crash in Hardware.StorageDevices on Linux
- Windows Store package inventory no longer changes USER/NAME between polls
- Solaris: Process.PrivateRSS and Process.PrivateMemoryUsage no longer count shared anonymous memory
- Weather subagent updates current values between forecast downloads; MQTT subagent decodes obfuscated broker passwords
- Multiple NXSL fixes (range(), compound assignment operators, mapList(), Interface utilization attributes and others)
- Workarounds for memory leaks in libcurl before 8.5 and OpenSSL before 3.0

Full list of closed issues

- #1775 (File Manager: Ability to type path to open)
- #2751 (Display errors if they occur during configuration export)
- #3621 (Store package USER/NAME changes between polls while software inventory snapshot is reported complete)
- #3671 (Bind of tunnel with externally provisioned certificate fails with RCC 5, no way to set mapping from tunnel manager)
- #3793 (Object query: hidden/order columns resolved from first result row only)
- #3800 (NXSL: Circuit.interfaces iterates the child list with the parent list size as bound)
- #3801 (NXSL: WirelessStation class inherits NetObj methods that cast its data to shared_ptr<NetObj>)
- #3802 (NXSL: mapList() returns the table name instead of the list when the mapping table does not exist)
- #3803 (Server: DetectAnomalies() dereferences a null DCI for an invalid or deleted DCI ID)
- #3804 (NXSL: Net::ResolveHostname() registered with one argument, address family option unreachable)
- #3805 (NXSL: `\=` and `%=` missing for array elements, `\=` missing for storage items)
- #3806 (NXSL: Interface.inboundUtilization/outboundUtilization return "429496729.5" instead of null when unknown)
- #3808 (NXSL: FILE.eof calls feof() on a closed FILE*)
- #3809 (nxnotify: three positional arguments accepted, message read past argv)
- #3810 (NXSL: range() always yields start and uses the sign of end instead of step direction)
- #3811 (NXSL: NetworkMap.backgroundLongitude returns the background latitude)
- #3812 (Server: beacon poller reads legacy IcmpPingSize variable, ICMP.PingSize ignored)
- #3813 (Server: sql/setup.in out of sync with upgrade procedures (Jira.VerifyPeer, Client.TileServerURL, XMPP.Port))
- #3814 (NXSL: NetworkMapLink.updateDataSource() never changes the format of an existing data source)
- #3818 (Web UI: SSH terminal and VNC viewer build the WebSocket URL from the servlet context path)
- #3819 (Installer: Windows WebUI readme.txt describes Jetty 10 and wrong file names)
- #3820 (Agent: wrong data types in metric registration for PhysicalDisk.SmartStatus and Agent.ThreadPool.LoadAverage*)
- #3821 (Agent: Net.Wireguard.Interfaces/Peers declare instance column INDEX that does not exist)
- #3822 (Agent: File.LineCount returns 1 for an empty file)
- #3823 (Log parser: capture group slots left uninitialized for non-participating groups)
- #3824 (Server: AIOperator.Instructions.MaxSize described as characters but enforced in bytes)
- #3825 (nxsnmpset accepts type names that cannot be converted from string, sends NULL)
- #3826 (Built-in SNMP agent ignores SNMP.Agent.AllowedVersions and SNMP.Agent.V3.*)
- #3827 (Agent: MQTT subagent does not decode nxencpasswd-obfuscated broker passwords)
- #3830 (Cron % step in seconds field matches when time is not divisible by step)
- #3831 (Server: configuration variables read at runtime but not registered in setup.in)
- #3834 (SNMP: Opaque-wrapped DOUBLE value decoded without byte swap)
- #3837 (SNMP: implement SNMPv3 and SNMP.Agent.AllowedVersions in built-in SNMP agent)
- #3841 (SNMP: encode FLOAT/DOUBLE/INTEGER64/UINTEGER64 varbinds as Opaque-wrapped values and accept them in setValueFromString())
- #3843 (User support notification housekeeping deletes recent notifications and keeps old ones)
- #3844 (Solaris: Process.PrivateRSS counts shared anonymous memory)
- #3845 (Weather subagent: current values not updated between forecast downloads)
- #3846 (Web UI: Embedded Dashboard rotation leaks AlarmList / dashboard elements, heap exhausted after ~2 hours)
- #3847 (Dashboard is not rendered at all if one element fails to create)
- #3848 (MSSQL/ODBC drivers: re-executing a prepared SELECT fails with "Invalid cursor state")
- #3849 (Syslog: resolver cache is keyed by hostname only and ignores zone; expired entries are only evicted on re-lookup)
- #3850 (File delivery policy files are not restored on configuration import, and import does not validate file data)
- #3851 (AI assistant: context window usage indicator in chats and auto-detection of model context size)
- #3852 (AI tools: get-metrics returns DCI origin as numeric code only)
- #3853 (Ability to disable / enable chart data sources directly on the chart)
- #3855 (Agent connection stays busy after agent rejects file download request)
- #3857 (Management console hangs on network maps with many objects)
- #3858 (Automatic network map layouts: Radial stacks root nodes, Spring is random and crosses links)
- #3859 (User agent 7.0.x fails to start on Windows: "NetXMS User Agent initialization failed")
- #3860 (Agent routing table parser stores metric into route type and ignores protocol)
- #3861 (Enforce "close other sessions after login" through groups)
- #3862 (Agent: support listening on multiple specific addresses)
- #3863 (Management console: permanent UI hang (deadlock) in AlarmList with "Blinking outstanding alarms" enabled)
- #3864 (Hardware inventory: storage device serial number is always empty)
- #3865 (nxdbmgr init and upgrade fail on Oracle before 12.2: index name too long)
- #3867 (Linux agent: possible crash and garbage bus type in Hardware.StorageDevices)

Victor Kirhenshtein

We finally officially announce next NetXMS major release - 7.0. Notable changes:

- Hot standby mode for netxmsd: two server instances share one database, standby takes over automatically when active server fails; split-brain is prevented by database lease, no external cluster manager required
- Event processing policy rule chains: rules can be grouped into named chains invoked from other rules, with per-chain access control; rules referencing deleted objects are marked in the editor; source object selector shows only event source objects
- Syslog over TLS (RFC 5425) listener
- Multiple SNMP agents on one node: additional SNMP agents with their own port and credentials can be configured per node and selected in DCIs and MIB explorer
- NETCONF support: new libnxnetconf library, NETCONF-based telemetry data collection and configuration backup; network device driver API uses multi-protocol device context; new driver for Cisco Catalyst 9800 wireless controllers
- Device configuration restore: stored configuration backup can be pushed back to a device; separate access rights for reading and managing device configuration backups
- Server-initiated agent tunnel over TLS (reverse tunnel) as alternative to proprietary NXCP encryption for direct server to agent connections
- Embedded SSH terminal in management console, connecting through agent SSH channel relay or directly over TCP proxy
- Traffic observer framework for integration with external traffic analysis systems; ntopng is the first connector
- AI: AI Operators (perpetual adaptive monitoring loops with standing checks and instructions), unified AI memory store with environment, per-user and per-object memories, interactive chat bots over Telegram, Mattermost and XMPP, and new nxshell tool combining debug console, AI assistant, NXSL execution and object navigation
- Data center infrastructure model: new object classes Facility, PowerDomain, CoolingZone and Room with floor plan view; racks are data collection targets; per-sample quality attributes for DCI history and computed data origin for engine-owned DCIs
- Asset management: node components (stack members, transceivers, disks) can be represented as separate assets; "Create asset" action creates and links asset from object
- Access control: separate object access rights for reading data collection configuration and for ad-hoc script execution; access control lists for DCI summary tables; per-object ACL check on mobile device binding; effective rights calculation scales to thousands of nested groups
- Per-user regional settings and UI preferences (language, time zone, date/time formats) stored on server and shared between desktop and web clients
- Data collection: per-DCI "override template settings" flag protects local changes from template updates; last values show actual data collection error reason; {instance} macros are expanded in DCI tags; traffic monitoring template can be applied only to marked interfaces
- Time zone property on all objects with inheritance from parent containers; structured (JSON) values in custom attributes
- Recurring maintenance can be scheduled from object context menu and properties
- Network maps: link aggregation members are drawn as single link; link traffic can be shown as one centered label with direction indicators; web UI map labels match desktop client size and font
- Incidents view: server-side filtering and three-way state selector
- Alarm browser: option to show severity and state as icons only; context aware command palette; object sync runs in background instead of modal dialog; fuzzy token search in data collection filter; human-readable time inputs; object context menu fits on small screens
- Traditional Chinese (zh_TW) translation; hundreds of UI strings that bypassed translation are now translatable
- NXSL: all integer calculations are performed as signed 64-bit; HTTP client class; hash map initialization with { }; DCI class gets instanceValue attribute and method to set status; alarm category methods; alarm methods return boolean instead of internal result codes; changes made from scripts are written to audit log
- Audit log records for object modifications name the changed property
- Notifications: Markdown support in notification channels; Telegram channel can send geolocation and formats 2FA codes as monospace; notification channel drivers and helpdesk link plugins are now server modules
- Agent: events are acknowledged by server and redelivered after connection interruption; Python subagent support removed; external subagent loader exits when started under excluded user

Full list of closed issues:

- #1385 / NX-1175 (Feature for changing the used port in MIB-Explorer)
- #1830 / NX-1620 (Syslog over TLS)
- #1866 / NX-1656 ("Edit agent configuration" should show R/O cached version of the config if node is not connected)
- #1931 / NX-1721 (Always perform calculations in NXSL as signed 64bit numbers)
- #2148 / NX-1939 (Introduce access control for summary tables)
- #2232 / NX-2023 (Display actual data collection error reason in last values)
- #2269 / NX-2060 (Support for multiple SNMP agents on one node)
- #2313 / NX-2105 (Use human readable values when time input is required (e.g. action execution delay))
- #2350 / NX-2142 (Context aware "Command Palette")
- #2467 / NX-2260 (Option to set recurring maintenance for object from context menu or properties)
- #2478 / NX-2271 (Format 2FA code as monospace when sending via telegram notification channel)
- #2486 (Telegram: support sending geolocation messages)
- #2540 / NX-2334 (Rule chains in EPP)
- #2923 / NX-2720 (add method to set dci status)
- #3031 / NX-2829 (Show only appropriate object in EPP rule's source object selector)
- #3150 (Idea: run object sync in separate thread, and instead of modal dialog show "Loading" in object browser)
- #3187 (Add instanceValue attribute to DCI class)
- #3188 (Events from agent to server get lost if network connection is interrupted)
- #3244 (AI Operator: perpetual adaptive monitoring loops)
- #3269 (Add fuzzy search to filter in "Data Collection" view)
- #3315 (NXSL HTTP client class)
- #3363 (Object "Create asset" in addition to "Link to asset")
- #3364 (Hot standby mode for netxmsd (active/standby HA))
- #3369 (Remove Python subagent support)
- #3373 (Mobile device session: missing per-object ACL on device binding allows forged data)
- #3377 (Transform helpdesk link plugins into server modules)
- #3382 (Notification channel drivers: move into server subtree and provide event context in driver API (v5))
- #3383 (Interactive chat bots: bidirectional AI assistant access over messaging platforms (Telegram, Mattermost, XMPP))
- #3384 (Changes made from NXSL scripts are not written to audit log)
- #3385 (Object-modify audit records name only the object, not the changed property)
- #3387 (Separate object level access right for ad-hoc script execution)
- #3391 (Hide labels for severity and state in alarm browser, they are take quite a lot of space)
- #3409 (Separate access rights for network device backups)
- #3425 (Device configuration restore (push config to device))
- #3429 (Traffic observer framework: integration with external traffic analysis systems (ntopng as first connector))
- #3435 (NETCONF support)
- #3447 (UB sweep following #3445: uninitialized reads, unaligned access, endianness, dead override)
- #3464 (Decide which additional IPv6 address ranges should be excluded from automatic subnet creation)
- #3480 (Per-user regional settings and UI preferences (design discussion))
- #3481 (Markdown support in notification channels)
- #3487 (Add marker on EPP rule if there are some errors)
- #3488 (Server-initiated agent tunnel over TLS (reverse tunnel))
- #3522 (Server-side incident filtering and three-way state selector in Incidents view)
- #3530 (alarm categories - add\modify alarm categories using nxsl)
- #3534 (Traffic values on map links overlap interface name labels)
- #3537 (Update traffic monitoring template to have option to apply only on marked interfaces.)
- #3541 (Separate access right for reading data collection configuration)
- #3547 (Real-time line chart ignores DCI configuration (delta calculation, transformation script, units))
- #3552 (Link aggregation members drawn as separate links on topology maps since 5.0)
- #3562 (Network map: option to show link traffic as one centered label with direction indicators)
- #3582 (Duplicate scalar config key across merged agent config sources resolves by unsorted directory order)
- #3583 (Add Traditional Chinese (zh_TW) translation)
- #3586 (Metadata key SingeTablePerfData is misspelled)
- #3588 (Agent action killed by ExternalCommandTimeout reports success with truncated output)
- #3592 (UI strings bypass i18n.tr() and cannot be translated; catalogs are 534 msgids behind the code)
- #3594 (Representation of node components in asset management)
- #3602 (Support structured (JSON) values in custom attributes)
- #3625 (Convert Rack to a data collection target)
- #3626 (POSIX timezone rule evaluation in libnetxms (TimeZoneRule))
- #3627 (Per-sample attributes (quality, bounds, completeness, method) side table for DCI history)
- #3628 (New object classes Facility, PowerDomain, CoolingZone)
- #3629 (Data origin DS_COMPUTED for engine-owned DCIs)
- #3644 (Server installer bundles EOL OpenSSL 1.1.1 via libpq 10)
- #3645 (Allow hash map initialization in NXSL using { } instead of %{ })
- #3646 (Per-DCI override flag: protect local changes on a template-derived DCI from being overwritten by the template)
- #3648 (Add time zone property to all objects)
- #3658 (NXSL: Alarm methods should not expose raw RCC codes as return values)
- #3661 (Web UI: network map labels are much smaller than in desktop client and use serif font)
- #3667 (Room object class and data center floor plan)
- #3673 (Object context menu does not fit anymore, scroll is not available as well)
- #3679 (Effective rights calculation walks group tree once per group, slow with thousands of nested groups)
- #3699 (Decommissioned state is lost when node leaves maintenance mode (leaveMaintenanceMode restores pre-maintenance state flags wholesale))
- #3709 (Table DCI last value view hides the cached table while the DCI has collection errors)
- #3710 (TableValueViewer downloads the whole node DCI summary on every refresh to read one DCI status)
- #3716 (ProcessExecutor: argument array form loses argument boundaries on Windows)
- #3723 (Unified AI memory store: environment, per-user and per-object memories)
- #3726 (nxshell: interactive shell for NetXMS server (debug console, AI assistant, NXSL, object navigation))
- #3752 (SNMPv3 engine ID discovery on trap port is rejected by trap credential validation, INFORMs never received)
- #3755 (Server crash on first start with fresh database: management node creation registers outbound tunnel before client thread pool exists)
- #3758 (Configuration export truncates action data to 255 characters and omits is_disabled)
- #3759 (Agent: external subagent loader should exit when started under user excluded from external subagent watchdog)
- #3761 (Agent local database upgrade 17->18 fails on NULL content_hash in agent_policy, agent runs without local database)
- #3762 (Expand {instance} macros in DCI tag for DCIs created by instance discovery)
- #3764 (DataCollection.Scheduler.RequireConnectivity ignores DCSF_UNREACHABLE: DCIs fail instead of being skipped when node and agent reachability flags disagree)
- #3765 (Embedded SSH terminal in nxmc (agent SSH channel relay and direct SSH over TCP proxy))

Victor Kirhenshtein

Hi! We just published patch release 6 for version 6.2. Hopefully that will be last patch release before major release 7. Notable changes since previous patch release:

- Box selection of elements on network maps
- Configurable size of port boxes in port view dashboard element
- Pie chart dashboard element can show actual values instead of percentages
- Status indicator dashboard element uses object or DCI name as label when custom label is not set
- Object context macros are expanded in dashboard web page element URLs; new macro form %~ URL-encodes expansion result
- New web API endpoints for posting events and for managing mapping tables, persistent storage, and SNMP traps
- New NXSL function FindDCIById; FindAllDCIs accepts null as node argument to search across all data collection targets
- Server console command to recommission decommissioned node; decommissioned nodes can no longer be returned to managed state via NXSL, web API, parent object, or network discovery
- Scheduled task operations and maintenance mode changes made from scheduled tasks are written to audit log
- NXSL scripts run from scheduled tasks and AI assistant tools execute with user security context
- LDAP diagnostic messages from libldap are logged on TLS and bind failures
- File delivery policy files are hidden by default in server file store views; "Show hidden files" option added
- Agent: user sessions on Linux are read from systemd-logind, utmp is kept as fallback
- Agent: processes started in user sessions get environment of session user; external subagent loader no longer deletes master agent policy files at startup
- Agent: new configuration parameter ExternalSubagentWatchdogExcludedUsers; watchdog skips sessions without logged on user
- Agent: authentication and encryption requirements enforced for all commands; AI file operation tools restricted to configured root folder and master server
- Windows server installer ships JSON templates; Windows client installer always runs Visual C++ runtime installer

Full list of closed issues:

- #805 / NX-594 (Box selection on network maps)
- #2328 / NX-2120 (Configurable size of boxes in port view on dashboard)
- #2680 / NX-2474 (Add option to show numeric value instead of % on bar chart)
- #3649 (Autobind can re-link an object that is being deleted, leaving a dangling child reference in containers and templates)
- #3651 (Interface Traffic SNMP template auto-applies together with agent template, duplicating traffic DCIs)
- #3652 (Windows client installer runs vcredist only when the nxshell component is selected)
- #3653 (DefaultDCIPollingInterval / DefaultDCIRetentionTime descriptions still say "for newly created DCI")
- #3654 (Changing DataCollection.DefaultDCIPollingInterval does not resync agent cache mode DCIs)
- #3655 (nxdbmgr -C on MS SQL creates user without rights to create tables)
- #3656 (Windows agent: process enumeration skips last entry, Process.Count returns 0 for newest process)
- #3662 (Unsynchronized read of DelegateObject object set (possible use-after-free))
- #3665 (NXSL scripts run from scheduled tasks and AI assistant tools have no user security context)
- #3666 (NXSL function SQLQuery leaks database connection on every call)
- #3668 (missing label for dci in Status indicator)
- #3669 (Feature Request: Expand Object Context Macros in Dashboard Web Page Elements)
- #3670 (No size check on agent certificate mapping data, node save fails with 'value too long for type character varying(500)')
- #3672 (Agent certificate mapping by public key overflows varchar(500) and breaks node persistence)
- #3674 (Linux agent reports no user sessions on hosts without utmp (Debian 13, systemd 257))
- #3675 (Agent: CMD_AI_EXECUTE_TOOL and CMD_AI_GET_TOOLS have no server class check and aifileops has no path restriction)
- #3676 (Agent: RequireAuthentication / RequireEncryption not enforced for commands handled in receiver thread)
- #3678 (Server crashes on login when group membership search path exceeds 256 entries)
- #3680 (LDAP: log libldap diagnostic message on TLS/bind failures)
- #3681 (Auto-link nodes on custom maps does nothing since 6.2.0)
- #3682 (Threshold events generated on maintenance leave are correlated to the maintenance event and skipped by EPP)
- #3683 (PostgreSQL driver: failed unbuffered SELECT leaves the connection busy, next unbuffered query fails with "PQsendQuery failed")
- #3685 (v5migrate status: "Active workers" counts queued + running objects, "Pending objects" is a stale batch snapshot)
- #3686 (V5 data migration worker holds a pooled DB connection for the whole object, including while paused or throttled)
- #3687 (Config parameter Objects.Nodes.DefaultDecommissionExpirationTime is missing on fresh installs and is never readable by the client)
- #3688 (NXSL NetObj::manage() bypasses the decommission guard, leaving a node that looks managed but is still scheduled for deletion)
- #3689 (Add server console command to recommission a decommissioned node)
- #3690 (SNMP GET: noSuchObject/noSuchInstance returned as empty value instead of unsupported (regression since 6.0.0))
- #3691 (Zone deletion removes credential tables by object ID instead of zone UIN, leaves ssh_credentials)
- #3692 (Object deletion leaves rows in dashboard_associations, object_ai_data, port_stop_list, cluster_resources, radios, dci_delete_list)
- #3694 (DCTable deletion skips dct_threshold_instances; DCI deletion never cleans cond_dci_map)
- #3695 (Discovery re-manages unmanaged node via Node::changeIPAddress() (sets status directly, bypassing setMgmtStatus))
- #3696 (nxdbmgr upgrade 61.35->61.36 fails on PostgreSQL: GetDataCollectionTargets() selects from 7.0-only tables)
- #3700 (Status poll re-manages individually unmanaged interfaces and network services on network path problem (resetStatus bypasses setMgmtStatus))
- #3704 (MIB DISPLAY-HINT: multi-octet "d" fields are rendered one octet at a time, and separators are emitted before the field instead of after)
- #3705 (Decommission with "Clear IP addresses" leaves node in address index: former IP reported as "already in use" until server restart)
- #3706 (DCI deleted while busy (collection or instance discovery) is never deleted from database)
- #3707 (Web client: downloads fail silently for file names outside Latin-1 (Content-Disposition not encoded))
- #3708 (netxmsd crash: CMD_GET_DCI_VALUES on table DCI without last value dereferences null table)
- #3711 (Scheduled tasks created from client (incl. scheduled maintenance) are not written to audit log)
- #3712 (SYS_MAC_ADDR_CHANGED: interfaceName parameter missing for pseudo-interface)
- #3714 (Show hidden files toggle for server file store; hide file delivery policy files by default)
- #3715 (ProcessExecutor: no bounds check on argv[256] when building child argument list)
- #3718 (Agent: external subagent loader deletes master agent policy files at startup)
- #3719 (Agent: option to exclude user accounts from external subagent watchdog)
- #3720 (Windows server installer does not ship JSON templates)
- #3721 (MSSQL template has no auto-apply filter)
- #3722 (null node in FindAllDCIs)
- #3724 (Agent: external subagent watchdog stops at first session even if nobody is logged on to it)
- #3725 (NXSL: sometimes 'while' loop compiled incorrectly)
- #3733 (nxreportd ignores ReportingServer.ResultsRetentionTime (misspelled property name in housekeeper))
- #3734 (Delayed incident creation from EPP drops description and truncates text at semicolons)
- #3735 (Isolation forest anomaly detection looks back seconds instead of days (Timestamp unit mismatch in IsAnomalousValue))
- #3736 (Formatted DCI value has a space between multiplier prefix and unit ("2.31 Gi B"))
- #3737 (AI anomaly profiles are regenerated every second day: 24 h cooldown equals the daily task period)
- #3738 (Asset management: unique attribute check rejects writing the asset's own current value)
- #3739 (Asset management: date attribute validation accepts invalid dates (isValidDate logic inverted))
- #3740 (Oxidized module: backup timestamps ignore the UTC offset reported by Oxidized)
- #3741 (LLM provider type openai falls back to Ollama URL and model when URL/Model are omitted)
- #3742 (AI tasks keep running after their owner's account is disabled)
- #3743 (netsvc: TLS.Certificate.* option list starts at the StartTLS protocol argument)
- #3746 (OTLP event forwarder: dropped events are not reflected in forwarder counters and status)
- #3747 (AI: task prompt lacks opening <instructions> tag; show ai providers reports Mistral as Ollama)
- #3748 (nxshell samples call removed method getAllChilds())

Victor Kirhenshtein

Version 6.2.5 that is just published should have this fixed.

Victor Kirhenshtein

We just published release 6.2.5, Windows packages now include latest OpenSSL 3.5.

Victor Kirhenshtein

We just published patch release 5 for NetXMS 6.2. Notable changes:
- New network device drivers for Arista and Mellanox switches, and for Dell OS10 and Force10 (FTOS) switches
- New web API endpoints for pushing DCI values, getting the last value of table DCIs, and deleting objects; nodes' primary host name or IP address can be changed via web API
- Web API requests are handled by a thread pool (size is configurable, default 16) instead of a single thread
- Weather subagent: added Bright Sky provider (DWD open data for Germany)
- Unnecessary trailing zeros are removed from formatted fractional values
- Event processing policy editor opens large rule chains faster
- Data collection scripts are no longer restricted by Scripts.RestrictWriteAccess
- Windows installers bundle OpenSSL 3.5 LTS instead of 3.0.x, which has reached end of life

And full list of closed issues:
- #2854 / NX-2651 (Driver support for Arista and Mellanox switches - Port View is Blank)
- #3423 (New network device driver: Dell Networking OS10 / Force10 (FTOS) switches)
- #3542 (nxdbmgr upgrade to 62.25 overwrites customized interface event messages)
- #3550 (Editing attributes of LDAP-synced users: silently overwritten on next sync)
- #3575 (Object deletion: removeDCI option is mutable between request accept and worker execution)
- #3609 (WebAPI: collected table DCI data is not reachable)
- #3610 (Value cache placeholder (empty value, timestamp 1 ms) reported as collected value in current-values)
- #3612 (AI assistant function ask-user-choice always fails: tool schema declares every parameter as string)
- #3613 (Web API endpoints for delete objects and modify object primaryName/ipaddress)
- #3615 (Critical BUG: system crash while create json obj in EEP->action->script)
- #3616 (Web API for pushdci)
- #3617 (NXSL JsonArray set()/insert() silently succeed on out-of-range index)
- #3618 (Connection history generates MAC events for interfaces rejected by Hook::CreateInterface)
- #3619 (Scripts.RestrictWriteAccess blocks agent command execution in script-origin DCIs with no per-DCI override)
- #3620 (Denied call under Scripts.RestrictWriteAccess surfaces as an unrelated NXSL error, and the parameter description understates its scope)
- #3622 (nxmc: create rule editor content lazily in the event processing policy editor)
- #3623 (Rack images crash the web client)
- #3630 (File manager subagent ignored read-only restriction for file permission change and move operations)
- #3631 (Remove trailing zeros if more than 2)
- #3634 (Physical container rebinding is not serialized; rapid placement changes can leave the object tree on a stale container)
- #3635 (Weather subagent: Bright Sky provider (DWD open data for Germany))
- #3636 (Null dereference from unvalidated client input: delegate object in getLastValuesByDciId, element index in DashboardBase)
- #3637 (Server crash: MySQL/MariaDB drivers alloca the whole field length, overflowing the thread stack on large image library entries)
- #3638 (AI assistant: questions asked from a delegated skill never reach the user and time out)
- #3639 (Network discovery discards the SNMP credentials it found; every discovered node is created with community "public")
- #3640 (Built-in SNMP agent reads SNMP.Agent.Community, but the configured parameter is SNMP.Agent.CommunityString)
- #3641 (Management console: scrollable dashboards leak a ControlListener on every rebuild, UI thread ends up in a layout loop after hours)
- #3642 (WebAPI: all REST requests are serialized on a single libmicrohttpd thread)
- #3643 (Move bundled OpenSSL in Windows installers from 3.0.x (EOL) to 3.5 LTS)

Victor Kirhenshtein

We just published patch release 4 for version 6.2. Notable changes since previous patch release:

- Server provides native MCP (Model Context Protocol) endpoint, replacing standalone Java MCP server
- Agent-side data collection using Nagios-compatible monitoring plugins via ExternalCheck configuration option
- Generic weather subagent with support for multiple providers (MET Norway and Open-Meteo)
- New network device drivers for Aruba CX switches and Cisco Catalyst 9800 wireless controllers
- MQTT subagent supports instance discovery, wildcard topics, and parameterized metrics in extractors
- MQTT topic payloads are no longer truncated at 255 bytes
- Option to synchronize node names with SNMP sysName on configuration poll
- Dashboards can be shared via anonymous public access links
- Network maps show link details on mouse-over
- Connection point search uses LLDP/CDP peer information in addition to FDB data
- Simplified adding multiple DCI-based or object-based checks to business services
- Multiple conditions can be added to log viewer filters at once
- Shift+click range selection of cells in DCI table value viewer
- Option to show total value and change font size in pie charts
- "Export all to CSV" action added to Interfaces view
- Script library scripts can be provided as context to AI assistant in script editor
- OpenTelemetry log record body exposed as event parameter
- ICMP statistics are no longer reported for nodes without valid primary IP address
- Fixed handling of 6-field cron expressions in recurrent scheduled tasks
- Fixed L2 topology building on Cisco switches that provide bridge port mappings in per-VLAN SNMP contexts
- Fixed SNMPv1 trap encoding that caused traps to be dropped by Net-SNMP receivers
- Fixed Linux agent crash when requesting Process.\* metric with "average" aggregation for non-existent process
- Fixed double-counting of shared memory in Process.MemoryUsage with "sum" aggregation causing false memory alarms
- Fixed memory leak in management client
- Fixed housekeeper and v5 data migration stall when throttle watermarks are set to 0
- Fixed inverted "disable 802.1x status poll" node polling property
- Fixed vendor detection and management interface reporting in generic Cisco driver

Full list of closed issues

- #1279 (DCI table value viewer: Shift+click range selection of cells)
- #3082 / NX-2880 (Add multiple conditions to log viewer filter at once)
- #3257 (Do not report ICMP statistics for nodes without valid primary IP address)
- #3262 (Topology.DefaultDiscoveryRadius ignored for network maps saved by pre-5.1 clients (radius stored as 65535))
- #3413 (Huawei V-STP bridge ID equals master chassis' own base bridge address, contradicting getStpBridgeId() assumption)
- #3422 (New network device driver: Aruba CX (AOS-CX) switches)
- #3479 (Cisco L2 topology: FDB is read per-VLAN but bridge ports are read in the default SNMP context, so ifIndex resolves to 0)
- #3525 (6-field cron expression on recurrent scheduled tasks almost never fires (seconds field always matched))
- #3529 (Replace standalone Java MCP server with native MCP endpoint in server (mcp module))
- #3531 (Web client: node stays attached to the cursor after dragging past the viewport edge)
- #3532 (Web client: "Save map image to file" does nothing)
- #3533 (WebAPI returns 415 for bodyless POST requests without Content-Type header)
- #3536 (MAC Address web ui bugs)
- #3538 (Housekeeper throttle watermarks of 0 permanently stall housekeeper and v5 data migration)
- #3539 (ConfigWriteStr treats a failed existence query as "variable does not exist" and silently loses the write)
- #3540 (nxdbmgr upgrade: stale TimescaleDB extension version reported as an unrelated SQL failure)
- #3543 (NXSL: PostEventEx return value lost; origin argument rejects OPENTELEMETRY)
- #3551 (Memory leak - nxmc jar client (tested on windows))
- #3553 (pie chart - add total % and change font size)
- #3558 (PostgreSQL process template raises false memory alarm — Process.MemoryUsage(...,sum) double-counts shared memory)
- #3559 (MQTT subagent silently truncates topic payload at 255 bytes)
- #3560 (MQTT extractors: wildcard topics with instance discovery)
- #3561 (MQTT extractors: parameterized metrics ($1 placeholders) documented but not implemented)
- #3563 (Network map: show link details on mouse-over)
- #3564 (Agent-side data collection via Nagios-compatible monitoring plugins (ExternalCheck))
- #3567 (OpenTelemetry log record body not exposed as event parameter)
- #3569 (WebAPI object handlers ignore EDIT\_COMMENTS, EDIT\_RESP\_USERS and the template-parent READ exception)
- #3570 (Generic weather subagent with multiple providers (MET Norway) and Open-Meteo commercial API support)
- #3571 (Unbounded alloca over ACL size in AccessList::getUserRights and SaveGraph)
- #3573 (WebAPI: path placeholder object IDs parsed with base 0 and no end-pointer check)
- #3574 (FormatISO8601Timestamp() dereferences NULL for pre-1970 timestamps on builds without gmtime\_r)
- #3576 (libnxsnmp: SNMPv1 traps encoded with INTEGER time-stamp and wrong enterprise OID, dropped by Net-SNMP receivers)
- #3577 (Float DCI values between 0 and 1 displayed as raw six-decimal string)
- #3578 (Linux agent crashes when requested Process.\* metric for non-existent process and 'average' aggregate)
- #3579 (ReadWebsocketFrame corrupts payload of unmasked non-data frames (uninitialized mask))
- #3580 (Connection point search ignores LLDP/CDP peer data in node overview and IP address search)
- #3581 (Objects.Nodes.SyncNamesWithDNS has no effect unless Objects.Nodes.ResolveNames is disabled)
- #3585 (snmp traps filter doesnt work)
- #3589 (Object tool translations for region-qualified language codes (zh\_TW, pt\_BR) never resolve at runtime)
- #3593 (nxmc on Windows: "unhandled exception (NoClassDefFoundError: org/netxms/bridge/Platform)" on exit)
- #3595 (Vendor field is not populated for nodes with CISCO-GENERIC driver)
- #3596 (Missing "Export all to CSV" action in Interfaces view)
- #3597 (Simplify adding multiple DCI-based or object-based checks to business service check list)
- #3598 (Management interface reported as front panel port on stackable Cisco switches (CISCO-GENERIC driver))
- #3599 (Implement driver for Cisco C9800 wireless controllers)
- #3600 (Sync node name with SNMP sysName on configuration poll)
- #3601 (NXSL: FindAlarmById() and FindAlarmByKey() return alarm with empty relatedEvents)
- #3603 (AI assistant sidebar: provide script library script as context in script editor)
- #3605 (Node polling property "disable 802.1x status poll" is inverted)
- #3606 (Add "Enable public access" (anonymous access link) for dashboards)

Victor Kirhenshtein

We are visiting FrOSCon 2026 in Sankt-Augustin, Germany - so if you happens to be there too and want to chat with the team - feel free to message me!

Cheers,
Victor

Victor Kirhenshtein

We just published patch release 3 for version 6.2. Changes since previous patch release:

- Single-use authentication tokens
- Self-service dialog for managing own authentication tokens
- Authentication token value is returned only in response to token creation request and is no longer exposed in token listings
- Microsoft Teams notification driver reworked to send notifications to Workflows (Power Automate) webhook URLs
- OTLP receiver accepts JSON-encoded OTLP/HTTP payloads
- Wake-on-LAN packets can be sent to managed nodes via web API and NXSL
- Option to disable credentials check for incoming SNMP traps
- Added NXSL methods for setting SNMP trap credentials
- Number of agent connection retries is now configurable
- Chart Y axis range and gauge value fields accept K, M, G, and T multiplier suffixes
- Incidents view can hide closed incidents
- "Go to object" action added to package deployment jobs, agent tunnels, scheduled tasks, and user support application notification views
- D-Link driver uses ifDescr as primary source for assigning interface physical location
- Fixed stack buffer overflows in LLDP topology processing and SNMP OID conversion that could crash the server
- Fixed access control bypass when reading closed incidents
- Fixed data collection configuration not being updated on agents working in cache mode
- Fixed template exclusion groups not being enforced on configuration poll auto-apply and in NXSL applyTemplate
- Fixed business service status calculation ignoring service's own checks
- Fixed failed package installation being reported as completed
- Fixed WMI subagent failing all queries after the first one in agent lifetime
- Fixed agent hang on shutdown when agent extension is configured
- Fixed critical events being dropped by wineventsync severity filter
- Fixed spikes in Windows System.IO.* total metrics when physical disk drops out of collection
- Fixed user inactivity timeout logging out actively working users in web console
- Fixed excessive column repacking that slowed down grid views in Windows desktop client
- NXSL Unicode case folding is now locale-independent

Full list of fixed issues:

- #1301 / NX-1091 (D-Link stack driver and ports)
- #3224 (Update Microsoft Teams Notification Driver to Support Workflows/Power Automate)
- #3252 (Y axis range in chart properties should support K, M, G, T suffixes)
- #3347 (Agent's data collection elements for cache mode not getting updated)
- #3389 (Newly created event template is not saved in log parser policy)
- #3415 (ClassCastException when opening bar/pie chart from DCI editor)
- #3418 (Grid views repack columns on every refresh, causing constant repaint and slowdown on Windows desktop client)
- #3428 (Line chart ignores configured time period on first open, shows last hour until refresh)
- #3432 (Unvalidated netmask from node creation request passed to pseudo-interface (np.cpp:293))
- #3467 (Allow setting SNMP trap credentials in bulk (NXSL binding))
- #3472 (Narrow string literals passed to StringBuffer::append() silently become "true" (breaks notification digest and alarm AI prompts))
- #3474 (Failed package installation can be reported as completed (uninitialized variable in PackageDeploymentJob::execute))
- #3475 (Node::getMetricFromSmclp() validates wrong variable, returns garbage when value is on last line)
- #3476 (memset on non-trivially copyable WaitQueueWaiter in MsgWaitQueue)
- #3482 (OTLP receiver rejects JSON-encoded OTLP/HTTP payloads)
- #3483 (NXSL Unicode case folding silently degrades to ASCII when process environment has no locale)
- #3485 (Server crash (SIGSEGV): stack buffer overflow in LLDP topology processing (BinToStr into fixed buffers))
- #3489 (Option to disable incoming SNMP trap credentials check)
- #3490 (Agent hangs on shutdown if agent extension is configured)
- #3492 (Access check bypassed when reading closed incidents via NXCP)
- #3493 (Single-use authentication tokens)
- #3495 (Stack buffer overflow in SnmpConvertOIDToText: bufferSize is never enforced, crashes server during instance discovery)
- #3496 (Self-service UI for managing own authentication tokens)
- #3497 (Authentication token values exposed in token listings until server restart)
- #3499 (WebAPI rejects all internal object tools, but none of them need a client)
- #3500 (Table views lose declared sort direction on first open (restoreTableViewerSettings defaults to SWT.UP))
- #3501 (WMI subagent: all WMI.Query metrics fail after first query in agent lifetime (CoInitializeSecurity called per query))
- #3502 (Configurable number of agent connection retries)
- #3503 (WinNT subagent: System.IO.* total metrics spike when a physical disk drops out of the per-second aggregate)
- #3504 (AI provider Temperature/TopP parsed as integers, fractional values truncate to 0)
- #3505 (wineventsync: Critical events dropped by default severity mask (0xFF vs 0x100))
- #3506 (Stale help texts: nxmibc default output file, nxtool encryption policy default, nxdbmgr reset-system-account)
- #3507 (ping subagent: Don't Fragment option comparison inverted in target parsing)
- #3508 (SIGSEGV in NXSL_NetworkPathClass::getAttr during class attribute enumeration)
- #3509 (Password complexity subsequence check misses last alphabet window (XYZ/xyz not rejected))
- #3510 (Typo in MIB walk DCI creation action: "Create data collection tiem...")
- #3511 (DB metadata drift: 2FA config vars missing from setup.in, IntruderLockoutTime units, stale SYS_TABLE_THRESHOLD_DEACTIVATED description)
- #3512 (oracle subagent: Oracle.ASM.DiskGroups list always empty (tag pattern references nonexistent STATUS column))
- #3513 (java subagent: JVMOptions config parameter is parsed but never passed to the JVM)
- #3514 (vmgr subagent: wrong values from several metrics (CPU.Time returns vCPU count, Memory.UsedPrec always 0/100, MaxCount semantics, "Unkonown" literals))
- #3515 (libnxlp: <logName> in agent-side Windows event log parser rule dereferences null)
- #3516 (ping subagent: Icmp.MinPingTime and Icmp.Cumulative{Min,Max}PingTime all return last-minute maximum RTT)
- #3517 (SYS_TEMPLATE_AUTOREMOVE event parameters are swapped (template posted as node, node as template))
- #3518 (Template exclusion groups not enforced on configuration-poll auto-apply path (or NXSL applyTemplate))
- #3519 (Console scan command: zone and proxy keywords assign each other's values)
- #3520 (webapi openapi.yaml: historicalDataType value mapping description is inverted)
- #3521 (Add option to hide closed incidents in Incidents view)
- #3523 (Business service parent state recomputed from children only, ignoring its own checks)
- #3524 (Agent metric registration oddities: System.CPU.Usage5.Idle5(*), Solaris MemoryDevice.MaxSpeed type)
- #3526 (Web console: inactivity timeout logs out actively working users)
- #3527 (Add "Go to object" context menu action to Package Deployment Jobs and other configuration views)
- #3528 (nxdbmgr check cannot create missing object_properties rows - INSERT references dropped is_system column)
- #3535 (Interface Traffic Agent 32-bit template: system tag says bytes, stored value is bits — utilization 8x too high)

Victor Kirhenshtein

We just published patch release 2 for version 6.2. Important changes since release 6.2.1:

- Added subagent for reading electricity grid data (including carbon intensity) from ENTSO-E Transparency Platform
- Added subagent for reading weather and solar forecast data from open-meteo.com
- Device configuration backup support for HPE ProCurve, HPE Comware, and Aruba switches
- New "scripted gauge" dashboard element
- Agent checks available disk space before starting upgrade
- Number of attempts to deploy a software package is now limited
- Agent connect timeout on the server side is now configurable
- Number of crash dumps kept on disk can be limited
- File manager improvements: folders expand on double-click, view state preserved on manual refresh
- Fixed remotely triggerable stack buffer overflow, heap over-read, and memory leak in NTCB module packet parser
- Fixed authenticated memory corruption in client session (CMD\_MODIFY\_NODE\_DCI)
- Fixed agent communication freeze caused by socket descriptor reuse race in communication channel close
- Fixed thread pool starvation that could make agent unresponsive when all worker threads are blocked
- Fixed deadlock in logwatch subagent
- Fixed creation of duplicate ::/64 subnets on every configuration poll
- Updated bundled libcurl in Windows installers to 8.21.0 (fixes CVE-2026-8927)

And full list of closed issues:

- #3277 (Limit number of attempts to deploy a software package)
- #3388 (NXSL DateTime: fields not normalized after change; out-of-range month breaks formatting)
- #3390 (Web UI: "Restart agent" button in agent restart notification throws "display must not be null")
- #3392 (logwatch subagent deadlock)
- #3393 (Unable to query Table DCI columns when using source node override)
- #3394 (Make interface class SetPeer method available through API)
- #3396 (Expand folders in File Manager on double-click)
- #3397 (ENTSO-E Transparency Platform subagent for grid carbon-intensity data)
- #3398 (Update bundled libcurl.dll in Windows installers to 8.21.0 (CVE-2026-8927))
- #3400 (Map tile cache not invalidated when tile server URL changes (stale/missing tiles))
- #3401 (File manager view should preserve state on manual refresh)
- #3402 (Package deployment manager loads all jobs into memory at startup regardless of status)
- #3403 (nxmc: external browser never opens on macOS)
- #3405 (nxmc: unhelpful error when client and server protocol versions differ)
- #3407 (ai\_task\_execution\_log is never cleaned by housekeeper (unbounded growth))
- #3408 (open-meteo.com subagent for weather/solar forecast data)
- #3410 (Default zone (object ID 4) is never persisted, loadCommonProperties() fails on every startup)
- #3411 (SQL error when creating new node on Oracle DB)
- #3414 (Agent connections freeze until server restart due to socket descriptor reuse race in comm channel close)
- #3419 (Summary table selector should show menu path if title is empty)
- #3420 (Per-tag debug level specified from command line should override level specified in config file)
- #3421 (Add device configuration backup support to HPE/Aruba drivers (ProCurve, Comware, ArubaOS))
- #3424 (nxsl: Data stack underflow)
- #3426 (Create limit for crash dumps)
- #3427 ("Cannot start Java application" when exiting Management Client on Windows)
- #3430 (Missing "Go to object" from object query table as a Dashboard element)
- #3431 (Make agent connect timeout configurable)
- #3433 (Check free space on file system before agent update)
- #3436 (Thread pool does not grow when all workers are blocked; agent becomes unresponsive on COMM pool starvation)
- #3438 (False "system restart detected" in status poll forces interface resync, bypassing disabled configuration poll)
- #3440 (FindRemoteAccessPoint() called with chassis ID subtype instead of chassis ID)
- #3441 (Node can be reported as its own root cause when interface peer resolves to the node itself)
- #3443 (Config import silently turns EPP rule into catch-all when referenced event template is missing)
- #3445 (SPARC: object index forEach stops after first element (enumeratorWrapper discards callback result))
- #3446 (Client session: indeterminate mapId/mapIndex/mapCount in CMD\_MODIFY\_NODE\_DCI (authenticated memory corruption))
- #3449 (Stop and restart of external subagent process does not stop loaded subagents correctly)
- #3450 (Race condition in external subagent request ID generation)
- #3451 (NTCB module: remotely triggerable stack buffer overflow, heap over-read and unbounded leak in packet parser)
- #3452 (libethernetip: CIP byte order, unaligned reads, and truncated Identity serial number)
- #3453 ("Hide in view mode" option missing for table DCIs)
- #3455 (Scripted gauge dashboard element)
- #3456 (FileDeliveryPolicy with empty content logs "XML parser error ... no element found" on every config poll)
- #3457 (getPerfTabDCIList: getPerfTabSettings() != nullptr guard is always true)
- #3460 (MikroTik driver advertises HostMib.Memory metrics that getMetric cannot serve)
- #3461 (Network map layout changes are not saved until another action is performed)
- #3462 (Incorrect layout option selection when opening a Network Map)
- #3463 (Duplicate ::/64 subnets created on every configuration poll)
- #3465 (nxmc: -server= cannot carry an IPv6 address with a port)
- #3468 ("Use server time zone" option is not applied on management client startup)

Victor Kirhenshtein

В 6.2.2 должно исправится.

Victor Kirhenshtein

Hi everyone,

we have big news and a favour to ask.

First and foremost, thank you everyone for being such an active community, there are no words to describe how much we appreciate your feedback.

Starting from July, NetXMS is part of the EU-funded research project that by the end of 2027 will result into a new module for monitoring environmental KPIs and efficiency analysis for data centres. So, we're looking for data centres (ideally with total consumption >500 kW) that would agree to supply us with data (on temperatures, cooling, power consumption, etc) and become our testing ground (limited, of course) and benefit of receiving NetXMS Green DC Monitor for free as a result of such collaboration.

Please, drop me a private message, if interested, we'll talk about it in more detail.

Best regards,
Victor

Victor Kirhenshtein

I just noticed that I've already published post about 6.2 patch release 1, but completely forgot about actual 6.2 release! So for those who missed it, below is change highlights and full change log for version 6.2.0.

Highlights:
- OpenTelemetry (OTLP) support: ingestion of logs, plus export of events and metrics to OTLP endpoints
- Network maps can be displayed on a geographic world map
- Real-time graphs
- Tiered DCI data aggregation (hourly and daily aggregates)
- Graphs are drawn progressively while historical data is still loading
- 95th percentile lines and time markers on history graphs
- 3D view for racks
- Object tools are available on access points, sensors, and interfaces
- Localization support for object tools
- LLDP information access via NetXMS agent on nodes with lldpd
- Access to action execution log and notification log requires separate access rights
- Read-only access right for credential visibility
- Debug console 'exec' command will only execute scripts from pre-configured locations
- Local user passwords hashed with argon2id instead of SHA-256
- Direct upgrade from versions before 2.1.0 is no longer possible
- New subagent for monitoring Microsoft SQL Server
- Consistent configuration format and unified database list across all database subagents
- Prometheus/OpenMetrics endpoint scraping in prometheus subagent
- Generic JSON-over-TCP protocol for building agent extensions
- Added postgres monitoring template
- Added monitoring templates for Microsoft SQL Server and VMware vCenter
- AI assistant has access to EPP and can create, modify, and delete rules
- AI assistant can build dashboards
- Added driver for Fortinet FortiSwitch series
- Crash dump generation on Windows no longer relies on Google Breakpad

Fixed issues:
- #81 (Line Charts From Dashboard Elements)
- #419 / NX-213 (DCI data aggregation)
- #549 / NX-343 (Relative time filters in logs)
- #780 / NX-569 (Network maps on world map)
- #812 / NX-601 (VMWare alarms from SNMP traps)
- #872 / NX-661 (Zoom network maps with mouse wheel)
- #931 / NX-720 (95th percentile lines on graphs)
- #1002 / NX-792 (Push all related objects to connected users when ACL changed)
- #1063 / NX-853 (Draw graph while it is being loaded)
- #1084 / NX-874 (Show reconciliation status and progress in GUI)
- #1118 / NX-908 ("Source node" setting for DCIs is not exported)
- #1128 / NX-918 (Markers on graphs)
- #1299 / NX-1089 (Peer interface IP)
- #1477 / NX-1267 (Object Tools Icons - Pick from Image Library)
- #1708 / NX-1498 (MySQL subagent: databases autodiscovery)
- #1783 / NX-1573 (Real-time graphs)
- #1921 / NX-1711 (If node name is IP address and netxms detects IP address change, amend node name to the new IP address)
- #2014 / NX-1804 (No error messages for SNMP node status/configuration/topology poll, if proxy for that node is down)
- #2015 / NX-1805 (Add NXSL support for setting SNMP credentials)
- #2122 / NX-1913 (Ability to download files from Agent Policies)
- #2150 / NX-1941 (Clean up database monitoring configuration format)
- #2217 / NX-2008 (Object tools in switch port context)
- #2363 / NX-2155 (Feature Request - Expand All Child Containers)
- #2425 / NX-2218 (ACL for Action Execution log and Notification log)
- #2519 / NX-2313 (Log parser for log files when new record is not ended in new line character)
- #2631 / NX-2425 (Object Tools on interfaces)
- #2686 / NX-2480 (Add ability to schedule polls from NXSL)
- #2780 / NX-2577 (Create standard template for MS SQL server monitoring)
- #2784 / NX-2581 (Create templates for vcenter monitoring with help of pyvmomi)
- #2802 / NX-2599 (Add ability to terminate Windows sessions from User Session tab)
- #2881 / NX-2678 (Add special column for SNMP table DCI that would contain instance part of OID)
- #2896 / NX-2693 (delete DCI method)
- #2949 / NX-2746 (Separate OS platform name from agent platform name)
- #3011 / NX-2809 (Add OAuth to SMTP notification channel driver)
- #3023 / NX-2821 (Add support for 802.1x from custom OID for Huawei)
- #3068 / NX-2866 (Object query in dashboard should take column definitions from metadata if no columns are defined)
- #3094 / NX-2893 (Last value request for DCI in error state should return error indicator instead of last known good value)
- #3138 (Web service query tool)
- #3141 (Method for manually setting peer interface for interface class in NXSL)
- #3178 (Interface to lldpd in Linux agent)
- #3179 (Add configurable list of allowed sources for "exec" in debug console)
- #3180 (Use mapping tables to provide display value for DCIs)
- #3183 (Use SNMP MIB enum values when displaying DCI value)
- #3185 (Make configurable automatic column resize in table views)
- #3191 (Use restrictive security context for NXSL scripts that semantically should not modify anything)
- #3201 (Add NXSL methods to set node postal address)
- #3203 (Drop pre-2.1 database upgrade path from nxdbmgr)
- #3204 (Move idata/tdata table creation from metadata rows to code)
- #3210 (Add RADIUS Access-Challenge 2FA flow)
- #3217 (Subnet Scan Window for Adding Nodes)
- #3218 (Allow agent upgrade via packages without requiring full MasterServers access)
- #3221 (MSSQL Monitoring Subagent)
- #3227 (Add generic JSON-over-TCP integration protocol support)
- #3241 (Harmonize object tool icons with image library (use UUID reference instead of embedded blob))
- #3242 (Add support for mongodb C driver version 2.2.2 (2.x?))
- #3243 (Add localization option to object tools)
- #3254 (Add speed parameter to SYS_IF_DOWN and SYS_IF_UP events)
- #3258 (Generate event on server startup if background upgrade is pending)
- #3261 (NXSL object methods for accessing DCI objects and values)
- #3263 (Generate event when SNMP traps are not accepted due to incorrect credentials)
- #3265 (Change color of disabled EPP rules)
- #3266 (DataCollection.TemplateRemovalGracePeriod server configuration variable should have units)
- #3268 (Use regex and Multiple match checkboxes not set when adding instance prototype to context dashboard)
- #3278 (Unable to cancel a package deployment job)
- #3280 (Object tools of type AGENT_LIST / AGENT_TABLE / SNMP_TABLE silently ignore input fields and don't expand macros)
- #3281 (Add Oracle.Databases list parameter to Oracle subagent)
- #3286 (SQL errors after in-place database conversion to TimescaleDB)
- #3287 (Interfaces show as [0] in FDB tab of Fortiswitch)
- #3288 (Provide a consistent database-list parameter across all database subagents for unified instance discovery)
- #3292 (Add OpenTelemetry (OTLP) logs ingestion to the OTLP module)
- #3293 (AI log tools (aitools/logs.cpp) use stale EventOrigin numbering, mislabel/mismatch origins)
- #3295 (Add object access right for read-only credential visibility (READ_CREDENTIALS))
- #3297 (New EPP action for changing LOG flag for event)
- #3301 (Pluggable event forwarding framework (generalize FORWARD_EVENT into named drivers))
- #3302 (OpenTelemetry (OTLP) event forwarder — export NetXMS events as OTLP logs)
- #3303 (Allow server modules to register performance data storage (PDS) drivers in core)
- #3304 (OpenTelemetry (OTLP) metrics export via module-registered PDS driver)
- #3305 (SWT UI thread stuck in column-packing when applying a template)
- #3308 (Add NXSL access to node L2 network path information)
- #3310 (OTLP metric selector — server-side catalog of observed metrics for DCI configuration)
- #3311 (3D view for racks)
- #3313 (DCI summary table editor: no UI control for "Multiple instances" (MULTI_INSTANCE) flag)
- #3314 (Prometheus/OpenMetrics endpoint scraping in prometheus subagent)
- #3317 (TSDB: "connection_history" is not a hypertable or a continuous aggregate)
- #3319 (Agent metrics and instance discovery not working on collector and circuit)
- #3321 (Add support for nxencpasswd passwords to oxidized module)
- #3322 (logwatch subagent not picking LSI Storage Authority win event log events)
- #3323 (Tools -> Agent Explorer and MIB explorer have close button, restored on restart)
- #3324 (Show and parse human readable time in server action timers)
- #3325 (Add processing metadata to events)
- #3328 (Solaris/SPARC: object classes packed because Studio 12.6 ignores #pragma pack() reset → SIGBUS)
- #3329 (libnxlp: uninitialized LogParser::m_useSnapshot when parser XML has no <file> element (Windows))
- #3331 (netxmsd crash: unbounded maskBits in AdjustSubnetBaseAddress causes OOB write on IPv6 subnet overlap)
- #3332 (Subnet::setCorrectMask not zoning-aware: corrupts subnet address index in zoning mode)
- #3333 (Oxidized historical backup retrieval returns latest config for every version)
- #3334 (Add Oracle Database monitoring template)
- #3335 (Oracle subagent: adopt canonical connection terminology and config schema (#3288))
- #3336 (MySQL subagent: adopt canonical connection terminology and config schema (#3288))
- #3337 (PostgreSQL subagent: adopt canonical connection terminology and config schema (#3288))
- #3338 (MongoDB subagent: adopt canonical connection terminology and config schema (#3288))
- #3339 (DB2 subagent: adopt canonical connection terminology and config schema (#3288))
- #3340 (Informix subagent: adopt canonical connection terminology and config schema (#3288))
- #3341 (Template DCI threshold changes are not synchronized to nodes)
- #3342 (Replace Google Breakpad with own crash-dump generation code on Windows)
- #3343 (Stable per-element GUID identity for dashboard elements)
- #3344 (AI assistant skill for building dashboards)
- #3345 (Add per-database (per-schema) statistics to MySQL subagent)
- #3346 (Web service request headers silently truncated at 2048 bytes)
- #3348 (add alarm category(as defined in EPP) to /v1/alarms new API call)
- #3349 (Inconsistent zoneUIN interpretation in address lists: IsAddressInTopologyExcludedSubnet treats zone 0 as "all zones")
- #3350 (Dashboard metric picker should handle {instance-value} macro)
- #3352 (Table Value Dashboard element should show only table DCIs in it's picker)
- #3353 (STP topology discovery creates false inter-switch links across Huawei M-LAG pair)

Victor Kirhenshtein

We just published first patch release for version 6.2.

Highlights:

Added NXSL method Node::setVNCPassword() to set VNC password
Support for environment files in agent configuration; potentially sensitive environment variables are masked in configuration dump
Added internal metrics for measuring traffic between server and agents
Improved external subagent watchdog on Windows (reconciles orphaned and duplicate subagent processes)
File delivery policy editor allows creating multiple nested folders at once
Cisco performance template displays environmental component status as readable text
Oracle and PostgreSQL monitoring templates no longer auto-unbind when the database is temporarily unreachable
Fixed information disclosure (IDOR) in topology endpoints of web API
Fixed privilege escalation via scheduled-task create/update in web API
Fixed authenticated denial-of-service issues in web API (self password change) and NXCP (CMD_RESOLVE_DCI_NAMES)

Full list of fixed issues:

#2918 / NX-2715 (Add internal metrics to measure traffic between server and agents)
#3206 (Tools perspective views missing in nxmc on Raspberry Pi)
#3256 (Spikes of uncorrelated interface down events when a zone has multiple proxies and one becomes unreachable)
#3282 (nxmc: local command object tools not executed on host under Flatpak)
#3296 (Custom attribute table not scaled to width of user properties window)
#3307 (Metric selector for agent metrics not working on sensor with gateway node set)
#3351 (Special way to store secrets in agent configuration file)
#3356 (DCI mapping table reference is lost when configuration is exported and imported on another server)
#3357 (Cisco performance template: display environmental component status as readable text)
#3358 (Oracle and PostgreSQL monitoring templates auto-unbind when the database is unreachable)
#3359 (Database upgrade to 62.13 fails: stock image files removed by package upgrade before migration)
#3360 (Database export does not include module-specific metadata entries)
#3361 (Server time displayed in UTC instead of server timezone for numeric timezone abbreviations)
#3366 (Query web services access right not set on upgrade for Admins group)
#3367 (Cannot invoke ImageDataFactory: session-bound image used for decorated user icons in web UI)
#3368 (External subagent watchdog restarts still-initializing subagents, spawning duplicate instances on Windows)
#3370 (External subagent watchdog: reconcile orphaned/duplicate subagent processes across master restart and config changes on Windows)
#3371 (WebAPI: scheduled-task create/update bypasses per-handler access rights)
#3372 (WebAPI: null-pointer dereference in self password change crashes netxmsd)
#3375 (WebAPI: topology endpoints leak metadata of objects the caller cannot read)
#3376 (Client session: unbounded allocation and missing NULL check in CMD\_RESOLVE\_DCI\_NAMES)
#3378 (Create NXSL method to set VNC password)
#3379 (Option to add multiple folders in file delivery policy at once separated by '/')
#3380 (Template import silently drops table DCIs due to JSON key case mismatch)
#3381 (Columns readjusted one by one on Windows so tables appear to flicker)
#3386 (Database initialization fails on Oracle with ORA-01704: stock image INSERT literals too long)

Victor Kirhenshtein

Could you please also do SNMP walk on 1.3.6.1.4.1.2011.5.25.42.4.1.19.1.2 on both switches?

Victor Kirhenshtein

This is logical flaw in exclusion processing. I've registered an issue: https://github.com/netxms/netxms/issues/3349
Will be fixed as part of 6.2.0 release.

Best regards,
Victor

Victor Kirhenshtein

Just added physical interface marking in FortiSwitch driver.

Victor Kirhenshtein

Сделал исправление в сервере, должно исправить падение. Войдет в следующий релиз.

NetXMS Forum

Victor Kirhenshtein

Posts

Notable changes

Fixed issues