Project: Icinga (Observability and Analysis / Observability)
File: CHANGELOG.md

The latest release announcements are available on . Please read the documentation before upgrading to a new release. Released closed milestones can be found on . Version 2.14.2 is a hotfix release for master nodes that mainly fixes excessive disk usage caused by the InfluxDB writers. InfluxDB: truncate timestamps to whole seconds to save disk space. #9969 HttpServerConnection: log request processing time as well. #9970 Update Boost shipped on Windows to v1.84. #9970 Version 2.14.1 is a hotfix release for masters and satellites that mainly prevents permanent disintegration of a whole cluster due to root CA expiry. Automatically renew own root CA and distribute it to all nodes. #9933 Update OpenSSL shipped on Windows to v3.0.12. #9946 Disable TLS renegotiation (handshake on existing connection). #9946 Icinga DB feature: fix crash due to missing NULL pointer check. #9946 Icinga DB feature: fix data written into Redis crashing the Go daemon. #9946 GelfWriter: fix deadlock on stop/reload caused by busy queue. #9947 Don't lose notifications due to too long output, truncate it. #9947 Discard duplicate problem notifications due to state filtering. #9932 Speed up API filters targeting specific hosts/services to O(1). #9944 POST /v1/console/\: return HTTP 503 while Icinga is reloading. #9947 Update Boost shipped on Windows to v1.83. #9946 Documentation: several fixes and improvements. #9921 Upgrading docs: https://icinga.com/docs/icinga2/snapshot/doc/16-upgrading-icinga-2/#upgrading-to-2-14 Thanks to all contributors: , , , , , , , , , , , , , , , , , , Remove CheckResultReader (which has been deprecated since v2.9). #9714 Remove StatusDataWriter (which has been deprecated since v2.9). #9715 ElasticsearchWriter: drop support for Elasticsearch < v7. #9812 Consider a checkable unreachable once one Dependency fails. Previously all of them had to fail. (Consult the upgrading docs.) #8218 API: reject config modifications during reload with HTTP status 503. #9445 `icinga2 daemon`: to reduce config load time, write file needed by `icinga2 object list` only if `--dump-objects` is given. #9586 #9591 Default email notification scripts: link to Icinga DB Web, not the monitoring module. (Consult the upgrading docs.) #9742 #9757 API: for security reasons hide TicketSalt in /v1/variables. #7863 Disallow global variable modification after config commit start (i.e. inside `object/apply T "x" { ... }`) to reduce config load time. #9740 Forbid Dependency cycles at config load time. #8389 Allow only strings in the arrays Host#groups, Service#groups and User#groups. Needed for consistency, especially by the IDO. #9057 Disallow empty object names. (They worked only partially anyway.) #9409 The official MSIs don't include the following features anymore. They weren't intended, tested or needed on Windows and only waste build time, bandwidth and disk space. Both new installations and upgrades are affected. ElasticsearchWriter #9704 GelfWriter #9704 GraphiteWriter #9704 InfluxdbWriter and Influxdb2Writer #9704 OpenTsdbWriter #9704 PerfdataWriter #9704 We also don't ship the following files anymore. (You can still obtain them manually.) `NSCP.msi` (NSClient++ installer) #9703 (Icinga 2 markdown documentation) #9705 On the other hand MSIs are now 75% smaller than before. Significantly reduce config load time of large setups. Allow to connect dependencies via redundancy groups. Only parents within one group are assumed to provide redundancy for each other. #8218 Built-in check command ifw-api, communicates directly with the Icinga for Windows REST API. (Doesn't spawn a PowerShell process for that.) #9062 JournaldLogger which logs to systemd journal. #9000 API: POST /v1/objects: allow to discard some previously modified attributes, i.e. to restore the config files' values. #9783 ElasticsearchWriter: support Elasticsearch v8. #9812 Support `$env.ENVVARNAME$` macros. #8302 Speed up Icinga DB config dump. #9524 Default mail notification scripts: also print `$host.notes$` and `$service.notes$`. #9713 Enable built-in OpenSSL DH parameters to allow DHE TLS

#9811 Clean up global default TLS cipher list to improve security. #9809 Influxdb(2)Writer: write more precise timestamps (nanoseconds). #9599 Icinga DB feature: normalize several Redis data not to crash the Go daemon. Fix parsing of perfdata across multiple lines in plugin output. #8969 icinga check: fix last reload failure time. #8429 #9827 Resolve macros inside custom vars of IcingaApplication. #9779 SELinux: allow Icinga and its plugins to write to syslog. #9688 ElasticsearchWriter: fix data buffer flush race condition during stop. #9810 Trigger flexible downtimes not in the past if checkable is already down. #9726 Send downtime expiration notifications immediately, not after up to a minute. #9726 Don't hang in timed out connection attempt. #9711 #9725 Fix lost acknowledgements after re-connect. #9718 cluster-zone check: don't complain about not connected other local zone members if there aren't any. #8595 Allow agent to update executions delegated to it via /v1/actions/execute-command. #8627 Disallow breaking inter-object relationships by changing relationship attributes at runtime, e.g. `Service#host_name`. #9407 Correct several HTTP response status codes. #7958 #9354 Correct Boolean field types previously reported by /v1/types as Number. #9514 `icinga2 daemon`: fix -DConfiguration.Concurrency= flag which now allows to override the number of threads. #9643 `icinga2 node wizard`: avoid unnecessary chown(2) which may fail and abort the wizard. #8744 Correct several log messages. #8895 #8965 #9663 Add `linux_netdev` check command. #9045 `disk`: don't pass -m (`disk_megabytes`) by default. #9642 `disk`: pass -X fuse.portal (`diskexcludetype`) by default. #9459 `http`: support multiple -k (`http_header`) as array. #8574 `icmp`: double defaults for -w (`icmpwpl`) and -c (`icmpcpl`). #9041 `logfiles`: pass --winwarncrit (`logfiles_winwarncrit`) without argument. #9056 `nwc_health`: pass SNMPv3-only args only when using SNMPv3. #9095 `vmware-esx-dc-runtime-tools` and `vmware-esx-soap-vm-runtime-tools`: rename `--open-vm-tools` to `--openvmtoolsok` (`vmwareopenvmtools`). #9611 | Command | Argument | Custom Variable | PR | ||||-| | `disk` | `-P` | `diskinodeperfdata` | #9494 | | `esxihardware` | `--format` | `esxihardware_format` | #9435 | | `esxihardware` | `--pretty` | `esxihardware_pretty` | #9435 | | `http` | `--verify-host` | `httpverifyhost` | #8005 | | `icingacli-businessprocess` | `--ack-is-ok` | `icingaclibusinessprocessackisok` | #9103 | | `icingacli-businessprocess` | `--blame` | `icingaclibusinessprocessblame` | #9103 | | `icingacli-businessprocess` | `--colors` | `icingaclibusinessprocesscolors` | #9103 | | `icingacli-businessprocess` | `--downtime-is-ok` | `icingaclibusinessprocessdowntimeisok` | #9103 | | `icingacli-businessprocess` | `--root-cause` | `icingaclibusinessprocessrootcause` | #9103 | | `mem` | `-a` | `mem_available` | #9385 | | `mongodb` | `--disableretrywrites` | `mongodb_disableretrywrites` | #9539 | | `mongodb` | `--ssl-ca-cert-file` | `mongodbsslcacertfile` | #9610 | | `mysql` | `--extra-opts` | `mysqlextraopts` | #9197 | | `nrpe` | `-3` | `nrpeversion3` | #9296 | | `nrpe` | `-D` | `nrpenologging` | #9016 | | `nrpe` | `-P` | `nrpepayloadsize` | #9032 | | `pgsql` | `--extra-opts` | `pgsqlextraopts` | #9197 | | `postgres` | `$PGCONTROLDATA` (env. var.) | `postgres_pgcontroldata` | #8929 | | `postgres` | `--datadir` | `postgres_datadir` | #8924 | | `postgres` | `--language` | `postgres_language` | #8924 | | `postgres` | `--perflimit` | `postgres_perflimit` | #8924 | | `sslcert` | `--ignore-host-cn` | `sslcertignorehost_cn` | #9512 | | `sslcert` | `--ignore-ocsp-errors` | `sslcertignoreocsp_errors` | #9512 | | `sslcert` | `--ignore-ocsp-timeout` | `sslcertignoreocsp_timeout` | #9512 | | `sslcert` | `--ignore-tls-renegotiation` | `sslcertignoretls_renegotiation` | #9042 | | `sslcert` | `--proxy` | `sslcert_proxy` | #8927 | | `tcp` | `--sni` | `tcp_sni` | #9347 | | `vmware-esx-dc-runtime-tools` | `--novmtoolsok` | `vmwarenovmtools` | #9611 | | `vmware-esx-soap-vm-runtime-tools` | `--novmtoolsok` | `vmwarenovmtools` | #9611 | Require GCC 7+ for building to enable C++17. #9133 #9485 #9489 Require CMake v2.8.12+ for building. (Compatibility with older ones will be removed from a future CMake

#9706 Repair config reload on OpenBSD by using waitpid(2), not a SIGCHLD handler. #9518 Ignore SIGHUP in main process to allow `/etc/rc.d/icinga2 reload` sending it to all Icinga 2 processes on OpenBSD. #9622 Fix crash in debug build on macOS when API and debug log are enabled. #9497 Update Boost shipped on Windows to v1.82. #9761 Update OpenSSL shipped on Windows to v3.0.9. #9787 Update vendored https://github.com/nlohmann/json to v3.9.1. #9675 Update vendored https://github.com/nemtrif/utfcpp to v3.2.3. #9683 Documentation: several fixes and improvements. #8954 #9741 #9763 #9767 #9769 #9777 Several code quality improvements. #8815 #9106 #9250 Version 2.13.9 is a hotfix release for masters and satellites that mainly prevents permanent disintegration of a whole cluster due to root CA expiry. Automatically renew own root CA and distribute it to all nodes. #9934 Update OpenSSL shipped on Windows to v3.0.12. #9945 Disable TLS renegotiation (handshake on existing connection). #9945 Icinga DB feature: fix crash due to missing NULL pointer check. #9945 Icinga DB feature: fix data written into Redis crashing the Go daemon. #9945 Update Boost shipped on Windows to v1.83. #9945 Version 2.13.8 is a maintenance release that fixes some bugs, especially Icinga DB crashes, and updates several bundled libraries. Icinga DB feature: normalize several Redis data not to crash the Go daemon. #9814 Don't hang in timed out connection attempt. #9815 Trigger flexible downtimes not in the past if checkable is already down. #9817 ElasticsearchWriter: fix data buffer flush race condition during stop. #9818 SELinux: allow Icinga and its plugins to write to syslog. #9819 Fix lost acknowledgements after re-connect. #9820 Fix parsing of perfdata across multiple lines in plugin output. #9821 cluster-zone check: don't complain about not connected other local zone members if there aren't any. #9822 Update Boost shipped on Windows to v1.82. #9816 Update OpenSSL shipped on Windows to v3.0.9. #9816 Update vendored https://github.com/nlohmann/json to v3.9.1. #9816 Update vendored https://github.com/nemtrif/utfcpp to v3.2.3. #9816 This security release updates Boost and OpenSSL libraries bundled on Windows and repairs broken SELinux policies. By the way it fixes several other bugs. Windows: update bundled OpenSSL to v1.1.1t. #9672 SELinux: fix user and domain creation by explicitly setting the role. #9690 Signal handlers: don't interrupt and break plugins spawning. #9682 Icinga DB: take check\_period into account during overdue calculation. #9679 Avoid corrupted files: use fsync(2)/FlushFileBuffers() everywhere. #9681 Solaris: fix compile error. #9680 Windows: update bundled Boost to v1.81. #9678 Documentation: several fixes and improvements. #9671 The main focus of version 2.13.6 is improved performance of Icinga DB and apply rules. Additionally, it includes bug fixes related to config loading and API permissions. Improve the throughput of the Icinga DB feature. #9550 Multiple changes to speed up evaluation of apply rules. #9559 #9565 #9558 Fix a possible crash on config loading related to `ignoreonerror`. #9560 Check API user permission on objects returned by joins. #9561 Windows: update bundled Boost and OpenSSL versions. #9562 #9567 Version 2.13.5 is a maintenance release that fixes some bugs, improves logging and updates the documentation as well as a bundled library. Ensure not to write an incomplete (i.e. corrupt) state file. #9467 ITL: Render vars.apt\_upgrade=true as --upgrade, not --upgrade=true. #9458 Icinga DB: Don't surprise (and crash) the Go daemon with config types it doesn't know. #9480 Icinga DB: Add missing Redis SELinux policy. #9473 Windows: Don't spam the event log with non-error startup messages. #9457 Windows: Update bundled version of OpenSSL. #9460 Docs: Update RHEL 8 installation instructions. #9482 Docs: Add RHEL 9 installation instructions. #9482 This release brings the final changes needed for the Icinga DB 1.0

Addtionally, it includes some fixes and a performance improvement resulting in faster config validation and reload times. Fix a race-condition involving object attribute updates that could result in a crash. #9395 After a host recovered, only send problem notifications for services after they have been rechecked afterwards to avoid false notifications. #9348 Speed up config validation by avoiding redundant serialization of objects. #9400 Add a `separator` attribute to allow using arguments like `--key=value` as required by some check plugins. This fixes the `--upgrade` and `--dist-upgrade` arguments of `check_apt`. #9397 Windows: Update bundled versions of Boost and OpenSSL. #9360 #9415 Add an `icingadb` CheckCommand to allow checking if Icinga DB is healthy. #9417 Update documentation related to Icinga DB. #9423 Fix a bug where history events could miss the environment ID. #9396 Properly serialize attributes of command arguments when explicitly set to `null`. #9398 Rename some attributes to make the database schema more consistent. #9399 #9419 #9421 Make the error message more helpful if the API isn't set up #9418 This version includes bugfixes for many features of Icinga 2, including fixes for multiple crashes. It also includes a number of fixes and improvements for Icinga DB. The /v1/config/stages endpoint now immediately rejects parallel config updates instead of accepting and then later failing to verify and activate them. #9328 The lifetime of newly issued node certificates is reduced from 15 years to 397 days. #9337 Compare cluster certificate tickets in constant time. #9333 Fix a crash that could happen while sending notifications shortly after Icinga 2 started. #9124 Fix missing or redundant notifications after certain combinations of state changes happened while notifications were suppressed, for example during a downtime. #9285 Fix a deadlock when processing check results for checkables with dependencies. #9228 Fix a message routing loop that can happen for event commands that are executed within a zone using `command_endpoint` that resulted in excessive execution of the command. #9260 Fix scheduling of downtimes for all services on child hosts. #9159 Creating fixed downtimes starting immediately now send a corresponding notification. #9158 Fix some issues involving daylight saving time changes that could result in an hour missing from scheduled downtimes. This fix applies to time periods as well. #9238 Fix the evaluation order of default templates when used in combination with apply rules. Now default templates are imported first as stated in the documentation and as it already happens for objects defined without using apply. #9290 Fix an issue where contacts were not written correctly to the notification history if multiple IDO instances are active on the same node. #9242 Explicitly set the encoding for MySQL connections as a workaround for changed defaults in Debian bullseye. #9312 Ship a MySQL schema upgrade that fixes inconsistent version information in the full schema file and upgrade files which could have resulted in inaccurate reports of an outdated schema version. #9139 Fix a race condition in the InfluxDB Writers that could result in a crash. #9237 Fix a log message where Influxdb2Writer logged as InfluxdbWriter. #9315 All writers no longer send metrics multiple times after HA failovers. #9322 Fix the order of linker flags to fix builds on some ARM platforms. #9164 Fix a regression introduced in 2.13.2 preventing non-unity builds. #9094 Fix an issue when building within an unrelated Git repository, version information from that repository could incorrectly be used for Icinga 2. #9155 Windows: Update bundled Boost version to 1.78.0 and OpenSSL to 1.1.1n #9325 Fix some race conditions due to missing synchronization. These race conditions should not have caused any practical problems besides incorrect numbers in debug log message. #9306 Move the

and status files created when validating incoming cluster config updates to /var/lib/icinga2/api and always keep the last failed startup.log to ease debugging. #9335 The `severity` attribute was updated to match the sort order Icinga Web 2 uses for the IDO. The documentation for this attribute was already incorrect before and was updated to reflect the current functionality. #9239 #9240 Fix the `is_sticky` attribute for comments. #9303 Fix missing updates of `is_reachable` and `severity` in the state tables. #9241 Removing an acknowledgement no longer incorrectly writes comment history. #9302 Fix multiple issues so that in an HA zone, both nodes now write consistent history. #9157 #9182 #9190 Fix that history events are no longer written when state information should be updated. #9252 Fix an issue where incomplete comment history events were generated. #9301 Note: when removing comments using the API, the dedicated remove-comment action should be used instead of the objects API, otherwise no history event will be generated. Fix handling of non-integer values for the order attribute of command arguments. #9181 Note: You should only specify integer values for order, other values are converted to integer before use so using fractional numbers there has no effect. Add a dependency on icingadb-redis.service to the systemd service file so that Redis is stopped after Icinga 2. #9304 Buffer history events in memory when the Redis connection is lost. #9271 Add the previous soft state to the state tables. #9214 Add missing locking on object runtime updates. #9300 This version only includes changes needed for the release of Icinga DB 1.0.0 RC2 and doesn't include any other bugfixes or features. Prefix command_id with command type #9085 Decouple environment from Icinga 2 Environment constant #9082 Make icinga:history:stream:#event_id deterministic #9076 Add downtime.duration & servicestate.hostid to Redis #9084 Sync checkables along with their states first #9081 Flush both buffered states and state checksums on initial dump #9079 Introduce icinga:history:stream:downtime#scheduled_by #9080 Actually write parent to parent_id of zones #9078 Set value in milliseconds for program_start in stats/heartbeat #9077 Clean up vanished objects from icinga:checksum::state #9074 Remove usernotification history stream #9073 Write IDs of notified users into notification history stream #9071 Make CheckResult#scheduling_source available to Icinga DB #9072 Stream runtime state updates only to icinga:runtime:state #9068 Publish Redis schema version via XADD icinga:schema #9069 Don't include checkable types in history IDs #9070 Remove unused Redis key 'icinga:zone:parent' #9075 Make sure object relationships are handled correctly during runtime updates #9089 Only log queries at debug level #9088 The main focus of this version is a security vulnerability in the TLS certificate verification of our metrics writers ElasticsearchWriter, GelfWriter, InfluxdbWriter and Influxdb2Writer. Version 2.13.1 also fixes two issues indroduced with the 2.13.0 release. Add TLS server certificate validation to ElasticsearchWriter, GelfWriter, InfluxdbWriter and Influxdb2Writer () Depending on your setup, manual intervention beyond installing the new versions may be required, so please read the more detailed information in the carefully IDO PgSQL: Fix a string quoting regression introduced in 2.13.0 #8958 ApiListener: Automatically fall back to IPv4 in default configuration on systems without IPv6 support #8961 Upgrading docs: https://icinga.com/docs/icinga2/snapshot/doc/16-upgrading-icinga-2/#upgrading-to-v213 Thanks to all contributors: , , , , , , , , , , , , , , , , , , , , , , , , , Core PerfdataValue: Add units of measurement #7871 Flapping: Allow to ignore states in flapping detection #8600 Cluster Display log message if two nodes run on incompatible versions #8088 API /v1/actions/remove-downtime: Also remove child downtimes #8913 Add API endpoint: /v1/actions/execute-command #8040 /v1/actions/add-comment: Add param expiry #8035 API-Event StateChange & CheckResult: Add acknowledgement and downtime_depth #7736 Implement new API events ObjectCreated, ObjectDeleted and

#8083 Implement scheduling_endpoint attribute to checkable #6326 Windows Add support for Windows Event Log and write early log messages to it #8710 IDO MySQL: support larger host and service names #8425 ITL Add -S parameter for esxi_hardware ITL #8814 Add CheckCommands for Thola #8683 Add option ignore-sct for ssl_cert to ITL #8625 Improve check_dns command when used with monitoring-plugins 2.3 #8589 Add parameter -f to snmp-process #8569 Add systemd CheckCommand #8568 Add new options for ipmi-sensor #8498 checksnmpint: support -a #8003 checkfail2ban: Add parameter fail2banjail to monitor a specific jail only #7960 check_nrpe: Add parameters needed for PKI usage #7907 Metrics Support InfluxDB 2.0 #8719 Add support for InfluxDB basic auth #8314 Docs Add info about ongoing support for IDO #8446 Improve instructions on how to setup a Windows dev env #8400 Improve instructions for installing wixtoolset on Windows #8397 Add section about usage of satellites #8458 Document command for verifying the parent node's certificate #8221 Clarify TimePeriod/ScheduledDowntime time zone handling #8001 Misc Support TLS 1.3 #8718 Livestatus: append app name to program_version #7931 sd_notify() systemd about what we're doing right now #7874 Core Fix state not being UNKNOWN after process timeout #8937 Set a default severity for loggers #8846 Fix integer overflow when converting large unsigned integers to string #8742 StartUnixWorker(): don't exit() on fork() failure #8427 Fix perf data parser not recognizing scientific notation #8492 Close FDs based on /proc/self/fd #8442 Fix check source getting overwritten on passive check result #8158 Clean up temp files #8157 Improve perf data parser to allow for special output (e.g. ASCII tables) #8008 On check timeout first send SIGTERM #7918 Cluster Drop passive check results for unreachable hosts/services #8267 Fix state timestamps set by the same check result differing across nodes #8101 API Do not override status codes that are not 200 #8532 Update the SSL context after accepting incoming connections #8515 Allow to create API User with password #8321 Send Content-Type as API response header too #8108 Display a correct status when removing a downtime #8104 Display log message if a permission error occurs #8087 Replace broken package name validation regex #8825 #8946 Windows Fix Windows command escape for \" #7092 Notifications/Downtimes Fix no re-notification for non OK state changes with time delay #8562 TimePeriod/ScheduledDowntime: Improve DST handling #8921 Don't send notifications while suppressed by checkable #8513 Fix a crash while removing a downtime from a disappeared checkable #8229 IDO Update program status on stop #8730 Also mark objects inactive in memory on object deactivation #8626 IdoCheckTask: Don't override checkable critical with warn state #8613 PostgreSQL: Do not set standardconformingstrings to off #8123 ITL checkhttp: Fix assignment of checkadress blocking check by hostname #8109 check_mysql: Don't set -H if -s is given #8020 Metrics OpenTSDB-Writer: Remove incorrect space causing missing tag error #8245 Version 2.12.5 fixes two security vulnerabilities that may lead to privilege escalation for authenticated API users. Other improvements include several bugfixes related to downtimes, downtime notifications, and more reliable connection handling. Don't expose the PKI ticket salt via the API. This may lead to privilege escalation for authenticated API users by them being able to request certificates for other identities (CVE-2021-32739) Don't expose IdoMysqlConnection, IdoPgsqlConnection, IcingaDB, and ElasticsearchWriter passwords via the API (CVE-2021-32743) Windows: Update bundled OpenSSL to version 1.1.1k #8885 Depending on your setup, manual intervention beyond installing the new versions may be required, so please read the more detailed information in the carefully. Don't send downtime end notification if downtime hasn't started #8877 Don't let a failed downtime creation block the others #8863 Support downtimes and comments for checkables with long

#8864 Trigger fixed downtimes immediately if the current time matches (instead of waiting for the timer) #8889 Add configurable timeout for full connection handshake #8866 Replace existing downtimes on ScheduledDowntime change #8879 Improve crashlog #8865 Version 2.12.4 is a maintenance release that fixes some crashes, improves error handling and adds compatibility for systems coming with newer Boost versions. Fix a crash when notification objects are deleted using the API #8782 Fix crashes that might occur during downtime scheduling if host or downtime objects are deleted using the API #8785 Fix an issue where notifications may incorrectly be skipped after a downtime ends #8775 Don't send reminder notification if the notification is still suppressed by a time period #8808 Fix an issue where attempting to create a duplicate object using the API might result in the original object being deleted #8787 IDO: prioritize program status updates #8809 Improve exceptions handling, including a fix for an uncaught exception on Windows #8777 Retry file rename operations on Windows to avoid intermittent locking issues #8771 Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792 Version 2.12.3 resolves a security vulnerability with revoked certificates being renewed automatically ignoring the CRL. This version also resolves issues with high load on Windows regarding the config sync and not being able to disable/enable Icinga 2 features over the API. Fix that revoked certificates due for renewal will automatically be renewed ignoring the CRL (CVE-2020-29663) When a CRL is specified in the ApiListener configuration, Icinga 2 only used it when connections were established so far, but not when a certificate is requested. This allows a node to automatically renew a revoked certificate if it meets the other conditions for auto renewal (issued before 2017 or expires in less than 30 days). Because Icinga 2 currently (v2.12.3 and earlier) uses a validity duration of 15 years, this only affects setups with external certificate signing and revoked certificates that expire in less then 30 days. Improve config sync locking - resolves high load issues on Windows #8511 Fix runtime config updates being ignored for objects without zone #8549 Use proper buffer size for OpenSSL error messages #8542 On checkable recovery: re-check children that have a problem #8506 Version 2.12.2 fixes several issues to improve the reliability of the cluster functionality. Fix a connection leak with misconfigured agents #8483 Properly sync changes of config objects in global zones done via the API #8474 #8470 Prevent other clients from being disconnected when replaying the cluster log takes very long #8496 Avoid duplicate connections between endpoints #8465 Ignore incoming config object updates for unknown zones #8461 Check timestamps before removing files in config sync #8495 Include HTTP status codes in log #8467 Version 2.12.1 fixes several crashes, deadlocks and excessive check latencies. It also addresses several bugs regarding IDO, API, notifications and checks. Core Fix crashes during config update #8348 #8345 Fix crash while removing a downtime #8228 Ensure the daemon doesn't get killed by logrotate #8170 Fix hangup during shutdown #8211 Fix a deadlock in Icinga DB #8168 Clean up zombie processes during reload #8376 Reduce check latency #8276 IDO Prevent unnecessary IDO updates #8327 #8320 Commit IDO MySQL transactions earlier #8349 Make sure to insert IDO program status #8330 Improve IDO queue stats logging #8271 #8328 #8379 Misc Ensure API connections are closed properly #8293 Prevent unnecessary notifications #8299 Don't skip null values of command arguments #8174 Fix Windows .exe version #8234 Reset Icinga check warning after successful config update #8189 Upgrading

https://icinga.com/docs/icinga2/snapshot/doc/16-upgrading-icinga-2/#upgrading-to-v212 Thanks to all contributors: , , , , , , , , , , , , , , , Deprecate Windows plugins in favor of our Deprecate Livestatus #8051 Refuse acknowledging an already acknowledged checkable #7695 Config lexer: complain on EOF in heredocs, i.e. `{{{abc<EOF>` #7541 Core Implement new database backend: Icinga DB #7571 Re-send notifications previously suppressed by their time periods #7816 API Host/Service: Add `acknowledgementlastchange` and `next_update` attributes #7881 #7534 Improve error message for POST queries #7681 /v1/actions/remove-comment: let users specify themselves #7646 /v1/actions/remove-downtime: let users specify themselves #7645 /v1/config/stages: Add 'activate' parameter #7535 CLI Add `pki verify` command for better TLS certificate troubleshooting #7843 Add OpenSSL version to 'Build' section in --version #7833 Improve experience with 'Node Setup for Agents/Satellite' #7835 DSL Add `gettemplate()` and `gettemplates()` #7632 `MacroProcessor::ResolveArguments()`: skip null argument values #7567 Fix crash due to dependency apply rule with `ignoreonerror` and non-existing parent #7538 Introduce ternary operator (`x ? y : z`) #7442 LegacyTimePeriod: support specifying seconds #7439 Add support for Lambda Closures (`() use(x) => x and () use(x) => { return x }`) #7417 ITL Add notemp parameter to oracle health #7748 Add extended checks options to snmp-interface command template #7602 Add file age check for Windows command definition #7540 Docs Development: Update debugging instructions #7867 Add new API clients #7859 Clarify CRITICAL vs. UNKNOWN #7665 Explicitly explain how to disable freshness checks #7664 Update installation for RHEL/CentOS 8 and SLES 15 #7640 Add Powershell example to validate the certificate #7603 Misc Don't send `event::Heartbeat` to unauthenticated peers #7747 OpenTsdbWriter: Add custom tag support #7357 Core Fix JSON-RPC crashes #7532 #7737 Fix zone definitions in zones #7546 Fix deadlock during start on OpenBSD #7739 Consider PENDING not a problem #7685 Fix zombie processes after reload #7606 Don't wait for checks to finish during reload #7894 Cluster Fix segfault during heartbeat timeout with clients not yet signed #7970 Make the config update process mutually exclusive (Prevents file system race conditions) #7936 Fix `check_timeout` not being forwarded to agent command endpoints #7861 Config sync: Use a more friendly message when configs are equal and don't need a reload #7811 Fix open connections when agent waits for CA approval #7686 Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836 Send JsonRpcConnection heartbeat every 20s instead of 10s #8102 Use JsonRpcConnection heartbeat only to update connection liveness (m\_Seen) #8142 Fix TLS context not being updated on signed certificate messages on agents #7654 API Close connections w/o successful TLS handshakes after 10s #7809 Handle permission exceptions soon enough, returning 404 #7528 SELinux Fix safe-reload #7858 Allow direct SMTP notifications #7749 Windows Terminate check processes with UNKNOWN state on timeout #7788 Ensure that log replay files are properly renamed #7767 Metrics Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765 Always send 0 as value for thresholds #7696 Scripts Fix notification scripts to stay compatible with Dash #7706 Fix bash line continuation in mail-host-notification.sh #7701 Fix notification scripts string comparison #7647 Service and host mail-notifications: Add line-breaks to very long output #6822 Set correct UTF-8 email subject header (RFC1342) #6369 Misc DSL: Fix segfault due to passing null as custom function to `Array#{sort,map,reduce,filter,any,all}()` #8053 CLI: `pki save-cert`: allow to specify --key and --cert for backwards compatibility #7995 Catch exception when trusted cert is not readable during node setup on agent/satellite #7838 CheckCommand ssl: Fix wrong parameter `-N` #7741 Code quality fixes Small documentation fixes Upgrading docs: https://icinga.com/docs/icinga2/snapshot/doc/16-upgrading-icinga-2/#upgrading-to-v212 Thanks to all contributors: , , , , , , , , , , , , , , , , Refuse acknowledging an already acknowledged

#7695 Config lexer: complain on EOF in heredocs, i.e. `{{{abc<EOF>` #7541 Core Implement new database backend: Icinga DB #7571 API Host/Service: Add `acknowledgementlastchange` and `next_update` attributes #7881 #7534 Improve error message for POST queries #7681 /v1/actions/remove-comment: let users specify themselves #7646 /v1/actions/remove-downtime: let users specify themselves #7645 /v1/config/stages: Add 'activate' parameter #7535 CLI Add `pki verify` command for better TLS certificate troubleshooting #7843 Add OpenSSL version to 'Build' section in --version #7833 Improve experience with 'Node Setup for Agents/Satellite' #7835 DSL Add `gettemplate()` and `gettemplates()` #7632 `MacroProcessor::ResolveArguments()`: skip null argument values #7567 Fix crash due to dependency apply rule with `ignoreonerror` and non-existing parent #7538 Introduce ternary operator (`x ? y : z`) #7442 LegacyTimePeriod: support specifying seconds #7439 Add support for Lambda Closures (`() use(x) => x and () use(x) => { return x }`) #7417 ITL Add notemp parameter to oracle health #7748 Add extended checks options to snmp-interface command template #7602 Add file age check for Windows command definition #7540 Docs Development: Update debugging instructions #7867 Add new API clients #7859 Clarify CRITICAL vs. UNKNOWN #7665 Explicitly explain how to disable freshness checks #7664 Update installation for RHEL/CentOS 8 and SLES 15 #7640 Add Powershell example to validate the certificate #7603 Misc Don't send `event::Heartbeat` to unauthenticated peers #7747 OpenTsdbWriter: Add custom tag support #7357 Core Fix JSON-RPC crashes #7532 #7737 Fix zone definitions in zones #7546 Fix deadlock during start on OpenBSD #7739 Consider PENDING not a problem #7685 Fix zombie processes after reload #7606 Cluster Fix `check_timeout` not being forwarded to agent command endpoints #7861 Config sync: Use a more friendly message when configs are equal and don't need a reload #7811 Fix open connections when agent waits for CA approval #7686 Fix TLS context not being updated on signed certificate messages on agents #7654 API Close connections w/o successful TLS handshakes after 10s #7809 Handle permission exceptions soon enough, returning 404 #7528 SELinux Fix safe-reload #7858 Allow direct SMTP notifications #7749 Windows Terminate check processes with UNKNOWN state on timeout #7788 Ensure that log replay files are properly renamed #7767 Metrics Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765 Always send 0 as value for thresholds #7696 Scripts Fix notification scripts to stay compatible with Dash #7706 Fix bash line continuation in mail-host-notification.sh #7701 Fix notification scripts string comparison #7647 Service and host mail-notifications: Add line-breaks to very long output #6822 Set correct UTF-8 email subject header (RFC1342) #6369 Misc Catch exception when trusted cert is not readable during node setup on agent/satellite #7838 CheckCommand ssl: Fix wrong parameter `-N` #7741 Code quality fixes Small documentation fixes The main focus of these versions is a security vulnerability in the TLS certificate verification of our metrics writers ElasticsearchWriter, GelfWriter and InfluxdbWriter. Add TLS server certificate validation to ElasticsearchWriter, GelfWriter and InfluxdbWriter Depending on your setup, manual intervention beyond installing the new versions may be required, so please read the more detailed information in the carefully Version 2.11.10 fixes two security vulnerabilities that may lead to privilege escalation for authenticated API users. Other improvements include several bugfixes related to downtimes, downtime notifications, and more reliable connection handling. Don't expose the PKI ticket salt via the API. This may lead to privilege escalation for authenticated API users by them being able to request certificates for other identities (CVE-2021-32739) Don't expose IdoMysqlConnection, IdoPgsqlConnection, and ElasticsearchWriter passwords via the API (CVE-2021-32743) Windows: Update bundled OpenSSL to version 1.1.1k #8888 Depending on your setup, manual intervention beyond installing the new versions may be required, so please read the more detailed information in the

Don't send downtime end notification if downtime hasn't started #8878 Don't let a failed downtime creation block the others #8871 Support downtimes and comments for checkables with long names #8870 Trigger fixed downtimes immediately if the current time matches (instead of waiting for the timer) #8891 Add configurable timeout for full connection handshake #8872 Replace existing downtimes on ScheduledDowntime change #8880 Improve crashlog #8869 Version 2.11.9 is a maintenance release that fixes some crashes, improves error handling and adds compatibility for systems coming with newer Boost versions. Fix a crash when notification objects are deleted using the API #8780 Fix crashes that might occur during downtime scheduling if host or downtime objects are deleted using the API #8784 Fix an issue where notifications may incorrectly be skipped after a downtime ends #8772 Fix an issue where attempting to create a duplicate object using the API might result in the original object being deleted #8788 IDO: prioritize program status updates #8810 Improve exceptions handling, including a fix for an uncaught exception on Windows #8776 Retry file rename operations on Windows to avoid intermittent locking issues #8770 Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8793 #8802 Version 2.11.8 resolves a security vulnerability with revoked certificates being renewed automatically ignoring the CRL. This version also resolves issues with high load on Windows regarding the config sync and not being able to disable/enable Icinga 2 features over the API. Fix that revoked certificates due for renewal will automatically be renewed ignoring the CRL (CVE-2020-29663) When a CRL is specified in the ApiListener configuration, Icinga 2 only used it when connections were established so far, but not when a certificate is requested. This allows a node to automatically renew a revoked certificate if it meets the other conditions for auto renewal (issued before 2017 or expires in less than 30 days). Because Icinga 2 currently (v2.12.3 and earlier) uses a validity duration of 15 years, this only affects setups with external certificate signing and revoked certificates that expire in less then 30 days. Improve config sync locking - resolves high load issues on Windows #8510 Fix runtime config updates being ignored for objects without zone #8550 Use proper buffer size for OpenSSL error messages #8543 On checkable recovery: re-check children that have a problem #8560 Version 2.11.7 fixes several issues to improve the reliability of the cluster functionality. Fix a connection leak with misconfigured agents #8482 Properly sync changes of config objects in global zones done via the API #8473 #8457 Prevent other clients from being disconnected when replaying the cluster log takes very long #8475 Avoid duplicate connections between endpoints #8399 Ignore incoming config object updates for unknown zones #8459 Check timestamps before removing files in config sync #8486 Include HTTP status codes in log #8454 Version 2.11.6 fixes several crashes, prevents unnecessary notifications and addresses several bugs in IDO and API. Crashes Fix crashes during config update #8337 #8308 Fix crash while removing a downtime #8226 Ensure the daemon doesn't get killed by logrotate #8227 IDO Prevent unnecessary IDO updates #8316 #8305 Commit IDO MySQL transactions earlier #8298 Make sure to insert IDO program status #8291 Improve IDO queue stats logging #8270 #8325 #8378 API Ensure API connections are closed properly #8292 Fix open connections when agent waits for CA approval #8230 Close connections without successful TLS handshakes within 10s #8224 Misc Prevent unnecessary notifications #8300 Fix Windows .exe version #8235 Reset Icinga check warning after successful config update #8225 Version

fixes file system race conditions in the config update process occurring in large HA environments and improves the cluster connection liveness mechanisms. Make the config update process mutually exclusive (Prevents file system race conditions) #8093 Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094 Send JsonRpcConnection heartbeat every 20s instead of 10s #8103 Use JsonRpcConnection heartbeat only to update connection liveness (m\_Seen) #8097 Version 2.11.4 fixes a crash during a heartbeat timeout with clients not yet signed. It also resolves an issue with endpoints not reconnecting after a reload/deploy, which caused a lot of UNKNOWN states. Cluster Fix segfault during heartbeat timeout with clients not yet signed #7997 Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043 Setup Fix exception on trusted cert not readable during node setup #8044 prepare-dirs: Only set permissions during directory creation #8046 DSL Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054 The 2.11.3 release fixes a critical crash in our JSON-RPC connections. This mainly affects large HA enabled environments. Cluster JSON-RPC Crashes with 2.11 #7532 2.11.2 fixes a problem where the newly introduced config sync "check-change-then-reload" functionality could cause endless reload loops with agents. The most visible parts are failing command endpoint checks with "not connected" UNKNOWN state. Only applies to HA enabled zones with 2 masters and/or 2 satellites. Cluster Config Sync Config sync checksum change detection may not work within high load HA clusters #7565 This release fixes a hidden long lasting bug unveiled with 2.11 and distributed setups. If you are affected by agents/satellites not accepting configuration anymore, or not reloading, please upgrade. Cluster Config Sync Never accept authoritative config markers from other instances #7552 This affects setups where agent/satellites are newer than the config master, e.g. satellite/agent=2.11.0, master=2.10. Configuration Error message for `command_endpoint` should hint that zone is not set #7514 Global variable 'ActiveStageOverride' has been set implicitly via 'ActiveStageOverride ... #7521 Docs: Add upgrading/troubleshooting details for repos, config sync, agents #7526 Explain repository requirements for 2.11: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#added-boost-166 `command_endpoint` objects require a zone: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#agent-hosts-with-command-endpoint-require-a-zone Zones declared in zones.d are not loaded anymore: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#config-sync-zones-in-zones Upgrading docs: https://icinga.com/docs/icinga2/snapshot/doc/16-upgrading-icinga-2/ Thanks to all contributors: , , , , , , , , , , , , , , , , , , , , , , , , , Core Rewrite Network Stack (cluster, REST API) based on Boost Asio, Beast, Coroutines Technical concept: #7041 Requires package updates: Boost >1.66 (either from packages.icinga.com, EPEL or backports). SLES11 & Ubuntu 14 are EOL. Require TLS 1.2 and harden default cipher list Improved Reload Handling (umbrella process, now 3 processes at runtime) Support running Icinga 2 in (Docker) containers natively in foreground Quality: Use Modern JSON for C++ library instead of YAJL (dead project) Quality: Improve handling of invalid UTF8 strings API Fix crashes on Linux, Unix and Windows from Nessus scans #7431 Locks and stalled waits are fixed with the core rewrite in #7071 schedule-downtime action supports `all_services` for host downtimes Improve storage handling for runtime created objects in the `_api` package Cluster HA aware features & improvements for failover handling #2941 #7062 Improve cluster config sync with staging #6716 Fixed that same downtime/comment objects would be synced again in a cluster loop #7198 Checks & Notifications Ensure that notifications during a restart are sent Immediately notify about a problem after leaving a downtime and still NOT-OK Improve reload handling and wait for features/metrics Store notification command results and sync them in HA enabled

#6722 DSL/Configuration Add getenv() function Fix TimePeriod range support over midnight `concurrent_checks` in the Checker feature has no effect, use the global MaxConcurrentChecks constant instead CLI Permissions: node wizard/setup, feature, api setup now run in the Icinga user context, not root `ca list` shows pending CSRs by default, `ca remove/restore` allow to delete signing requests ITL Add new commands and missing attributes Windows Update bundled NSClient++ to 0.5.2.39 Refine agent setup wizard & update requirements to .NET 4.6 Documentation Service Monitoring: How to create plugins by example, check commands and a modern version of the supported plugin API with best practices Features: Better structure on metrics, and supported features Technical Concepts: TLS Network IO, Cluster Feature HA, Cluster Config Sync Development: Rewritten for better debugging and development experience for contributors including a style guide. Add nightly build setup instructions. Packaging: INSTALL.md was integrated into the Development chapter, being available at https://icinga.com/docs too. This is the first release candidate for 2.11. Upgrading docs: https://icinga.com/docs/icinga2/snapshot/doc/16-upgrading-icinga-2/ Thanks to all contributors: , , , , , , , , , , , , , , , , , , , , , Core Rewrite Network Stack (cluster, REST API) based on Boost Asio, Beast, Coroutines Technical concept: #7041 Requires package updates: Boost >1.66 (either from packages.icinga.com, EPEL or backports). SLES11 & Ubuntu 14 are EOL. Require TLS 1.2 and harden default cipher list Improved Reload Handling (umbrella process, now 3 processes at runtime) Support running Icinga 2 in (Docker) containers natively in foreground Quality: Use Modern JSON for C++ library instead of YAJL (dead project) Quality: Improve handling of invalid UTF8 strings API Fix crashes and problems with permission filters from recent Namespace introduction #6785 (thanks Elias Ohm) #6874 (backported to 2.10.5) Locks and stalled waits are fixed with the core rewrite in #7071 schedule-downtime action supports `all_services` for host downtimes Improve storage handling for runtime created objects in the `_api` package Cluster HA aware features & improvements for failover handling #2941 #7062 Improve cluster config sync with staging #6716 Checks & Notifications Ensure that notifications during a restart are sent Immediately notify about a problem after leaving a downtime and still NOT-OK Improve reload handling and wait for features/metrics Store notification command results and sync them in HA enabled zones #6722 DSL/Configuration Add getenv() function Fix TimePeriod range support over midnight `concurrent_checks` in the Checker feature has no effect, use the global MaxConcurrentChecks constant instead CLI Permissions: node wizard/setup, feature, api setup now run in the Icinga user context, not root `ca list` shows pending CSRs by default, `ca remove/restore` allow to delete signing requests ITL Add new commands and missing attributes - thanks to all contributors! Windows Update bundled NSClient++ to 0.5.2.39 Update agent installer and OpenSSL Documentation Service Monitoring: How to create plugins by example, check commands and a modern version of the supported plugin API with best practices. Features: Better structure on metrics, and supported features. Basics: Rename `Custom Attributes` to `Custom Variables`. Basics: Refine explanation of command arguments. Distributed: Reword `Icinga client` into `Icinga agent` and add new images for scenarios and modes. Security: Add TLS v1.2+ requirement, hardened cipher lists Technical Concepts: TLS Network IO, Cluster Feature HA, Cluster Config Sync, Core Reload Handling. Development: Rewritten for better debugging and development experience for contributors including a style guide. Add nightly build setup instructions. Packaging: INSTALL.md was integrated into the Development chapter available at https://icinga.com/docs too. Cluster config master must not load/sync its marker to other instances #7544 This affects scenarios where the satellite/agent is newer than the master, e.g. master=2.10.x satellite=2.11.0 Fix el7 not loading ECDHE cipher suites #7247 Core Fix crashes with logrotate

#6737 (thanks Elias Ohm) API Fix crashes and problems with permission filters from recent Namespace introduction #6785 (thanks Elias Ohm) #6874 (backported from 2.11) Reduce log spam with locked connections (real fix is the network stack rewrite in 2.11) #6877 Cluster Fix problems with replay log rotation and storage #6932 (thanks Peter Eckel) IDO DB Fix that reload shutdown deactivates hosts and hostgroups (introduced in 2.9) #7157 Documentation Improve the chapter: Unix timestamp handling, filters, unify POST requests with filters in the body Better layout for the chapter, specifically metrics and events Split into monitoring, runtime, features Add technical concepts for Fix TLS connections in Influxdb/Elasticsearch features leaking file descriptors (#6989 #7018 ref/IP/12219) Fixes for delayed and one-time notifications (#5561 #6757) Improve performance for downtimes/comments added in HA clusters (#6885 ref/IP/9235) check_perfmon supports non-localized performance counter names (#5546 #6418) (Windows, PR): Update Windows Agent with new design (Windows): Polish the Windows Agent design (Windows): check\_perfmon.exe: Add fallback support for localized performance counters (Elasticsearch, PR): ElasticsearchWriter: don't leak sockets (Elasticsearch): ElasticsearchWriter not closing SSL connections on Icinga2 2.10.3.1 (CLI, PR): PkiUtility::NewCa\(\): just warn if the CA files already exist (InfluxDB, PR): InfluxdbWriter: don't leak sockets (InfluxDB): InfluxdbWriter not closing connections Icinga2 2.10.3 CentOS 7 (Cluster, PR): Don't require OS headers to provide SO\_REUSEPORT (Notifications, PR): Notification\#BeginExecuteNotification\(\): SetNextNotification\(\) correctly (API, Configuration, PR): Don't run UpdateObjectAuthority for Comments and Downtimes (Plugins, Windows, PR): Fix check\_perfmon to support non-localized names (Notifications, PR): Fix that no\more\notifications gets reset when Recovery notifications are filtered away (Notifications): Set the notification mode times.begin is not 0, the first notification has a delay (Plugins, Windows): check\_perfmon.exe doesn't support cyrillic names of perf counters (Documentation, PR): Docs: Update supported package repos in Getting Started chapter (Documentation, PR): Fix heading level in development chapter (Documentation, PR): Assignment operators doc: tell what the { } are for (Documentation, PR): Typo and link fix (Documentation, PR): Doc: write systemd lower-case (Documentation, PR): Fix nested hostgroup example (Documentation, PR): Doc fix: update check\_rbl parameter (Documentation, PR): Docs: Alpine needs 'edge/main' repository too (Documentation): Documentation about dictionaries and assignements (code-quality, PR): Backport Defer class for 2.10 (Packages, PR): SELinux: add unreserved\port\type attribute to icinga2\port\t (Packages): Add unreserved\port\type attribute to icinga2\port\t (Plugins, Windows, PR): check\_network -h: drop non-existent feature (Tests): base-base\utility/comparepasswords\issafe test fails on i386 (Tests, PR): Ignore failure of unit test base\utility/comparepasswords\issafe Bugfixes: Stalled TLS connections on reload/Director deployments (#6816 #6898 ref/NC/588119) 'Connection: close' header leading to unstable instance, affects Ruby clients (#6799) Server time in the future breaks check result processing (#6797 ref/NC/595861) ScheduledDowntimes: Generate downtime objects only on one HA endpoint (#2844 ref/IC/9673 ref/NC/590167 ref/NC/591721) Improve activation & syncing for downtime objects generated from ScheduledDowntimes (#6826 ref/IC/9673 ref/NC/585559) Generate a runtime downtime object from already running ScheduledDowntime objects (#6704) DB IDO: Don't enqueue queries when the feature is paused in HA zones (#5876) Crashes with localtime_r errors (#6887) Documentation updates: Ephemeral port range blocking on Windows agents (ref/NC/597307) Technical concepts for the check scheduler (#6775) DB IDO cleanup (#6791) Unified development docs (#6819) (Notifications, PR): Activate downtimes before any checkable object (API, PR): Secure ApiUser::GetByAuthHeader\(\) against timing attacks (Plugins, Windows, PR): Fix check\_swap percentage calculation (Plugins, Windows, PR): Fix check\_swap formatting (PR): Fix double to long conversions (API, DB IDO): IDO MySQL fails on start if check\_interval is a float \(Icinga 2.9.2\) (PR): Downtime::AddDowntime\(\): place Downtimes in the same zone as the origin ScheduledDowntimes (Cluster, Log, PR): Cluster: Delete object message should log that (PR): Don't allow retry\_interval \<= 0 (Cluster, PR): ClusterEvents::AcknowledgementSet event should forward 'persistent' attribute (Plugins, Windows): check\_swap return value wrong when no swap file configured (API,

TcpSocket\#Bind\(\): also set SO\_REUSEPORT (PR): Log: Ensure not to pass negative values to localtime\(\) (API): API action restart-process fails on FreeBSD (Check Execution, PR): Fix checkresults from the future breaking checks (Check Execution, Windows): Icinga2 Windows Service does not start critical/checker: Exception occurred while checking 'hostname.tld' (Check Execution, PR): Allow Checkable\#retry\_interval to be 0 : Icinga2 crashes after localtime\_r call (Plugins, Windows, PR): Url\#m\_Query: preserve order (Configuration, PR): Downtime\#HasValidConfigOwner\(\): wait for ScheduledDowntimes (Cluster, Configuration, PR): Don't delete downtimes in satellite zones (Cluster, PR): Only create downtimes from non-paused ScheduledDowntime objects in HA enabled cluster zones (API, PR): HttpServerConnection\#DataAvailableHandler\(\): be aware of being called multiple times concurrently (API, Cluster): Stalled TLS connections and lock waits in SocketEventEngine (API, PR): Restore 'Connection: close' behaviour in HTTP responses (Plugins, Windows, PR): Fix state conditions in check\memory and check\swap (Plugins, Windows): Windows check\_memory never gets critical (API, PR): Remove redundand check for object existence on creation via API (API): \[2.10.2\] Director deploy crashes the Icinga service \[FreeBSD\] (API): "Connection: close" header leads to unstable instance (Check Execution): Servertime in the future breaks check results processing (Configuration, PR): \#6749 Wrong operator on stride variable causing incorrect behaviour (Configuration): Stride is misinterpreted in multi-date legacydatetime (CLI, PR): Fix api setup to automatically create the conf.d directory (API, Cluster, PR): Call SSL\_shutdown\(\) at least twice (Notifications, PR): Put newly configured already running ScheduledDowntime immediately in effect (Configuration, Log): /var/log/icinga2/icinga2.log is growing very fast on satellites (Windows, help wanted): check\nscp\api: Query arguments are sorted on Url::Format\(\) (Notifications): Newly configured already running ScheduledDowntime not put into effect (API): Icinga2 API: PUT request fails at 0-byte file (Cluster): Duplicated scheduled downtimes created in cluster HA zone (Documentation, PR): Escape pipe symbol in api documentation (Documentation, PR): Troubleshooting: Add notes on ephemeral port range blocking on Windows agents (Documentation, PR): Doc: Add .NET 3.5 to the windows build stack (Documentation, PR): Document that retry\_interval is only used after an active check result (Documentation, PR): Enhance and unify development docs for debug, develop, package (Documentation, PR): Docs: Add a section for DB IDO Cleanup (Documentation, PR): Doc fix: update apache section (Documentation, PR): Add technical docs for the check scheduler \(general, initial check, offsets\) (Documentation, PR): Doc fix: documentation link for apt (Documentation, PR): Doc fix: error in example path. (Documentation): Enhance development documentation (PR): Fix formatting in development docs (code-quality, PR): Debug: Log calls to ConfigObject::Deactivate\(\) (PR): Validate Zone::GetLocalZone\(\) before using (Windows): 2.10 is unstable \(Windows Agent\) (Tests, Windows, PR): Improve AppVeyor builds (code-quality, PR): SocketEvents: inherit from Stream (code-quality): SocketEvents: inherit from Object (PR): Fix deadlock in GraphiteWriter (Cluster): Hanging TLS connections (Log, PR): Fix possible double free in StreamLogger::BindStream\(\) : Icinga2.service state is reloading in systemd after safe-reload until systemd time-out (DB IDO, PR): DB IDO: Don't enqueue queries when the feature is paused \(HA\) (API, Cluster, PR): Ensure that API/JSON-RPC messages in the same session are processed and not stalled (Crash): Stability issues with Icinga 2.10.x (API, PR): Improve error handling for invalid child\_options for API downtime actions (API): Downtime name not returned when error occurs (API, Cluster): Slow API \(TLS-Handshake\) (PR): Fix the Icinga2 version check for versions with more than 5 characters (Compat, PR): Fix regression for wrong objects.cache path overwriting icinga2.debug file (CLI, Compat, Configuration): Crash "icinga2 object list" command with 2.10.1-1 on CentOS 7 : Check command 'icinga' breaks when vars.icinga\min\version is defined

(API): API TLS session connection closed after 2 requests (DB IDO): IDO Work queue on the inactive node growing when switching connection between redundant master servers (Documentation, PR): Docs: Add package related changes to the upgrading docs (Installation, Packages, PR): Initialize ICINGA2\ERROR\LOG inside the systemd environment (Tests, PR): Implement unit tests for Dictionary initializers (Packages, Tests, PR): armhf: Apply workaround for timer tests with std::bind callbacks (Packages): Crash when upgrading from 2.10.0 to 2.10.1 \(SELinux related\) (PR): Remove default environment, regression from e678fa1aa5 : v2.10.0 sets a default environment "production" in SNI (PR): Add missing shutdown/program state dumps for SIGUSR2 reload handler : State file not updated on reload (API, PR): Fix regression with API permission filters and namespaces in v2.10 (API): API process-check-result fails in 2.10.0 (Windows, PR): Initialize Configuration::InitRunDir for Windows and writing the PID file (Check Execution): Master Reload Causes Passive Check State Change : Reloads seem to reset the check atempt count. Also notifications go missing shortly after a reload. (Documentation, PR): Add GitHub release tag to README (Documentation, PR): Enhance the addon chapter in the docs (Documentation, PR): Update to https://icinga.com/ (Documentation, PR): Update release docs for Chocolatey (Documentation, PR): Extend 09-object-types.md with argument array (Documentation, PR): Add a note to the docs on \>2 endpoints in a zone (Documentation, PR): Update RELEASE docs (Documentation, PR): Extend upgrade docs (Documentation): Zone requirements changed in 2.10 - Undocumented Change (code-quality, PR): Fix spelling errors. (Packages, Windows): icinga does not start after Update to 2.10 Support for namespaces, details in Only send acknowledgement notification to users notified about a problem before, thanks for sponsoring to the More child options for scheduled downtimes Performance improvements and fixes for the TLS connections inside cluster/REST API Better logging for HTTP requests and less verbose object creation (e.g. downtimes via Icinga Web 2 & REST API) New configuration path constants, e.g. ConfigDir Fixed problem with dependencies rescheduling parent checks too fast Fixed problem with logging in systemd and syslog Improved vim syntax highlighting update with config compiler and TLS network IO (API, Log, PR): Silence config compiler logging for runtime created objects (API, Log, PR): Enable the HTTP request body debug log entry for release builds (API, Log, PR): Improve logging for disconnected HTTP clients (Plugins, PR): Add 'used' feature to check\_swap (API, Cluster, PR): Use a dynamic thread pool for API connections (Cluster, PR): Increase the cluster reconnect frequency to 10s (API, Cluster, PR): Add ApiListener\#tls\handshake\timeout option (Notifications): Allow types = \[ Recovery \] to always send recovery notifications (API, Cluster, PR): Allow to configure anonymous clients limit inside the ApiListener object (Configuration, PR): Add child\_options to ScheduledDowntime (API, PR): Expose Zone\#all\_parents via API (Notifications, PR): Acknowledgment notifications should only be send if problem notification has been send (Configuration, PR): Implement references (Cluster, PR): Refactor environment for API connections (Cluster, PR): ApiListener: Add support for dynamic port handling (Configuration, PR): Implement support for namespaces (Configuration, PR): Implement the Dictionary\#clear script function (PR): Improve path handling in cmake and daemon (Log, help wanted): Feature suggestion: Do not log warnings when env elements are undefined in CheckCommand objects (Log, PR): Log something when the Filelogger has been started (Configuration, PR): Throw config error when using global zones as parent (Log, PR): Fix logging under systemd (Log, help wanted): On systemd, icinga2 floods the system log, and this cannot simply be opted out of (Configuration, PR): Implement support for optionally specifying the 'var' keyword in 'for' loops (Notifications): Acknowledgment notifications should only be sent if the user already received a problem notification (API, Log): Icinga should log HTTP bodies for API requests (API, PR): Ensure that

or 'Connection: close' headers are properly disconnecting the client (Plugins, PR): Fix check\_memory thresholds in 'used' mode (CLI, PR): node setup: always respect --accept-config and --accept-commands (Check Execution, Notifications, PR): Fix that check\_timeout was used for Event/Notification commands too (Windows, PR): Ensure to \_unlink before renaming replay log on Windows (DB IDO, PR): Ensure to use UTC timestamps for IDO PgSQL cleanup queries (Check Execution, Cluster): CheckCommand 'icinga' seems to ignore retry interval via command\_endpoint : LTO builds fail on Linux (Cluster): Master disconnects during signing process (API, CLI, PR): Overridden path constants not passed to config validation in /v1/config/stages API call (DB IDO, PR): IDO/MySQL: avoid empty queries (CLI, PR): Reset terminal on erroneous console exit (Cluster): Not all Endpoints can't reconnect due to "Client TLS handshake failed" error after "reload or restart" (API): API using "Connection: close" header results in infinite threads (Cluster): Variable name conflict in constants.conf / Problem with TLS verification, CN and Environment variable (Log, PR): Reduce the log level for missing env macros to debug (Log): Icinga logs discarding messages still as warning and not as notice (Compat, PR): lib-\>compat-\>statusdatawriter: fix notifications\_enabled (Log, PR): Fix negative 'empty in' value in WorkQueue log message (Configuration, Crash, PR): Improve error message for serializing objects with recursive references (Configuration, Crash): Assigning vars.x = vars causes Icinga 2 segfaults (PR): ObjectLock\#Unlock\(\): don't reset m\Object-\>m\LockOwner too early (Configuration, PR): Fix that TimePeriod segments are not cleared on restart (CLI, help wanted): icinga2 console breaks the terminal on errors (Plugins, Windows, PR): Fix wrong calculation of check\_swap windows plugin (Configuration, Notifications): Timeout defined in NotificationCommand is ignored and uses check\_timeout (Plugins, Windows): swap-windows check delivers wrong result (Check Execution, PR): Parents who are non-active should not be rescheduled (Cluster, Windows): Replay log not working with Windows client (Check Execution): Dependencies may reschedule passive checks, triggering freshness checks (ITL, PR): Update ITL and Docs for memory-windows - show used (ITL): Update ITL and Docs for memory-windows - show used (ITL, PR): \[Feature\] Cloudera service health CheckCommand (ITL, PR): \[Feature\] Ceph health CheckCommand (ITL, PR): squashfs ignored (ITL, PR): Feature/itl vmware health (ITL): command-plugins.conf check\_disk exclude squashfs (Documentation, PR): Add technical concepts for the config compiler and daemon CLI command (Documentation, PR): Make the two modes of check\_http more obvious. (Documentation, PR): Update distributed monitoring docs for 2.10 (Documentation, PR): Add "TLS Network IO" into technical concepts docs (Documentation, PR): Enhance development docs with GDB backtrace and thread list (Documentation, PR): Enhance contributing docs (Documentation, PR): doc/09-object-types: states filter ignored for Acknowledgements (Documentation, PR): Add Fedora to development docs for debuginfo packages (Documentation, help wanted): Include CA Proxy in 3rd scenario in Distributed Monitoring docs (Documentation, PR): Fix operator precedence table (Documentation, PR): Document default of User\#enable\_notifications (Documentation, PR): Update 17-language-reference.md (Documentation, PR): Update 03-monitoring-basics.md (Documentation, ITL, PR): Fix typo with the CheckCommand cert (PR): Don't throw an error when namespace indexers don't find a valid key (Installation, PR): Enhance vim syntax highlighting for 2.10 (API, Log, code-quality, PR): Cache the peer address in the HTTP server (PR): Allow to override MaxConcurrentChecks constant (code-quality, PR): Remove unused timestamp function in DB IDO (PR): Silence compiler warning for nice\(\) (PR): Fix static initializer priority for namespaces in LTO builds (PR): Fix using full path in prepare-dirs/safe-reload scripts (PR): Fix non-unity builds on CentOS 7 with std::shared\_ptr (Documentation, Installation, PR): Update PostgreSQL library path variable in INSTALL.md (PR): Move new downtime constants into the Icinga namespace (Cluster, PR): Increase limit for simultaneously connected anonymous TLS clients (PR): ApiListener: Dump the state file port detail as number (Installation, Windows, PR): windows: Allow suppression of extra actions in the MSI package (code-quality, PR):

\#include for deprecated header file (PR): Build fix for CentOS 7 and non-unity builds (code-quality, PR): icinga::PackObject\(\): shorten conversion to string (Tests, Windows, PR): Update windows build scripts (Tests, PR): Test PackObject (code-quality, PR): Implement object packer for consistent hashing (Packages): Packages from https://packages.icinga.com are not Systemd Type=notify enabled? (Installation, Windows, PR): Fix Windows Agent resize behavior (code-quality, PR): Fix debug build log entry for ConfigItem activation priority (code-quality, PR): Keep notes for immediately log flushing (code-quality, PR): Fix typo (code-quality, PR): Remove unused code (Installation, Windows): Windows Agent Wizard Window resizes with screen, hiding buttons Fix el7 not loading ECDHE cipher suites #7247 Fix checkresults from the future breaking checks #6797 ref/NC/595861 DB IDO: Don't enqueue queries when the feature is paused (HA) #5876 (API, Cluster, PR): Improve TLS handshake exception logging (Configuration, PR): Ensure that config object types are committed in dependent load order (Configuration, PR): Improve error logging for match/regex/cidr\_match functions and unsupported dictionary usage (Crash, PR): Fix crash on API queries with Fedora 28 hardening and GCC 8 (Configuration, PR): Shuffle items before config validation (DB IDO): Custom Vars not updated after upgrade (Crash): Icinga2 crashes after using some api-commands on Fedora 28 (Cluster, PR): Fix clusterzonecheck if not connected (Configuration, PR): Fix regression with MatchAny false conditions on match/regex/cidr\_match (Configuration): error with match and type matchany (DB IDO, Documentation, PR): Update workaround for custom vars (Documentation, PR): Add note about workaround for broken custom vars (Configuration): Evaluate a fixed config compiler commit order (Configuration): Configuration validation w/ ScheduledDowntimes performance decreased in 2.9 (Configuration): Error while evaluating "assign where match" expression: std::bad\_cast (PR): Ensure that timer thread is initialized after Daemonize\(\) : icinga r2.9.0-1 init.d script overrides PATH variable : Problem with daemonize \(init scripts, -d\) on Debian 8 / CentOS 6 / Ubuntu 14 / SLES 11 in 2.9 (PR): SELinux: allow systemd notify : selinux and 2.9 (code-quality, PR): Fix spelling errors. (Tests, PR): Start and stop the timer thread lazily (Tests): Broken tests with fix from \#6457 (Packages, PR): Fix initscripts (Packages): init script helpers - source: not found Elasticsearch 6 Support icinga health check supports minimum version parameter, ido thresholds for query rate, dummy check is executed in-memory, avoids plugin call `ApplicationVersion` constant in the configuration Setup wizards: global zone, disable

inclusion, unified parameter handling TTL support for check results, pretty formatting for REST API queries TLS support for IDO PostgreSQL Improvements for check scheduling, concurrent checks with command endpoints, downtime notification handling, scheduled downtimes and memory handling with many API requests (Plugins, Windows, PR): Enhance debug logging for check\nscp\api (Log, PR): Update log message for skipped certificate renewal (PR): Introduce the 'Environment' variable (Check Execution, Log, PR): Change log level for failed event command execution (CLI, Log, PR): Add support for config validation log timestamps (Configuration, PR): Add activation priority for config object types (DB IDO, PR): Add TLS support for DB IDO PostgreSQL feature (Elasticsearch, PR): Add support for Elasticsearch 6 (DB IDO): IDO pgsql with TLS support (CLI, PR): Unify zone name settings in node setup/wizard; add connection-less mode for node setup (CLI): Add connection-less support for node setup CLI command (Configuration, PR): Add ApplicationVersion built-in constant (API, PR): API: Unify verbose error messages (Elasticsearch, Graylog, PR): Elasticsearch/GELF: Add metric unit to performance data fields (Configuration, Windows, PR): Add option to windows installer to add global zones (API, Log): Review API debugging: verboseErrors and diagnostic information (Check Execution, PR): Add counter for current concurrent checks to Icinga check (Log, PR): Log which ticket was invalid on the master (Plugins, PR): Add 'used' feature to check\_memory (Notifications, PR): Fixed URL encoding for HOSTNAME and SERVICENAME in mail notification (Check Execution, PR): Add more metrics and details to built-in 'random' check (Configuration, PR): Improve location info for some error messages (Compat): Deprecate StatusDataWriter (Compat): Deprecate CompatLogger (Cluster, PR): Move the endpoint list into a new line for the 'cluster' check (PR): Add systemd watchdog and adjust reload behaviour (DB IDO, PR): Add query thresholds for the 'ido' check: Rate and pending queries (CLI, PR): Add quit, exit and help (API, Check Execution, PR): Add 'ttl' support for check result freshness via REST API (API, PR): API: Add 'pretty' parameter for beautified JSON response bodies (Elasticsearch): Add support for Elasticsearch 6 (DB IDO, PR): FindMySQL: Support mariadbclient implementation (API): Add pretty format to REST API parameters \(for debugging\) (CLI, PR): Update NodeName/ZoneName constants with 'api setup' (CLI, PR): Implement ability to make global zones configurable during node wizard/setup (Plugins, Windows, PR): Make --perf-syntax also change short message (CLI, Cluster, PR): Correct node wizard output formatting (InfluxDB, PR): Add pdv unit to influxdbwriter if not empty + doc (InfluxDB, Metrics): InfluxDBWriter: Send metric unit \(perfdata\) (CLI, Cluster, Configuration): Disable conf.d inclusion in node setup wizards (Cluster, wishlist): Add metrics about communication between endpoints (Cluster): Display endpoints in the second line of the ClusterCheckTask output (CLI, Configuration, PR): Add the ability to disable the conf.d inclusion through the node wizard (Plugins, Windows): Feature request: check\_perfmon.exe - Change name of counter in output (CLI, Cluster): Unify setting of master zones name (CLI): node wizard/setup: allow to disable conf.d inclusion (API, Log): startup.log in stage dir has no timestamps (CLI, help wanted, wishlist): Add option to Windows installer to add global zone during setup (help wanted, wishlist): Please support systemd startup notification (PR): Make HttpServerConnection\#m\DataHandlerMutex a boost::recursive\mutex (API): Director kickstart wizard querying the API results in TLS stream disconnected infinite loop (Plugins, Windows, PR): Windows: Conform to the Plugin API spec for performance label quoting (Windows, PR): Fix wrong UOM in check\_uptime windows plugin (Windows, PR): TcpSocket\#Bind\(\): reuse socket addresses on Windows, too (API, PR): Conform to RFC for CRLF in HTTP requests (Elasticsearch, InfluxDB, PR): Fix connection error handling in Elasticsearch and InfluxDB features (Plugins, Windows, PR): TlsStream\#IsEof\(\): fix false positive EOF indicator (Crash, Elasticsearch): Icinga will throw an exception, if ElasticSearch is not reachable (API, Elasticsearch, PR): Stream\#ReadLine\(\): fix false positive buffer underflow indicator (Configuration, Crash, Windows, PR): Remove ApiUser password\_hash functionality (API, CLI, PR): HttpRequest\#ParseBody\(\): indicate success on complete body (Windows): Analyze Windows reload behaviour (API, Cluster, PR): ApiListener\#NewClientHandlerInternal\(\): Explicitly close the TLS stream on any failure (CLI, PR): Fix program option parsing (CLI): Different behavior between `icinga2 -V` and `icinga2 --version` (API): HTTP header size too low: Long URLs and session cookies cause bad requests (Elasticsearch): ElasticsearchWriter not writing to ES (Log, PR): Fix unnecessary blank in log message (Crash, PR): Ensure that password hash generation from OpenSSL is atomic (Windows): Windows service restart fails and config validate runs forever (Cluster, PR): Execute event commands only on actively checked host/service objects in an HA zone (API, Configuration, PR): Ensure that group memberships on API object creation are unique (Notifications, PR): Fix problem with reminder notifications if the checkable is flapping (OpenTSDB, PR): Fixed opentsdb metric name with colon chars (Configuration): Issue when using excludes in TimePeriod Objects (Crash): segfault with sha1\block\data\order\avx of libcrypto (Configuration): On debian based systems /etc/default/icinga2 is not read/used (Plugins, Windows): Sporadic check\nscp\api timeouts (Plugins, Windows, PR): Fix Windows check\_memory rounding (Notifications): icinga2.8 - Notifications are sent even in downtime (PR): attempt to fix

\#5277 (Check Execution, PR): Fix check behavior on restart (API, PR): API: Check if objects exists and return proper error message (API, Crash, PR): Fix crash in remote api console (Crash, Graylog, PR): GelfWriter: Fix crash on invalid performance data metrics (API): debug console with API connection sometimes hangs since 2.8.2 (Configuration, PR): Fix description of the NotificationComponent in notification.conf (API, PR): Allow to pass raw performance data in 'process-check-result' API action (Notifications): Icinga2 sends notifications without logging about it and despite having a downtime (CLI, PR): Fix crash when running 'icinga2 console' without HOME environment variable : icinga2 console -r crashes when run without a HOME environment variable (Notifications, PR): Check notification state filters for problems only, not for Custom, etc. (Check Execution, Cluster, PR): Fix concurrent checks limit while using command\_endpoint (Metrics, OpenTSDB, PR): OpenTSDB writer - Fix function for escaping host tag chars. (Metrics, OpenTSDB): OpenTSDB writer is escaping wrong chars for host names. (Notifications): Custom notifications are filtered by object state (PR): Remove deprecated Chocolatey functions (PR): Fix build problem with MSVC (Windows): Icinga2 fails to build on Windows (PR): Do not replace colons in plugin output (PR): Workaround for GCC bug 61321 : Icinga2 fails to build (PR): Replace incorrect fclose\(\) call with pclose\(\) (PR): Fix glob error handling (PR): Fix incorrect memory access (PR): Fix memory leaks in the unit tests (Plugins, Windows, PR): Fix missing space in check\_service output (Elasticsearch, PR): Fix newline terminator for bulk requests in ElasticsearchWriter (CLI, PR): Fix error reporting for 'icinga2 console -r' (Elasticsearch): ElasticsearchWriter gives "Unexpected response code 400" with Elasticsearch 6.x (API): "icinga2 api setup" should explicitly set the NodeName constant in constants.conf (API, Cluster, Metrics, PR): Fix that RingBuffer does not get updated and add metrics about communication between endpoints (API, PR): API: Fix http status codes (API): Verify error codes and returned log messages in API actions (Notifications): Flexible downtime is expired at end\time, not trigger\time+duration (API): Wrong HTTP status code when API request fails (Check Execution): Initial checks are not executed immediately (API): API: Command process-check-result fails if it contains performance data (Compat): Semicolons in plugin output are converted to colon (API, Configuration): Duplicate groups allowed when creating host (Check Execution): New objects not scheduled to check immediately (Cluster, Configuration): Duplicating downtime from ScheduledDowntime object on each restart (Cluster): Eventhandler trigger on all endpoints in high available zone (ITL, PR): New ITL command nscp-local-tasksched (ITL, PR): Fix for catalogued locally databases. Fixes \#6338 (ITL): db2\_health not working with catalogued databases, as --hostname is always used (ITL, PR): Update lsi-raid ITL command (ITL, PR): ITL: Add default thresholds to windows check commands (ITL, PR): itl/disk: Ignore overlay and netfs filesystems (ITL, PR): Move the "passive" check command to command-icinga.conf (ITL): ITL "plugins" has an implicit dependency on "itl" (ITL, PR): ITL by\_ssh add -E parameter (ITL, PR): Add minimum version check to the built-in icinga command (ITL, PR): ITL: Add mongodb --authdb parameter support (ITL, PR): itl: Add command parameters for snmp-memory (ITL, PR): Add icingacli-director check to ITL (ITL): Add Check for Director Jobs to ITL (ITL, PR): Fix for wrong attribute in ITL mongodb CheckCommand (ITL, PR): Add check\_openmanage command to ITL. (ITL, PR): Add parameter --octetlength to snmp-storage command. (ITL): mongodb\address vs mongodb\host (ITL): Better way to check required parameters in notification scripts (ITL, PR): Add support for LD\LIBRARY\PATH env variable in oracle\_health ITL CheckCommand (ITL, PR): ITL: Add check\_rpc (Check Execution, ITL): random check should provide performance data metrics (Check Execution, ITL, PR): Implement DummyCheckTask and move dummy into embedded in-memory checks (ITL, PR): add order tags to disk check (ITL): disk check in

lacks order tags (ITL): CheckCommand mongodb does not expose authdb option (Documentation, PR): Update tested Elasticsearch version (Documentation, PR): Add note on sysconfig shell variables for Systemd to the Upgrading docs (Documentation, PR): Docs: Fix typos in 03-monitoring-basics.md (Documentation, PR): Update 'Upgrading to 2.9' docs (Documentation, PR): Fix table in Livestatus Filters (Documentation, PR): Docs: Fix icinga.com link (Documentation, Windows, PR): Docs: Update Windows wizard images (Documentation, PR): some minor fixes in the flapping documentation (Documentation, PR): Docs: Add an additional note for VMWare timeouts on Ubuntu 16.04 LTS (Documentation, PR): Drop command template imports for versions \< 2.6 in the docs (Documentation, PR): Remove the import of 'legacy-timeperiod' in the docs (Documentation, PR): clarify the permision system of the api in the docs (Documentation, PR): README: Fix broken community link (Documentation, PR): Fix $ipaddress6$ attribute name typo in the docs (Documentation, PR): Add a note on Windows NSClient++ CPU checks to the docs (Documentation, PR): Update release documentation with git tag signing key configuration (Documentation): Update Windows wizard screenshots in the docs (Documentation, PR): edit Icinga license info so that GitHub recognizes it (Documentation, PR): Enhance advanced topics with \(scheduled\) downtimes (Documentation, PR): Update docs to reflect required user\ attributes for notification objects (Documentation): Notifications user/user\_groups required (Documentation, PR): Enhance "Getting Started" chapter (Documentation, PR): Enhance the environment variables chapter (Documentation, PR): Enhance release documentation (Documentation, PR): Doc: Add note for not fully supported Plugin collections (Documentation, PR): Update PostgreSQL documentation (Documentation, PR): Fix broken SELinux anchor in the documentation (Documentation, PR): Update volatile docs (Documentation): Volatile service explanation (Documentation, PR): Doc: fixed wrong information about defaulting (Documentation, PR): Adding documentation for configurable global zones during setup (Documentation, Windows, PR): Improve Windows builds and testing (Configuration, Documentation, PR): Update default config and documentation for the "library" keyword (Documentation): Move init configuration from getting-started (Documentation, PR): Add newline to COPYING to fix Github license detection (Documentation, PR): doc: Improve INSTALL documentation (Check Execution, Documentation): How to set the HOME environment variable (PR): Revert "Fix obsolete parameter in Systemd script" (PR): Fix missing next check update causing the scheduler to execute checks too often (Check Execution): High CPU load due to seemingly ignored check\_interval (Plugins, Windows, PR): Fix output formatting in windows plugins (Cluster, code-quality, PR): Use SSL\_pending\(\) for remaining TLS stream data (PR): Remove leftover for sysconfig file parsing (Packages, PR): Fix sysconfig not being handled correctly by sysvinit (code-quality, PR): Fix missing name for workqueue while creating runtime objects via API (code-quality): lib/base/workqueue.cpp:212: assertion failed: !m\_Name.IsEmpty\(\) (API, Cluster): Analyse socket IO handling with HTTP/JSON-RPC (Configuration, PR): Fix ScheduledDowntimes replicating on restart (API, PR): Increase header size to 8KB for HTTP requests (Packages, PR): SELinux: Allow notification plugins to read local users (Check Execution, Cluster, PR): Fix that checks with command\_endpoint don't return any check results : Checks via command\_endpoint are not executed \(snapshot packages only\) (Installation, Packages, PR): Rework sysconfig file/startup environment (PR): Ensure that icinga\min\version parameter is optional (PR): Fix compiler warning in checkercomponent.ti (code-quality, PR): Adjust message for CheckResultReader deprecation (Documentation, code-quality, PR): Adjust deprecation removal for compat features (Compat, PR): Deprecate compatlog feature (Notifications, PR): Implement better way to check parameters in notification scripts (Check Execution): Verify next check execution on daemon reload (Packages, PR): Don't use shell variables in sysconfig (Packages): Reload-internal with unresolved shell variable (Windows, PR): Handle exceptions from X509Certificate2 (API, PR): Return 500 when no api action is successful (Compat, PR): Deprecate Statusdatawriter (code-quality, PR): Remove Icinga Studio Screenshots (Tests, PR): tests: Ensure IcingaApplication is initialized before adding config (API, PR): Fix crash without CORS setting (API, Crash): Using the API crashes Icinga2 in

(code-quality, PR): Update copyright of the Windows Agent to 2018 (PR): Fix reload handling by updating the PID file before process overtake (code-quality, PR): Replace std::vector:push\_back calls with initializer list (PR): Require systemd headers (Tests, PR): appveyor: Disable artifacts until we use them (code-quality, PR): Allow MYSQL\_LIB to be specified by ENV variable (Tests): Snapshot builds fail on livestatus tests (API, code-quality, PR): Clean up CORS implementation (Cluster, Crash, PR): Fix crash with anonymous clients on certificate signing request and storing sent bytes (Log, code-quality, PR): Fix wrong type logging in ConfigItem::Commit (Installation, Packages): PID file removed after reload (Compat, PR): Deprecate CheckResultReader (code-quality, PR): Remove the obsolete 'make-agent-config.py' script (code-quality, PR): Remove jenkins test scripts (code-quality, PR): Remove Icinga development docker scripts (code-quality, PR): Remove Icinga Studio (code-quality, PR): Clean up the Icinga plugins a bit (Check Execution, Windows, code-quality, PR): methods: Remove unused clrchecktask feature (Check Execution, Windows, code-quality): Remove unused clrchecktask (code-quality, PR): Set FOLDER cmake property for the icingaloader target (code-quality, PR): Replace boost::algorithm::split calls with String::Split (code-quality, PR): Implement support for frozen arrays and dictionaries (PR): Fix missing include for boost::split (PR): Fix build error on Windows (code-quality, PR): Remove duplicate semicolons (Packages): python notification not running when icinga ran as a service (Check Execution, Windows, PR): Fix flapping support for Windows (Windows): Implement Flapping on Windows : Icinga should check whether the libsystemd library is available (PR): Remove build breaking include (code-quality, PR): Fix whitespaces in CMakeLists files (PR): Build fix for ancient versions of GCC (PR): Fix compatibility with CMake \< 3.1 (PR): Fix missing include (PR): Fix incorrect dependencies for mkunity targets (PR): Build fix (code-quality, PR): Build all remaining libraries as object libraries (PR): Use gcc-ar and gcc-ranlib when building with -flto (InfluxDB, PR): InfluxDBWriter: Fix macro in template (code-quality, PR): Use CMake object libraries for our libs (code-quality, PR): Remove unused includes (DB IDO, PR): Fix missing static libraries for DB IDO (code-quality, PR): Use initializer lists for arrays and dictionaries (code-quality, PR): Explicitly pass 1 or 0 for notification filters in DB IDO (PR): Fix non-unity builds with the icinga check (code-quality, PR): Remove libdemo and libhello (code-quality, PR): Allocate ConfigItemBuilder objects on the stack (code-quality, PR): Remove the WorkQueue::m\_StatsMutex instance variable (code-quality, PR): Update the RingBuffer class to use a regular mutex instead of ObjectLock (code-quality, PR): Avoid accessing attributes for validators where not necessary (code-quality, PR): Avoid unnecessary casts in the JSON encoder (PR): Fix macro warning from the icinga check : Macro warning from the icinga check (code-quality, PR): Change a bunch more copyright headers for 2018 (Configuration, code-quality, PR): Avoid mutex contention in the config parser (code-quality, PR): Use clang-tidy to add some more C++11 features (code-quality, PR): Fix incorrect indentation for code generated by mkclass (code-quality, PR): Add the final keyword to classes (PR): Build fix for Debian wheezy (code-quality, PR): Remove inline methods and use explicit template instantiation to minimize the number of weak symbols (code-quality, PR): Clean up source lists in the CMakeLists.txt files (code-quality, PR): Implement support for precompiled headers (code-quality, PR): Add more include/library paths for MySQL and PostgreSQL (code-quality, PR): Change copyright headers for 2018 (code-quality, PR): Fix copyright header in cli/troubleshootcommand.hpp (code-quality, PR): Improve detection for linker flags (code-quality, PR): Replace boost::function with std::function (code-quality, PR): Get rid of boost::assign::list\_of in mkclass (code-quality, PR): Build libraries as static libraries (code-quality, PR): WIP: Improve build times (code-quality, PR): Cleanup CompatUtility class and features (code-quality, PR): Remove unnecessary inline statements (code-quality, PR): Remove string\_iless (code-quality, PR): Update

(code-quality, PR): execvpe: Fixup indention for readability (PR): Windows build fix (code-quality): Remove unnecessary 'inline' keyword (code-quality, PR): Avoid unnecessary allocations (code-quality, PR): Unit tests for the LegacyTimePeriod class (Configuration, code-quality, PR): Use std::unique\_ptr for Expression objects (code-quality, PR): Add missing initializer in Utility::NewUniqueID\(\) (code-quality, PR): Replace a few more NULLs with nullptr (Tests, code-quality, PR): Travis: Add support for Coverity (code-quality, PR): Fix compiler warnings (PR): Fix build problems with Visual Studio 2017 (code-quality, PR): Fix COPYING format (code-quality, PR): Fix compiler warnings (Check Execution, Configuration): No checks were launched on snapshot version 2.8.0.71 \(RHEL6\) (code-quality, PR): Replace StatsFunction with Function (code-quality, PR): Replace boost::assign::list\_of with initializer lists (code-quality, PR): Replace a few Boost features with equivalent C++11 features (Packages, Windows): check\_disk build error (code-quality, PR): Avoid unnecessary allocations in the FunctionCallExpression class (code-quality, PR): Re-implement WrapFunction\(\) using C++11 features (Documentation, Installation, PR): Raise required OpenSSL version to 1.0.1 (Documentation, Packages): Completely remove the spec file from the icinga2 repository (CLI, Configuration, Installation): node setup: Deprecate --master\host and use --parent\host instead (code-quality, PR): Use real UUIDs for Utility::NewUniqueID (Packages, PR): Handle mis-detection with clang on RHEL/CentOS 7 (Installation): Add option to windows installer to disable inclusion of conf.d directory (Check Execution): Plugins crash when run from icinga2-2.8.3 (Check Execution, PR): Revert "fixup set rlimit stack failed condition" Fix InfluxDB backslash escaping Fix Elasticsearch crash on invalid performance data Sysconfig file settings are taken into account Support multiple parameters for checknscpapi Documentation enhancements and fixes (Plugins, Windows, PR): Fix multiple parameter problems for check\nscp\api (InfluxDB, Metrics, PR): Fix InfluxDB backslash escaping (Crash, Elasticsearch, PR): Elasticsearch: Fix crash with invalid performance data metrics (Crash, Elasticsearch): Invalid Perfdata causing Segmentation fault with ElasticsearchWriter (InfluxDB): Windows Disk performance data broken in InfluxDB (CLI, Crash, PR): Fix crash in api user command (API, Crash): Error: boost::bad\any\cast: failed conversion using boost::any\_cast : Force check has no effect (PR): fixup set rlimit stack failed condition (Crash, PR): Fix missing variable name in ApiListener::Start (Crash): The lock variable in ApiListener::Start is missing its name (API, PR): Fix package error message (Plugins, Windows): nscp\api - cannot use check\cpu with "time" argument used multiple times (Documentation, PR): Fix missing anchors in CLI commands chapter (Documentation, PR): Add docs for script debugger and API filters (Documentation, PR): Doc: Fix typo in API user creation example (Documentation, PR): hashed\password -\> password\hash. Fixes \#6175 (Documentation): ApiUser does not know hashed\_password Attribute (Documentation, PR): Fix broken link in README (Documentation, PR): Fix incorrect parameter name in the API documentation (Documentation, PR): Fix typo in Apply for Rules documentation (Documentation, PR): Document the 'ignore\on\error' attribute for object creation (Documentation, PR): Fix the explanation of `types` and `states` for user objects (Documentation, ITL, PR): Enhance http\_certificate parameter documentation (Documentation, PR): services.conf has also be moved to zones.d/global-templates/ (Documentation): Document the ignore\on\error parameter for CreateObjectHandler::HandleRequest (Documentation, ITL): http check doesn't map the critical ssl certificate age option (PR): Fix typo (Packages, PR): Fix Sysconfig file detection for Icinga 2 settings (PR): Unbreak build against Boost 1.67 (Configuration, Packages): Sysconfig limits and settings are not respected (Packages, code-quality, PR): Use VERSION instead of icinga2.spec A bugfix release with a focus on security. Most of these have been brought to our attention by the community and we are very thankful for that. Special thanks to Michael H., Julian and Michael O., who helped by reporting and assisting us in fixing security bugs. CVEs have also been requested for these issues, they are as follows: CVE-2017-16933, CVE-2018-6532, CVE-2018-6533, CVE-2018-6534, CVE-2018-6535,

(API, PR): Hash API password and comparison (API, PR): Improve error handling for empty packages in /v1/config/packages (PR): Fix incorrect argument type for JsonRpc::SendMessage (PR): Ensure that SetCorked\(\) works properly (PR): Fix incorrect HTTP content length limits (PR): Limit the number of HTTP/JSON-RPC requests we read in parallel (PR): Fix HTTP parser crash/hang : api/packages not created by prepare-dir/daemon (InfluxDB, PR): Fix InfluxDB requests : Partial privilege escalation via PID file manipulation (Elasticsearch, InfluxDB, Metrics): InfluxDBWriter and ElasticsearchWriter stop writing to HTTP API (PR): Fix incorrect ::Start call : CVE-2017-16933: root privilege escalation via prepare-dirs \(init script and systemd service file\) (Crash, PR): Fix incorrect socket handling for the HTTP client (Documentation, PR): Docs: Add a note to only query the NSClient++ API from the local Icinga 2 client (Documentation, PR): Add Upgrading to Icinga 2.8.2 chapter (Documentation, PR): Docs: Fix bracket in notification example (Documentation, PR): Upgrading: Make it more clear that the Director script is just an example (Documentation, PR): Explain how to register functions in the global scope (Documentation, PR): Docs: Add IDO DB tuning tips (Documentation, PR): Fix wrong nscp-local include in the docs (PR): Fix ApiUser unit test (API, Cluster, PR): Limit JSON RPC message size (PR): Fix incorrect size of request limits (PR): Fix typo in prepare-dirs (PR): Fix nullptr dereferences (PR): HTTP Security fixes (Packages, PR): SELinux: Allows icinga2\_t to send sigkill to all domains it transitions to (Packages): Unable to kill process group after check timeout if SElinux is enabled (Installation, PR): init script security fixes (InfluxDB, code-quality, PR): Improve InfluxdbWriter performance (code-quality, PR): Make default getters and setters non-virtual (PR): Implement AppLocal deployment support for UCRT (DB IDO, PR): Fix wrong schema constraint for fresh 2.8.0 installations (DB IDO): Duplicate entry constraint violations in 2.8 (PR): Windows plugin check\_swap build fix (Crash, PR): Fix missing variable name which can lead to segfaults (Crash): icinga v2.8.0 crashes frequently with "segmentation fault" on Debian 8.9 (Log, PR): Silence UpdateRepository message errors (Cluster, Log): 2.8.0: warning/JsonRpcConnection: Call to non-existent function 'event::UpdateRepository' (Livestatus, PR): livestatus: custom variables return empty arrays instead of strings (Livestatus, PR): add bogus zero reply in livestatus when aggregate and non matching filter (Livestatus, help wanted): Empty result set with non-matching filters in Livestatus stats query (ITL, PR): ITL: Drop ssl\_sni default setting (ITL): Default usage of ssl\sni in check\tcp (Documentation, PR): Update 08-advanced-topics.md (Documentation, PR): Add some technical insights into the cluster-zone health check and log lag (Documentation, PR): Fix link format in documentation (Documentation, PR): Fix typo in SELinux documentation (Documentation, PR): Update ElasticsearchWriter docs for 5.x support only (Documentation, PR): Remove redundant FreeBSD from restart instructions and add openSUSE (Documentation, PR): Add missing initdb to PostgreSQL documentation (Documentation, PR): Fixes postgres schema upgrade path (Documentation, PR): fix formatting error (Documentation, PR): Documentation fixes (Documentation, PR): Fix formatting in value types docs (Documentation, Windows, PR): Update Windows Client requirements for 2.8 (Documentation, PR): Add documentation about automatic service restarts with systemd (PR): changelog.py: Adjust categories and labels: Enhancement, Bug, ITL, Documentation, Support (Packages, Windows): chocolatey outdated version (code-quality, PR): Whitespace fix (Installation, PR): Enable installing the init scripts on Solaris (Plugins, Windows, PR): Fix check\_service returning Warning instead of Critical (Packages, Windows): Icinga Agent Windows 2.8.0 msvcr120.dll is missing Certificate path changed to /var/lib/icinga2/certs - check the upgrading docs! DB IDO

schema upgrade Cluster/Clients: Forward certificate signing requests over multiple levels Cluster/Clients: Support on-demand signing next to ticket based certificate request signing New flapping detection algorithm Add ElasticsearchWriter feature with HTTP proxy support Add CORS support for the REST API Deprecate `flapping_threshold` config option Remove client configuration mode "bottom up" Remove classicui meta configuration package Remove deprecated `enablelegacymode` in Graphite feature Spec file was moved to https://github.com/icinga/icinga-packaging ITL CheckCommand definition updates Documentation updates (Cluster, Configuration, PR): Implement support for migrating certificates to /var/lib/icinga2/certs (CLI, Cluster, Windows): Update Windows wizard from enhanced CSR signing \(optional ticket\) (CLI, Cluster): Migration path for improved certificate signing in the cluster (Cluster, PR): Remove bottom-up client mode (Windows, PR): Add windows process elevation and log message if user does not have privileges to read/write files (Log, PR): SyslogLogger: Implement option to set syslog facility (Configuration, PR): Implement new script functions: path\exists, glob and glob\recursive (CLI, Cluster, PR): Implement support for forwarding certificate signing requests in the cluster (Metrics, PR): ElasticWriter: Add basic auth and TLS support for Elasticsearch behind an HTTP proxy (API, Cluster, PR): Add subjectAltName extension for all non-CA certificates (API, PR): Add optional reload parameter to config stage upload (Metrics): Add ElasticsearchWriter feature (Configuration, PR): Implement get\services\(host {name,object}\) and add host object support for get\service\(\) (API, PR): API: Add execution\_{start,end} attribute to 'process-check-result' action (CLI, Cluster): Enhance CSR Autosigning \(CA proxy, etc.\) (API, PR): Add CORS support and set response header 'Access-Control-Allow-Origin' (Plugins, Windows, PR): Add -d option to check\_service (API, wishlist): API process-check-result allow setting timestamp (Configuration): new function get\services\(host\name\) (Cluster): Remove cluster/client mode "bottom up" w/ repository.d and node update-config (API): Validate and activate config package stages without triggering a reload (API): API should provide CORS Header (Plugins): Add option to specify ServiceDescription instead of ServiceName with check\_service.exe (Plugins, Windows, PR): Fix check\_service not working with names (Check Execution): Flapping tests and bugs (CLI, Configuration, PR): Include default global zones during node wizard/setup (CLI): node wizard/setup override zones.conf but do not include default global zones \(director-global, global-templates\) (PR): Fix fork error handling (PR): Fix compiler warnings on macOS 10.13 (Configuration, PR): Fix match\(\), regex\(\), cidr\_match\(\) behaviour with MatchAll and empty arrays (Configuration): match\(\) for arrays returns boolean true if array is empty (API, PR): Ensure that the REST API config package/stage creation is atomic : Crash with premature EOF on resource limited OS (PR): Fixed missing include statement in unit tests (Windows): Build error on Windows (API, Cluster, Crash, PR): Fix possible race condition in ApiListener locking (API, PR): Don't sent scheme and hostname in request (Windows): Config validation fails on Windows with unprivileged account (Crash, PR): Process: Fix JSON parsing error on process helper crash (API, PR): API: Fix requested attrs/joins/meta type errors in object query response (DB IDO, PR): Ensure that expired/removed downtimes/comments are correctly updated in DB IDO (API, Log): Sending wrong value for key causes ugly stacktrace (Check Execution, PR): Report failure to kill check command after exceeding timeout (Check Execution): Failure to kill check command after exceeding timeout is not reported (ITL, PR): Added missing "-q" parameter to check\ntp\peer (ITL, PR): add itl snmp-service for manubulon plugin check\snmp\win.pl (ITL, PR): Allow to disable thresholds for ipmi CheckCommand (ITL, PR): ITL: Support weathermap data in snmp\_interface CheckCommand (ITL, PR): Add support for check\_address as default in database CheckCommand objects (ITL, PR): ITL: Re-Add ssl\sni attribute for check\tcp (ITL): ssl CheckCommand does not support SNI (ITL, PR): check\esxi\hardware.py with new --no-lcd parameter (ITL, PR): Exclude configfs from disk checks (ITL): Update negate CheckCommand definition (ITL, PR): itl: Add manubulon/check\snmp\env.pl as CheckCommand snmp-env (ITL, PR): itl: add additional mssql\_health arguments (ITL, PR): Add missing options to snmp CheckCommand definition (Documentation, PR): Update .mailmap and AUTHORS (Documentation, PR): Fix wrong anchors in the documentation (Documentation, PR): Fix missing Accept header in troubleshooting docs (Documentation, PR): Improve documentation of cipher\_list (Documentation, PR): Add Noah Hilverling to

(Documentation, PR): Fix missing word in pin checks in a zone doc chapter (Documentation, PR): Fix manual certificate creation chapter in the docs (Documentation, PR): Update release docs (Documentation, PR): Fix broken links inside the documentation (Documentation, PR): Update upgrading documentation for 2.8 (Documentation, PR): Fixed grammar and spelling mistakes (Documentation): Minor documentation typos in flapping detection description (Documentation, PR): Enhance Security chapter for Distributed Monitoring documentation (Documentation, PR): Fixed doc formatting (Documentation): Improve documentation of cipher\_list (Documentation, PR): Fixed typos and punctuation (Documentation): Review documentation for enhanced CSR signing and update migration chapter for 2.8 (Documentation, PR): Fix typo in threshold syntax documentation (Documentation, PR): Enhance Monitoring Basics in the documentation (Documentation): Explain which values can be used for set\_if in command arguments (Documentation): Explain the notification with users defined on host/service in a dedicated docs chapter (Documentation): Better explanations and iteration details for "apply for" documentation (Documentation): Add usage examples to the "apply" chapter based on custom attribute values (Documentation): Explain custom attribute value types and nested dictionaries (Documentation): Explain how to use a different host check command (Documentation, PR): Enhance documentation with more details on value types for object attributes (Documentation, PR): Fixed downtime example in documentation (Documentation, PR): Add documentation for multi-line plugin output for API actions (Cluster, Documentation, Windows): SSL errors with leading zeros in certificate serials \(created \< v2.4\) with OpenSSL 1.1.0 (Documentation, PR): Set shell prompt for commands to be \# (Documentation): Document boolean values understood by set\_if (Documentation): Missing documentation for macro\(\) (Documentation): Add documentation for host state calculation from plugin exit codes (Configuration, PR): Fix default configuration example for ElasticsearchWriter (Metrics, PR): Rename ElasticWriter to ElasticsearchWriter (Check Execution, DB IDO, PR): Fix flapping calculation and events (PR): Add missing trims to GetMasterHostPort and remove Convert.ToString from variables that are strings already (Cluster, Installation, Windows, PR): Update Windows Wizard for 2.8 and new signing methods (Cluster, Log, PR): Improve error message for unknown cluster message functions (Log): Ugly stacktrace with mismatching versions in cluster (PR): Fix debug builds on Apple Clang 9.0.0 \(macOS High Sierra\) (InfluxDB, PR): Fix unnecessary String\(\) casts in InfluxdbWriter (InfluxDB, Metrics, code-quality): Remove the unnecessary String\(\) casts in influxdbwriter.cpp (PR): Fixed missing include statement in unit test (Packages, PR): Exit early in changelog.py if GitHub API fetch fails (PR): Fix a build warning (CLI, Cluster, PR): Fix certificate paths for installers (Packages, PR): Remove the icinga2-classicui-package and update documentation (Installation, Packages, PR): Ensure that the cache directory always is set and add a note to upgrading docs (Cluster, PR): Implement additional logging for the JsonRpc class (Installation, Windows, PR): Add Edit button to Windows Setup Wizard (code-quality, PR): Implement additional functions for printing values with LLDB/GDB (Graphite, PR): Graphite: Remove deprecated legacy schema mode (Installation, Packages): Remove the icinga2-classicui-config package (Installation, PR): Fix clang compiler detection on Fedora and macOS (Graphite): Remove deprecated GraphiteWriter feature enable\legacy\mode (Notifications, Tests): Verify and fix flapping detection Fixed invalid attribute names in the systemd unit file Fixed incorrect unique constraint for IDO DB Moved spec file to the icinga-packaging Git repository Documentation updates (DB IDO, PR): Fix unique constraint matching for UPDATE downtime/comment runtime tables in DB IDO (DB IDO): Duplicate Key on MySQL after upgrading to v2.7.1 (DB IDO): Icinga

IDO Unique Key Constraint Violation with PostgreSQL (Documentation, PR): Docs: Fix default value for `snmp\_nocrypt` for Manubulon CheckCommand definitions (Documentation, PR): Docs: Fix missing default value for cluster-zone checks (Documentation, PR): Docs: Mention SELinux in Getting Started chapter (Packages, PR): Remove spec file (Documentation, Packages, PR): Improve documentation and systemd config on TaskMax Fixes and upgrade documentation for notificatication scripts introduced in 2.7.0 InfluxdbWriter attribute `socket_timeout` introduced in 2.7.0 was deprecated (will be removed in 2.8.0). Details in #5469 and #5460 Livestatus bygroup table stats fixes for NagVis DB IDO: Fixes for downtime/comment history queries not correctly updating the end time checknscpapi allows white spaces in arguments Bugfixes Documentation updates (Cluster, Log, PR): Enhance client connect/sync logging and include bytes/zone in logs (Notifications, PR): Notification scripts - make HOSTADDRESS optional (Notifications, PR): Make notification mails more readable. Remove redundancy and cruft. (DB IDO, PR): Fix where clause for non-matching {downtime,comment}history IDO database updates (Cluster, Log, PR): Logs: Change config sync update to highlight an information, not an error (Plugins, Windows, PR): check\nscp\api: Allow arguments containing spaces (Plugins): check\nscp\api: support spaces in query arguments (Cluster, PR): Change FIFO::Optimize\(\) frequency for large messages (Cluster): Node in Cluster loses connection (InfluxDB, PR): Fix TLS Race Connecting to InfluxDB (Livestatus, PR): Fix grouping for Livestatus queries with 'Stats' (Notifications, PR): Fix duplicate variable in notification scripts (Notifications, PR): Fix parameter order for AcknowledgeSvcProblem / AcknowledgeHostProblem / apiactions:AcknowledgeProblem (DB IDO): Comments may not be removed correctly (Log): Timestamp comparison of config files logs a wrong message (DB IDO, PR): Fix config validation for DB IDO categories 'DbCatEverything' (InfluxDB): Failure to connect to InfluxDB increases CPU utilisation by 100% for every failure (DB IDO, PR): DB IDO: Fix host's unreachable state in history tables (InfluxDB): Icinga 2.7 InfluxdbWriter fails to write metrics to InfluxDB over HTTPS (DB IDO): IDO donwtimehistory records orphaned from scheduleddowntime records following restart (DB IDO): IDO statehistory table does not show hosts going to "UNREACHABLE" state. (Compat, Livestatus): Livestatus hostsbygroup and servicesbyhostgroup do not work (ITL, PR): ITL: Correct arguments for ipmi-sensor CheckCommand (Documentation, PR): Docs: Enhance certificate and configuration troubleshooting chapter (Documentation, PR): Docs: Add a note for upgrading to 2.7 (Documentation, PR): Docs: Add example for Windows service monitoring with check\nscp\api (Documentation, PR): Docs: Add firewall details for check\nscp\api (Documentation, PR): Fix cli command used to enable debuglog feature on windows (Documentation, PR): Fixed nscp-disk service example (Documentation, PR): Docs: Update freshness checks; add chapter for external check results (Documentation, PR): Updates the install dependencies for Debian 9 'stretch' (Documentation, PR): Docs: Fix wrong parameter for ITL CheckCommand nscp\_api (Documentation, PR): Docs: Update examples for match/regex/cidr\_match and mode for arrays \(Match{All,Any}\) (Documentation, PR): Docs: Add section for multiple template imports (Documentation, PR): Update "Getting Started" documentation with Alpine Linux (Documentation, PR): Docs: Enhance Troubleshooting with nscp-local, check\_source, wrong thresholds (Documentation, PR): Docs: Fix ITL chapter TOC; add introduction with mini TOC (Documentation, PR): Docs: Add a note on required configuration updates for new notification scripts in v2.7.0 (Documentation, PR): Update Icinga repository release rpm location (Documentation, PR): Add Changelog generation script for GitHub API (Documentation): "Plugin Check Commands" section inside ITL docs needs adjustments (PR): changelog.py: Add "backported" to the list of ignored labels (Cluster, Log, PR): Silence log level for configuration file updates (Log, PR): Change two more loglines for checkables so checkable is quoted (Log, PR): Change loglines for checkables so checkable is quoted (Installation, Packages, PR): SELinux: fixes for 2.7.0 (Packages): Icinga2 2.7.0 requires SELinux boolean icinga2\can\connect\_all on CentOS 7 even for default port (Installation, Packages, PR): Systemd: Add DefaultTasksMax=infinity to service file (Packages, PR): Ensure the cache directory exists (Packages): cgroup: fork rejected by pids controller in /system.slice/icinga2.service (Packages): /usr/lib/icinga2/prepare-dirs does not create /var/cache/icinga2 New mail notification scripts. Please note that this requires a configuration update to NotificationCommand objects, Notification apply rules for specific settings and of course the notification scripts. More can be found

checknscpapi plugin for NSClient++ REST API checks Work queues for features including logs & metrics More metrics for the "icinga" check Many bugfixes (Plugins, Windows, PR): Windows Plugins: Add new parameter to check\_disk to show used space (Configuration, PR): Implement support for handling exceptions in user scripts (Graylog, PR): GelfWriter: Add 'check\_command' to CHECK RESULT/\ NOTIFICATION/STATE CHANGE messages (Graphite, PR): GraphiteWriter: Add 'connected' to stats; fix reconnect exceptions (Graylog, PR): GelfWriter: Use async work queue and add feature metric stats (Configuration, PR): zones.conf: Add global-templates & director-global by default (Graphite, InfluxDB, Metrics, PR): Use workqueues in Graphite and InfluxDB features (Check Execution, PR): Add feature stats to 'icinga' check as performance data metrics (API, Cluster, Log, PR): Implement WorkQueue metric stats and periodic logging (API, Cluster, PR): Add API & Cluster metric stats to /v1/status & icinga check incl. performance data (Configuration, PR): Implement new array match functionality (Log, PR): Add target object in cluster error messages to debug log (API, Cluster, PR): Add subjectAltName X509 ext for certificate requests (Configuration, PR): Allow expressions for the type in object/template declarations (InfluxDB, PR): Verbose InfluxDB Error Logging (Plugins, Windows, PR): Add NSCP API check plugin for NSClient++ HTTP API (Cluster, Log): Add additional logging for config sync : Add a GitHub issue template (API, wishlist): ApiListener: Metrics for cluster data (Configuration): Add director-global as global zone to the default zones.conf configuration (API, Log): No hint for missing permissions in Icinga2 log for API user : Update changelog generation scripts for GitHub (InfluxDB, Log, Metrics): Better Debugging for InfluxdbWriter (Cluster, Log): Add check information to the debuglog when check result is discarded (Configuration): Default mail notification from header (Log): Log started and stopped features (CLI, PR): Fix: update feature list help text (CLI, Crash): Unable to start icinga2 with kernel-3.10.0-514.21.2 RHEL7 (Plugins): check\nscp\api not building on Debian wheezy (Livestatus, PR): Fix for stats min operator (Configuration, PR): Improve validation for attributes which must not be 'null' (PR): Fix compiler warnings (Notifications, PR): Fix missing apostrophe in notification log (PR): Build fix for OpenSSL

and stack\st\X509\_EXTENSION (Configuration): Hostgroup using assign for Host with groups = null segfault (PR): Build fix for I2\LEAK\DEBUG (Graylog, PR): Fix performance data processing in GelfWriter feature (API, PR): Don't allow acknowledgement expire timestamps in the past (Configuration): Config type changes break object serialization \(JsonEncode\) (API, Compat): Acknowledgement expire time in the past (Notifications, PR): Fix that host downtimes might be triggered even if their state is Up (Configuration, Notifications): Icinga sends notifications even though a Downtime object exists (Plugins, Windows): Wrong return Code for Windows ICMP (InfluxDB): InfluxDBWriter feature might block and leak memory (API, Cluster): Config received is always accepted by client even if own config is newer (API, CLI): No subjectAltName in Icinga CA created CSRs (Windows): include files from other volume/partition (Configuration): parsing of scheduled downtime object allow typing range instead of ranges (Graphite): GraphiteWriter can slow down Icinga's check result processing (Compat): icinga2 checkresults error (API): API POST request with 'attrs' as array returns bad\_cast error (Cluster): CRL loading fails due to incorrect return code check (DB IDO): Flexible downtimes which are not triggered must not update DB IDO's actual\end\time in downtimehistory table (API): Wrong response type when unauthorized (Livestatus): Typo in livestatus key worst\services\state for hostgroups table (DB IDO, PR): Fix persistent comments for Acknowledgements (Metrics, PR): PerfData: Server Timeouts for InfluxDB Writer (InfluxDB, Metrics): InfluxDbWriter error 500 hanging Icinga daemon (API): acknowledge-problem api sending notifications when notify is false (CLI): icinga2 feature disable fails on already disabled feature (Plugins): Windows Agent: performance data of check\_perfmon (API, Configuration): API max\check\attempts validation : Acknowledgements marked with Persistent Comment are not honored : Superflous error messages for non-exisiting lsb\release/sw\vers commands \(on NetBSD\) : Fix for traditional glob\(3\) behaviour : NetBSD execvpe.c fix (API): Posting config stage fails on FreeBSD (Notifications): Notifications are sent when reloading Icinga 2 even though they're deactivated via modified attributes (Graylog, Metrics): GelfWriter with enable\send\perfdata breaks checks (Graylog, Metrics): Icinga 2 "hangs" if the GelfWriter cannot send messages (DB IDO, Log): Exceptions might be better than exit in IDO (DB IDO): mysql\error cannot be used for mysql\init (Compat): Stacktrace on Command Pipe Error (Livestatus): Livestatus: Problem with stats min operator (CLI, PR): give only warnings if feature is already disabled (ITL, PR): Remove default value for 'dns\query\type' (ITL): Monitoring-Plugins check\_dns command does not support the `-q` flag (ITL, PR): Update ITL CheckCommand description attribute, part 2 (ITL, PR): Update missing description attributes for ITL CheckCommand definitions (ITL, PR): Improve ITL CheckCommand description attribute (ITL, PR): Add ip4-or-ipv6 import to logstash ITL command (ITL): logstash ITL command misses import (ITL, PR): ITL: Add some missing arguments to ssl\_cert (ITL, PR): Add report mode to db2\_health (ITL, PR): Enhance mail notifications scripts and add support for command line parameters (ITL, PR): Add more options to ldap CheckCommand (ITL): Additional parameters for perfout manubulon scripts (ITL, PR): Added support to NRPE v2 in NRPE CheckCommand (ITL, PR): fix mitigation for nwc\_health (ITL, PR): Add additional arguments to mssql\_health (ITL): Add querytype to dns check (ITL, PR): Added CheckCommand definitions for SMART, RAID controller and IPMI ping check (ITL, PR): nwc\health\report attribute requires a value (ITL): Review `dummy` entry in ITL (ITL): Allow hpasm command from ITL to run in local mode (ITL, PR): ITL: check\_icmp: add missing TTL attribute (ITL): Remove deprecated dns\expected\answer attribute (ITL): Prepare icingacli-businessprocess for next release (ITL): ITL - check\oracle\health - report option to shorten output (ITL, PR): FreeBSD's /dev/fd can either be inside devfs, or be of type fdescfs. (ITL, PR): ITL: Update ipmi CheckCommand attributes (ITL, PR): Add new parameter for check\_http: -L: Wrap output in HTML link (ITL, PR): Support --only-critical for check\_apt (ITL, PR): Inverse Interface Switch for snmp-interface (ITL, PR): Adding -A to snmp interfaces check (Documentation, PR): Update documentation for 2.7.0 (Documentation, PR): Add missing notification state filter to documentation (Documentation, PR): Fix formatting in API docs (Documentation): Update docs for better compatibility with mkdocs (Documentation, PR): Fix typo in the documentation (Documentation, PR): Fixed warnings when using mkdocs (Documentation, PR): Rename ChangeLog to CHANGELOG.md (Documentation, PR): Fixed wrong node in documentation chapter Client/Satellite Linux Setup (Documentation, PR): Update package documentation for Debian Stretch (Documentation, PR): Add documentation for securing mysql on Debian/Ubuntu. (Documentation, Notifications, PR): Notification Scripts: Ensure that mail from address works on Debian/RHEL/SUSE \(mailutils vs mailx\) (Documentation, PR): Docs: Fix built-in template description and URLs (Documentation, PR): Docs: Fix broken format for notes/tips in CLI command chapter (Documentation, ITL, PR): Add accept\_cname to dns CheckCommand (Documentation, PR): Docs: Fix formatting issues and broken URLs (Documentation, PR): Update documentation for enhanced notification scripts (Documentation, PR): Fix phrasing in Getting Started chapter (Documentation, PR): Fix typo in

(Documentation, PR): Docs: Replace nagios-plugins by monitoring-plugins for Debian/Ubuntu (Documentation, PR): Document Common name \(CN\) in client setup (Documentation, PR): Docs: Replace the command pipe w/ the REST API as Icinga Web 2 requirement in 'Getting Started' chapter (Documentation): Update docs for RHEL/CentOS 5 EOL (Documentation, PR): Fix sysstat installation in troubleshooting docs (Documentation, PR): Docs: Add API query example for acknowledgements w/o expire time (Documentation, PR): Add troubleshooting hints for cgroup fork errors (Documentation, PR): Add a PR review section to CONTRIBUTING.md (Documentation, PR): Docs: Add a note for Windows debuglog to the troubleshooting chapter (Documentation, ITL, PR): feature/itl-vmware-esx-storage-path-standbyok (Documentation, PR): Remove "... is is ..." in CONTRIBUTING.md (Documentation): Typo in Getting Started Guide (Documentation, PR): Fix typo in Getting Started chapter (Documentation, PR): Doc/appendix: fix malformed markdown links (Documentation, PR): List SELinux packages required for building RPMs (Documentation, Windows): Documentation vague on "update-windows" check plugin (Documentation): Add a note about flapping problems to the docs (Documentation, PR): Add missing object type to Apply Rules doc example (Documentation): Object type missing from ping Service example in docs (Documentation): Add more assign where expression examples (API, Documentation): Set zone attribute to no\user\modify for API POST requests (Documentation, PR): Syntax error In Dependencies chapter (Documentation, ITL, PR): ITL: Add CheckCommand ssl\_cert, fix ssl attributes (Documentation, PR): ITL documentation - disk-windows usage note with % thresholds (Documentation): "Three Levels with master, Satellites, and Clients" chapter is not clear about client config (Documentation): Add CONTRIBUTING.md (Documentation): 3.5. Apply Rules topic in the docs needs work. (Documentation, PR): Replace http:// links with https:// links where a secure website exists (Documentation): Invalid links in documentation (Documentation, PR): Update documentation, change http:// links to https:// links where a website exists (Documentation): Extend troubleshooting docs w/ environment analysis and common tools (Documentation): Docs: Explain how to include your own config tree instead of conf.d (Documentation): Add an Elastic Stack Integrations chapter to feature documentation (Documentation): Documentation should explain that runtime modifications are not immediately updated for "object list" (Documentation): Doc updates: Getting Started w/ own config, Troubleshooting w/ debug console (Documentation): Fix duration attribute requirement for schedule-downtime API action (Documentation, PR): Correct link to nscp documentation (Documentation): The last example for typeof\(\) is missing the result (Cluster, Documentation): EventHandler to be executed at the endpoint (Documentation): Replace the 'command' feature w/ the REST API for Icinga Web 2 (Documentation, ITL, PR): Add fuse.gvfs-fuse-daemon to disk\exclude\type (Documentation): \[Documentation\] Missing parameter for SNMPv3 auth (Documentation): Explain check\memorys and check\disks thresholds (Documentation): add a section for 'monitoring the icinga2 node' (CLI, PR): Fixed missing closing bracket in CLI command pki new-cert. (Configuration, Notifications, PR): Notification Scripts: notification\_type is always required (Documentation, Installation, PR): Install the images directory containing the needed PNGs for the markd (Packages, PR): RPM: Disable SELinux policy hardlink (Documentation, Packages, PR): Remove CentOS 5 from 'Getting started' docs (Documentation, Packages, PR): Update INSTALL.md for RPM builds (Packages, PR): RPM: Fix builds on Amazon Linux (Notifications): Ensure that "mail from" works on RHEL/CentOS (Configuration, PR): Fix verbose mode in notifications scripts (PR): Move PerfdataValue\(\) class into base library (Tests, PR): travis: Update to trusty as CI environment (Tests): Update Travis CI environment to trusty (Tests, PR): Travis: Run config validation at the end (DB IDO, PR): Remove deprecated "DbCat1 | DbCat2" notation for DB IDO categories (Installation, PR): CMake: require a GCC version according to INSTALL.md (Packages, PR): RPM spec: don't enable features after an upgrade (DB IDO, PR): Don't call mysql\error\(\) after a failure of mysql\init\(\) (Packages): icinga2.spec: Allow selecting g++ compiler on older SUSE release builds (Documentation, Packages, PR): RPM packaging updates (Documentation, Packages): Boost \>= 1.48 required (Packages): Issues Packing icinga 2.6.3

to RPM (Packages, PR): Changed dependency of selinux subpackage (Installation, PR): Improve systemd service file (Compat, Configuration, Packages): Deprecate the icinga2-classicui-config package (Packages, Windows): Fix incorrect metadata for the Chocolatey package (Packages, Windows): Update Chocolatey package to match current guidelines (Cluster, Configuration): Log message "Object cannot be deleted because it was not created using the API" (Configuration): Function metadata should show available arguments (DB IDO, PR): Add link to upgrade documentation to log message (Cluster, Installation): icinga2/api/log directory is not created (Installation, Packages): No network dependency for /etc/init.d/icinga2 (Packages): Improve SELinux Policy (Installation): NetBSD install path fixes (Configuration, Notifications, Packages): notifications always enabled after update (DB IDO): Missing index use can cause icinga\_downtimehistory queries to hang indefinitely (Check Execution): Icinga daemon runs with nice 5 after reload (Cluster): Change "Discarding 'config update object'" log messages to notice log level (DB IDO): With too many comments, Icinga reload process won't finish reconnecting to Database (Documentation): Update Security section in the Distributed Monitoring chapter (Documentation, ITL): mysql\_socket attribute missing in the documentation for the mysql CheckCommand (Documentation): Docs: Typo in Distributed Monitoring chapter (Documentation): Advanced topics: Mention the API and explain stick acks, fixed/flexible downtimes (Documentation): Advanced topics: Wrong acknowledgement notification filter (Documentation): documentation: mixed up host names in 6-distributed-monitoring.md (Documentation): Add OpenBSD and AlpineLinux package repositories to the documentation (Documentation, ITL): Review CheckCommand documentation including external URLs (Documentation): Add an example for /v1/actions/process-check-result which uses filter/type (Documentation): Add practical examples for apply expressions (API, CLI): Icinga crashes while trying to remove configuration files for objects which no longer exist This release addresses a number of bugs we have identified in version 2.6.0. The documentation changes reflect our recent move to GitHub. : Migration to Github : Include argument name for log message about incorrect set\_if values : IDO schema update is not compatible to MySQL 5.7 : Crash - Error: parse error: premature EOF (DB IDO): IDO MySQL schema not working on MySQL 5.7 (DB IDO): IDO: Timestamps in PostgreSQL may still have a time zone offset : SIGPIPE shutdown on config reload (Documentation, PR): doc/6-distributed-monitoring.md: Fix typo (Documentation): Update contribution section for GitHub (Documentation): Incorrect license file mentioned in README.md (Documentation): Add travis-ci build status logo to README.md (Documentation): Move domain to icinga.com (Documentation): SLES 12 SP2 libboost\thread package requires libboost\chrono (Documentation): Update RELEASE.md (Documentation): Add more build details to INSTALL.md (Documentation): Update Repositories in Docs (Packages): SLES11 SP4 dependency on Postgresql \>= 8.4 Client/Satellite setup The "bottom up" client configuration mode has been deprecated. Check for additional details and migration. Linux/Unix daemon Ensure that Icinga 2 does not leak file descriptors to executed commands. There are 2 processes started instead of previously just one process. Windows client Package bundles NSClient++ 0.5.0. ITL CheckCommands have been updated too. Allow to configure the user account for the Icinga 2 service. This is useful if several checks require administrator permissions (e.g. check_update.exe) Bugfixes for check plugins Cluster and API Provide location information for objects and templates in the API Improve log message for ignored config updates Fix cluster resync problem with API created objects (hosts, downtimes, etc.) Fix that API-created objects in a global zone are not synced to child endpoints Notifications Several bugfixes for downtime, custom and flapping notifications New ITL CheckCommands: logstash, glusterfs, iostats Package builds require a compiler which supports C++11 features (gcc-c++ >= 4.7, clang++) DB IDO Schema upgrade required (2.6.0.sql) This update fixes timestamp columns required by Icinga Web 2 and might take a while. Please ensure to schedule a maintenance task for your database upgrade. (Cluster): Deprecate cluster/client mode "bottom up" w/

and node update-config (API): Allow to evaluate macros through the API (Cluster): Check whether nodes are synchronizing the API log before putting them into UNKNOWN (Plugins): Review windows plugins performance output (Configuration): Suppress compiler warnings for auto-generated code (Cluster): Improve log message for ignored config updates : Make sure that libmethods is automatically loaded even when not using the ITL (Configuration): Implement support for default templates (API): Provide location information for objects and templates in the API : Use lambda functions for INITIALIZE\_ONCE : Use 'auto' for iterator declarations : Implement an rvalue constructor for the String and Value classes (Configuration): Implement a command-line argument for "icinga2 console" to allow specifying a script file (Configuration): Remove unused method: ApplyRule::DiscardRules : Replace BOOST\_FOREACH with range-based for loops : Add -fvisibility=hidden to the default compiler flags : Implement an environment variable to keep Icinga from closing FDs on startup : Avoid unnecessary string copies : Remove deprecated functions (Configuration): Command line option for config syntax validation : Better message for apply errors (CLI): Wrong help string for node setup cli command argument --master\_host (API): Crash in CreateObjectHandler \(regression from \#11684 : Icinga tries to delete Downtime objects that were statically configured : Sending a HUP signal to the child process for execution actually kills it (DB IDO): PostgreSQL: Don't use timestamp with timezone for UNIX timestamp columns (Notifications): Recovery notifications sent for Not-Problem notification type if notified before (Cluster): Crash w/ SendNotifications cluster handler and check result with empty perfdata : Config validation crashes when using command\_endpoint without also having an ApiListener object (Graphite): Performance data writer for Graphite : Values without fraction limited to 2147483647 \(7FFFFFFF\) : SIGALRM handling may be affected by recent commit (Notifications): Flapping notifications sent for soft state changes (API): Icinga crashes while deleting a config file which doesn't exist anymore (Configuration): Configuration validation fails when setting tls\_protocolmin to TLSv1.2 (CLI): Parse error: "premature EOF" when running "icinga2 node update-config" : Crash in ClusterEvents::SendNotificationsAPIHandler (Notifications): Forced custom notification is setting "force\next\notification": true permanently (API): Crash in HttpRequest::Parse while processing HTTP request (Configuration): Validation does not highlight the correct attribute (CLI): broken: icinga2 --version (API): Invalid API filter error messages (CLI): Cli: boost::bad\_get on icinga::String::String\(icinga::Value&&\) : Build fails with Visual Studio 2015 : Remove unused last\in\downtime field (CLI): Last option highlighted as the wrong one, even when it is not the culprit : Unexpected state changes with max\check\attempts = 2 (Configuration): Debug hints for dictionary expressions are nested incorrectly (Notifications): Don't send Flapping\ notifications when downtime is active (DB IDO): Getting error during schema update (Configuration): Config validation shouldnt allow 'endpoints = \[ "" \]' (Notifications): Fixed downtimes scheduled for a future date trigger DOWNTIMESTART notifications : Add missing initializer for WorkQueue::m\_NextTaskID : Fix compiler warnings (DB IDO): Don't link against libmysqlclient\_r : Don't update TimePeriod ranges for inactive objects (Metrics): InfluxdbWriter does not write state other than 0 (Plugins): check\_network performance data in invalid format - ingraph (Cluster): Cluster resync problem with API created objects (API): Objects created in a global zone are not synced to child endpoints (API): API requests from execute-script action are too verbose (Compat): SCHEDULE\AND\PROPAGATE\HOST\DOWNTIME command missing (Compat): SCHEDULE\AND\PROPAGATE\TRIGGERED\HOST\_DOWNTIME command missing (DB IDO): MySQL 5.7.9, Incorrect datetime value Error (Plugins): Windows Agent: performance data of check\_perfmon (Plugins): Windows Agent: Performance data values for check\_perfmon.exe are invalid sometimes (Plugins): Implement support for resolving DNS hostnames in

: File descriptors are leaked to child processes which makes SELinux unhappy (ITL): Add tempdir attribute to postgres CheckCommand (ITL): Add sudo option to mailq CheckCommand (ITL): Add verbose parameter to http CheckCommand (ITL): Add timeout option to mysql\_health CheckCommand (ITL): Default values for check\_swap are incorrect (ITL): snmp\miblist variable to feed the -m option of check\snmp is missing in the snmpv3 CheckCommand object (ITL): Add a radius CheckCommand for the radius check provide by nagios-plugins (ITL): Add CheckCommand definition for check\_logstash (ITL): Problem passing arguments to nscp-local CheckCommand objects (ITL): Add timeout option to oracle\_health CheckCommand (ITL): Hangman easter egg is broken (ITL): Add CheckCommand definition for check\_iostats (ITL): Default disk plugin check should not check inodes (ITL): Manubulon: Add missing procurve memory flag (ITL): Fix code style violations in the ITL (ITL): Incorrect help text for check\_swap (ITL): ITL - check\vmware\esx - specify a datacenter/vsphere server for esx/host checks (ITL): Add CheckCommand definition for check\_glusterfs (Documentation): "2.1.4. Installation Paths" should contain systemd paths (Documentation): Update "2.1.3. Enabled Features during Installation" - outdated "feature list" (Documentation): Update package instructions for Fedora (Documentation): Update README.md and correct project URLs (Documentation): Add a note for boolean values in the disk CheckCommand section (Documentation): Troubleshooting: Add examples for fetching the executed command line (Documentation): Update Windows screenshots in the client documentation (Documentation): Add example for concurrent\_checks in CheckerComponent object type (Documentation): Missing API headers for X-HTTP-Method-Override (Documentation): Fix example in PNP template docs (Documentation): Add a note about removing "conf.d" on the client for "top down command endpoint" setups (Documentation): Update API and Library Reference chapters (Documentation): Add a note about default template import to the CheckCommand object (Documentation): Docs: Typo in "CLI commands" chapter (Documentation): Docs: ITL plugins contrib order (Documentation): Doc: Swap packages.icinga.org w/ DebMon (Documentation): Add a note about pinning checks w/ command\_endpoint (Documentation): Docs: wrong heading level for commands.conf and groups.conf (Documentation): Add more Timeperiod examples in the documentation (Documentation): Add an example of multi-parents configuration for the Migration chapter (Documentation): Typo in the documentation (Documentation): Fix some spelling mistakes (Documentation): Add documentation for logrotation for the mainlog feature (Documentation): Corrections for distributed monitoring chapter (Documentation): Docs: Migrating Notification example tells about filters instead of types (Documentation): GDB example in the documentation isn't working (Documentation): Add development docs for writing a core dump file (Documentation): Typo in distributed monitoring docs (Documentation): Update service monitoring and distributed docs (Documentation): Fix help output for update-links.py (Documentation): Add missing reference to libmethods for the default ITL command templates (Documentation): Add information about function 'range' (Installation): Sort Changelog by category (Tests): Add unit test for notification state/type filter checks (Packages): Update .mailmap for icinga.com (Packages): Windows Installer should include NSClient++ 0.5.0 (Tests): Unit tests randomly crash after the tests have completed (Packages): Improve support for building the chocolatey package (Installation): Use raw string literals in mkembedconfig (Installation): Improve detection for the -flto compiler flag (Installation): Set versions for all internal libraries (Installation): Update cmake config to require a compiler that supports C++11 (Installation): logrotate file is not properly generated when the logrotate binary resides in /usr/bin (Tests): Implement unit tests for state changes (Installation): Make the user account configurable for the Windows service (Tests): Livestatus tests don't work on OS X Bugfixes : many check commands executed at same time when master reload This release addresses an issue with PostgreSQL support for the IDO database module. (DB IDO): ido pgsql migration from 2.4.0 to 2.5.0 : wrong size for config\_hash Bugfixes : Icinga 2 sends SOFT recovery notifications (DB IDO): Newly added group member tables in the IDO database are not updated (Documentation): Wrong formatting in client docs Bugfixes (Notifications): Icinga 2 sends recovery notifications for SOFT NOT-OK states InfluxdbWriter feature API New endpoints: /v1/variables and /v1/templates (GET requests), /v1/action/generate-ticket (POST request) State/type filters for notifications/users are now string values (PUT, POST, GET requests) Configuration TimePeriod excludes/includes attributes DateTime object for formatting time strings New prototype methods: Array#filter, Array#unique, Array#map, Array#reduce

now includes plugins-contrib, manubulon, windows-plugins, nscp by default (ITL CheckCommand definitions) Performance improvements (config compiler and validation) CLI 'icinga2 object list' formats state/type filters as string values Compiled config files are now visible with "notice" debug level (hidden by default) CA serial file now uses a hash value (HA cluster w/ 2 CA directories) Cluster There is a known issue with >2 endpoints inside a zone. Icinga 2 will now log a warning. Support for accepted ciphers and minimum TLS version Connection and error logging has been improved. DB IDO Schema upgrade required (2.5.0.sql) Incremental config dump (performance boost) `categories` attribute is now an array. Previous method is deprecated and to be removed. DbCatLog is not enabled by default anymore. SSL support for MySQL New packages vim-icinga2 for syntax highlighting libicinga2 (Debian), icinga2-libs (RPM) for Icinga Studio packages : Remove some unused \#includes : Remove unnecessary Dictionary::Contains calls (Cluster): Improve performance for Endpoint config validation : Improve performance for type lookups (DB IDO): Incremental updates for the IDO database (DB IDO): Remove unused code from the IDO classes (API): Add API action for generating a PKI ticket (Configuration): Implement comparison operators for the Array class : Implement the System\#sleep function (Configuration): Implement support for namespaces (CLI): Implement support for inspecting variables with LLDB/GDB : Implement support for marking functions as deprecated : Include compiler name/version and build host name in --version (Configuration): Move internal script functions into the 'Internal' namespace : Improve logging for the WorkQueue class : Rename/Remove experimental script functions : Implement process\check\result script method for the Checkable class (API): Support for determining the Icinga 2 version via the API (Notifications): Add the notification type into the log message (Cluster): Enhance TLS handshake error messages with connection information (API): Remove obsolete debug log message (Configuration): Add map/reduce and filter functionality for the Array class (CLI): Add history for icinga2 console (Cluster): Log a warning if there are more than 2 zone endpoint members (Cluster): Include IP address and port in the "New connection" log message (Configuration): Implement the \\ptr script function (Cluster): Improve error messages for failed certificate validation (Cluster): Improve log message for connecting nodes without configured Endpoint object (Cluster): Enhance client disconnect message for "No data received on new API connection." (DB IDO): Do not populate logentries table by default (API): API: Add missing downtime\_depth attribute (DB IDO): Change Ido\Connection 'categories' attribute to an array (DB IDO): Enhance IDO check with schema version info (DB IDO): Update DB IDO schema version to 1.14.1 (API): Implement support for getting a list of global variables from the API (API): Support for enumerating available templates via the API (Metrics): InfluxDB Metadata (Cluster): Add lag threshold for cluster-zone check (API): Improve logging for HTTP API requests (Configuration): Remove the \(unused\) 'inherits' keyword (Configuration): Improve performance for field accesses (Configuration): Allow strings in state/type filters : Cleanup downtimes created by ScheduleDowntime (Configuration): Config parser should not log names of included files by default (API): ApiListener: Make minimum TLS version configurable (API): ApiListener: Force server's preferred cipher (Graphite): Add acknowledgement type to Graphite, InfluxDB, OpenTSDB metadata (API): Implement SSL cipher configuration support for the API feature : Add name attribute for WorkQueue class (Metrics): Add InfluxDbWriter feature : Remove the deprecated IcingaStatusWriter feature (Metrics): Gelf module: expose 'perfdata' fields for 'CHECK\_RESULT' events (Configuration): Implement support for formatting date/time (DB IDO): Add SSL support for the IdoMysqlConnection feature (Metrics): Add timestamp support for GelfWriter : Exclude option for TimePeriod definitions (CLI): Icinga2 segault on startup (API): API Remote crash via Google Chrome (Configuration): Memory leak when using closures (Cluster): Incorrect certificate validation error message : ClrCheck is null on \nix (CLI): Cannot set ownership for user 'icinga' group 'icinga' on file

(API): API: events for DowntimeTriggered does not provide needed information (DB IDO): IDO query fails due to key contraint violation for the icinga\_customvariablestatus table (Cluster): DB IDO started before daemonizing \(no systemd\) (DB IDO): Query for customvariablestatus incorrectly updates the host's/service's insert ID (DB IDO): Insert fails for the icinga\_scheduleddowntime table due to duplicate key : Fix incorrect detection of the 'Concurrency' variable (API): API: action schedule-downtime requires a duration also when fixed is true : Use hash-based serial numbers for new certificates (Cluster): ClusterEvents::NotificationSentAllUsersAPIHandler\(\) does not set notified\_users : Replace GetType\(\)-\>GetName\(\) calls with GetReflectionType\(\)-\>GetName\(\) (Cluster): Only allow sending command\_endpoint checks to directly connected child zones (DB IDO): ido CheckCommand returns returns "Could not connect to database server" when HA enabled (DB IDO): Fix the "ido" check command for use with command\_endpoint : CompatUtility::GetCheckableNotificationStateFilter is returning an incorrect value (DB IDO): Importing mysql schema fails (CLI): pki sign-csr does not log where it is writing the certificate file (DB IDO): IDO marks objects as inactive on shutdown (DB IDO): IDO does duplicate config updates (Configuration): 'use' keyword cannot be used with templates (Notifications): Add log message if notifications are forced \(i.e. filters are not checked\) (Notifications): Notification resent, even if interval = 0 (DB IDO): Fixed downtime start does not update actual\start\time : Flexible downtimes should be removed after trigger\_time+duration : Disallow casting "" to an Object : Handle I/O errors while writing the Icinga state file more gracefully (Notifications): Incorrect downtime notification events : Fix building Icinga with -fvisibility=hidden (Configuration): Icinga doesn't delete temporary icinga2.debug file when config validation fails (Notifications): Notification sent too fast when one master fails (Cluster): Remove obsolete README files in tools/syntax (Notifications): Missing notification for recovery during downtime (DB IDO): Change the way outdated comments/downtimes are deleted on restart (Notifications): Multiple notifications when master fails (DB IDO): icinga2 IDO reload performance significant slower with latest snapshot release (Notifications): Notification interval mistimed (DB IDO): icinga2 empties custom variables, host-, servcie- and contactgroup members at the end of IDO database reconnection (Notifications): Reminder notifications ignore HA mode (DB IDO): Deprecation warning should include object type and name (Metrics): Incorrect escaping / formatting of perfdata to InfluxDB : Icinga stats min\execution\time and max\execution\time are invalid : icinga check reports "-1" for minimum latency and execution time and only uptime has a number but 0 (DB IDO): Do not clear {host,service,contact}group\_members tables on restart (API): Fix URL encoding for '&' (Cluster): Increase cluster reconnect interval (Notifications): Optimize two ObjectLocks into one in Notification::BeginExecuteNotification method (Cluster): CheckerComponent sometimes fails to schedule checks in time (Cluster): Duplicate messages for command\_endpoint w/ master and satellite (API): state\filters\real shouldn't be visible in the API (Notifications): notification.notification\_number runtime attribute returning 0 \(instead of 1\) in first notification e-mail : Test the change with HARD OK transitions (DB IDO): IDO module starts threads before daemonize (DB IDO): DB IDO query queue does not clean up with

(DB IDO): Add missing index on state history for DB IDO cleanup : Ensure to clear the SSL error queue before calling SSL\{read,write,do\handshake} (Configuration): include\_recursive should gracefully handle inaccessible files (API): Icinga incorrectly disconnects all endpoints if one has a wrong certificate (DB IDO): deadlock in ido reconnect (Metrics): Key Escapes in InfluxDB Writer Don't Work (Configuration): Icinga crashes when using include\_recursive in an object definition (Configuration): ConfigWriter::EmitScope incorrectly quotes dictionary keys (DB IDO): Comment/Downtime delete queries are slow (DB IDO): Overflow in current\notification\number column in DB IDO MySQL (DB IDO): Program status table is not updated in IDO after starting icinga (Cluster): Icinga 2 satellite crashes (DB IDO): SOFT state changes with the same state are not logged (API): Trying to delete an object protected by a permissions filter, ends up deleting all objects that match the filter instead (Notifications): Duplicate notifications (Metrics): InfluxWriter doesnt sanitize the data before sending : Flapping Notifications dependent on state change : last SOFT state should be hard \(max\check\attempts\) (Configuration): Incorrect custom variable name in the hosts.conf example config (Configuration): Config validation should not delete comments/downtimes w/o reference : SOFT OK-state after returning from a soft state (Notifications): Downtime notifications do not pass author and comment : Problems with check scheduling for HARD state changes \(standalone/command\_endpoint\) (DB IDO): Volatile check results for OK-\>OK transitions are logged into DB IDO statehistory : Icinga 2 client gets killed during network scans (DB IDO): Outdated downtime/comments not removed from IDO database \(restart\) (Configuration): Don't allow flow control keywords outside of other flow control constructs (Notifications): notification interval = 0 not honoured in HA clusters (Notifications): last\problem\notification should be synced in HA cluster : Numbers are not properly formatted in runtime macro strings : Don't violate POSIX by ensuring that the argument to usleep\(3\) is less than 1000000 (Cluster): High load when pinning command endpoint on HA cluster (DB IDO): IDO: entry\_time of all comments is set to the date and time when Icinga 2 was restarted : Hang in TlsStream::Handshake (Configuration): High CPU usage with self-referenced parent zone config (Metrics): GELF multi-line output (API): /v1 returns HTML even if JSON is requested (Notifications): Notification times w/ empty begin/end specifications prevent sending notifications : Race condition in CreatePipeOverlapped (DB IDO): IDO: there is no usable object index on icinga\_{scheduleddowntime,comments} (DB IDO): IDO: check\_source should not be a TEXT field (DB IDO): Missing indexes for icinga\_endpoints\ and icinga\_zones\* tables in DB IDO schema (DB IDO): IDO: icinga\host/service\groups alias columns are TEXT columns : Function::Invoke should optionally register ScriptFrame (Cluster): Custom notification external commands do not work in a master-master setup : Disable immediate hard state after first checkresult (ITL): ITL uses unsupported arguments for check\_swap on Debian wheezy/Ubuntu trusty (ITL): Add interfacetable CheckCommand options --trafficwithpkt and --snmp-maxmsgsize (ITL): Add perfsyntax parameter to nscp-local-counter CheckCommand (ITL): Add custom variables for all check\_swap arguments (ITL): Add command definition for check\mysql\query (ITL): -q option for check\ntp\time is wrong (ITL): Add check command definition for check\_graphite (ITL): A lot of missing parameters for \(latest\) mysql\_health (ITL): Add support for "-A" command line switch to CheckCommand "snmp-process" (ITL): ITL: check\_iftraffic64.pl default values, wrong postfix value in CheckCommand (ITL): Add check command definition for db2\_health (ITL): Add check command definitions for kdc and rbl (ITL): add check command for plugin check\apache\status (ITL): Adding option to access ifName for manubulon snmp-interface check command (ITL): Add "fuse.gvfsd-fuse" to the list of excluded file systems for check\_disk (ITL): Add CIM port parameter for esxi\_hardware CheckCommand (ITL): Add "retries" option to check\_snmp command (ITL): icinga2.conf: Include plugins-contrib, manubulon, windows-plugins, nscp by default (ITL): Add IPv4/IPv6 support to the rest of the monitoring-plugins (ITL): Extend CheckCommand definitions for nscp-local (Documentation): Typo in Notification object documentation (Documentation): Documentation is missing for the API permissions that are new in

(Documentation): Development docs: Add own section for gdb backtrace from a running process (Documentation): Docs: API example uses wrong attribute name (Documentation): Missing documentation for "legacy-timeperiod" template (Documentation): The description for the http\_certificate attribute doesn't have the right default value (Documentation): Add URL and short description for Monitoring Plugins inside the ITL documentation (Documentation): Rewrite Client and Cluster chapter and; add service monitoring chapter (Documentation): Incorrect API permission name for /v1/status in the documentation (Documentation): Missing explanation for three level clusters with CSR auto-signing (Documentation): Incorrect documentation about apply rules in zones.d directories (Documentation): Improve author information about check\_yum (Documentation): pkg-config is not listed as a build requirement in INSTALL.md (Documentation): Add a note to the docs that API POST updates to custom attributes/groups won't trigger re-evaluation (Documentation): Documentation: Setting up Plugins section is broken (Documentation): Typo in Manubulon CheckCommand documentation (Documentation): Migration docs still show unsupported CHANGE\_\MODATTR external commands (Documentation): Add a note about creating Zone/Endpoint objects with the API (Documentation): Incorrect URL for API examples in the documentation (Documentation): Improve "Endpoint" documentation (Documentation): Fix systemd client command formatting (Documentation): Missing quotes for API action URL (Documentation): Use HTTPS for debmon.org links in the documentation (Documentation): node setup: Add a note for --endpoint syntax for client-master connection (Documentation): Documentation review (Documentation): Update SELinux documentation (Packages): Revert dependency on firewalld on RHEL (Installation): Remove unused functions from icinga-installer (Packages): Error compiling on windows due to changes in apilistener around minimum tls version (Packages): Windows build broken since ref 11292 (Installation): Increase default systemd timeout (Packages): Build fails with Visual Studio 2013 (Packages): Icinga fails to build with OpenSSL 1.1.0 (Tests): Add debugging mode for Utility::GetTime (Tests): Boost tests are missing a dependency on libmethods (Installation): Windows: Error with repository handler \(missing /var/lib/icinga2/api/repository path\) (Packages): Incorrect filter in pick.py (Packages): Windows Installer: Remove dependency on KB2999226 package (Packages): RPM update starts disabled icinga2 service (Packages): Reload permission error with SELinux (Installation): Add script for automatically cherry-picking commits for minor versions (Packages): Provide packages for icinga-studio on Fedora (Packages): Firewalld Service definition for Icinga (Packages): Package for syntax highlighting This release fixes a number of issues introduced in 2.4.8. (Compat): Command Pipe thread 100% CPU Usage : Checks are not executed anymore on command (Configuration): Segfault when trying to start 2.4.8 (Metrics): Error: Function call 'rename' for file '/var/spool/icinga2/tmp/service-perfdata' failed with error code 2, 'No such file or directory' Bugfixes : Checker component doesn't execute any checks for command\_endpoint Bugfixes Support for limiting the maximum number of concurrent checks (new configuration option) HA-aware features now wait for connected cluster nodes in the same zone

DB IDO) The 'icinga' check now alerts on failed reloads (Cluster): Only activate HARunOnce objects once there's a cluster connection : Move CalculateExecutionTime and CalculateLatency into the CheckResult class (Cluster): Remove unused cluster commands (CLI): Implement SNI support for the CLI commands : Add support for subjectAltName in SSL certificates (Configuration): Internal check for config problems : "icinga" check should have state WARNING when the last reload failed (Metrics): PerfdataWriter: Better failure handling for file renames across file systems (Cluster): Alert config reload failures with the icinga check : Maximum concurrent service checks (DB IDO): Postgresql warnings on startup : assertion failed: GetResumeCalled\(\) (API): Incorrect variable names for joined fields in filters (DB IDO): Ensure that program status updates are immediately updated in DB IDO (API): API: Missing error handling for invalid JSON request body : Crash in UnameHelper : Expired downtimes are not removed (API): Icinga Crash with the workflow Create\_Host-\> Downtime for the Host -\> Delete Downtime -\> Remove Host (Configuration): Wrong log severity causes segfault : notification sent out during flexible downtime (API): inconsistent API /v1/objects/\ response for PUT requests (Compat): Command pipe overloaded: Can't send external Icinga command to the local command file (API): Icinga2 API: deleting service with cascade=1 does not delete dependant notification : Crash with empty ScheduledDowntime 'ranges' attribute : "day -X" time specifications are parsed incorrectly (Compat): Empty author/text attribute for comment/downtimes external commands causing crash (Cluster): Icinga2 agent gets stuck after disconnect and won't relay messages (Configuration): Comments and downtimes of deleted checkable objects are not deleted : Icinga crashes with a segfault on receiving a lot of check results for nonexisting hosts/services (Configuration): Service apply without name possible (ITL): 'disk' CheckCommand: Exclude 'cgroup' and 'tracefs' by default (ITL): Provide icingacli in the ITL (Documentation): Add the category to the generated changelog (Documentation): Missing documentation for event commands w/ execution bridge (Documentation): Incorrect chapter headings for Object\#to\_string and Object\#type (Packages): Update chocolatey packages and RELEASE.md Bugfixes (DB IDO): Crash in IdoMysqlConnection::ExecuteMultipleQueries Bugfixes (DB IDO): Failed assertion in IdoPgsqlConnection::FieldToEscapedString (Documentation): Update RELEASE.md (Documentation): Docs: Zone attribute 'endpoints' is an array (Packages): Icinga 2 fails to build on Ubuntu Xenial Windows Installer changed from NSIS to MSI New configuration attribute for hosts and services: check_timeout (overrides the CheckCommand's timeout when set) ITL updates Lots of bugfixes (Configuration): Implement support for overriding check command timeout (Configuration): Vim Syntax Highlighting does not work with assign where (API): icinga2 crashes when a command\_endpoint is set, but the api feature is not active : Compiler warning in NotifyActive (API): Navigation attributes are missing in /v1/objects/\<type\> (Configuration): Segfault during config validation if host exists, service does not exist any longer and downtime expires : DowntimesExpireTimerHandler crashes Icinga2 with \<unknown function\> : Make the socket event engine configurable (Configuration): Overwriting global type variables causes crash in ConfigItem::Commit\(\) (API): API User gets wrongly authenticated \(client\_cn and no password\) : ConfigSync broken from 2.4.3. to 2.4.4 under Windows (CLI): Remove semi-colons in the auto-generated configs (API): Config validation for Notification objects should check whether the state filters are valid (DB IDO): IDO: historical contact notifications table column notification\_id is off-by-one : Downtimes are not always activated/expired on restart : Symlink subfolders not followed/considered for config files : Use retry\interval instead of check\interval for first OK -\> NOT-OK state change (Cluster): Downtimes and Comments are not synced to child zones (API): Socket Exceptions \(Operation not permitted\) while reading from API (Configuration): Too many assign where filters cause stack overflow (DB IDO): DB IDO: downtime is not in effect after restart (ITL): Add --units, --rate and --rate-multiplier support for the snmpv3 check command (ITL): Add --method parameter for check\{oracle,mysql,mssql}\health CheckCommands (Documentation): Remove instance\_name from Ido\Connection example (Documentation): Incorrect link in the documentation (Documentation): Update documentation URL for Icinga Web 2 (Documentation): Docs: Cluster manual SSL generation formatting is broken (Documentation): Update the CentOS installation documentation (Documentation): Add silent install / reference to NSClient++ to documentation (Documentation): Docs: Remove the migration script chapter (Documentation): Explain how to use functions for wildcard matches for arrays and/or dictionaries in assign where expressions (Documentation): Update .mailmap for Markus Frosch (Documentation): Add Windows setup wizard screenshots (Installation): Windows installer does not copy "features-enabled" on upgrade (Installation): Update chocolatey uninstall script for the MSI package (Installation): icinga2-installer.exe doesn't wait until NSIS uninstall.exe exits (Installation): Make sure to update the agent wizard banner (Installation): Package fails to build on \NIX (Installation): make install overwrites configuration files (Installation): FatalError\(\) returns when called before Application.Run (Installation): Install 64-bit version of NSClient++ on 64-bit versions of Windows (Installation): Update NSClient++ to version 0.4.4.19 (Installation): Error compiling icinga2 targeted for x64 on Windows (Packages): Build 64-bit packages for Windows (Installation): Icinga 2 Windows Agent does not honor install path during upgrade (Packages): Remove dependency for .NET

from the chocolatey package (Packages): Incorrect base URL in the icinga-rpm-release packages for Fedora (Packages): Add application manifest for the Windows agent wizard (Installation): logrotate fails since the "su" directive was removed Bugfixes (CLI): Add the executed cli command to the Windows wizard error messages (Configuration): Segmentation fault during 'icinga2 daemon -C' (CLI): 'icinga2 feature list' fails when all features are disabled (Configuration): Windows wizard error "too many arguments" : Volatile transitions from HARD NOT-OK-\>NOT-OK do not trigger notifications : epoll\_ctl might cause oops on Ubuntu trusty : Services status updated multiple times within check\_interval even though no retry was triggered : Incorrect check interval when passive check results are used : Active checks are executed even though passive results are submitted : DEL\DOWNTIME\BY\HOST\NAME does not accept optional arguments (CLI): Wrong log message for trusted cert in node setup command (CLI): Common name in node wizard isn't case sensitive (API): Status code 200 even if an object could not be deleted. (DB IDO): DB IDO: User notification type filters are incorrect (API): MkDirP not working on Windows (Notifications): Host notification type is PROBLEM but should be RECOVERY (Notifications): Problem notifications while Flapping is active (Notifications): Flapping notifications are sent for hosts/services which are in a downtime (ITL): Add "query" option to check\_postgres command. (ITL): ITL: Missing documentation for nwc\_health "mode" parameter (ITL): ITL: Allow to enforce specific SSL versions using the http check command (Documentation): Update development docs to use 'thread apply all bt full' (Documentation): Docs: Add API examples for creating services and check commands (Documentation): Typo in API docs (Documentation): Explain how to join hosts/services for /v1/objects/comments (Documentation): http check's URI is really just Path (Packages): Chocolatey package is missing uninstall function (Packages): Update build requirements for SLES 11 SP4 (Installation): CMake does not find MySQL libraries on Windows Bugfixes : Wrong permissions for files in /var/cache/icinga2/\ (Configuration): Permission problem after running icinga2 node wizard ITL Additional arguments for check_disk Fix incorrect path for the check_hpasm plugin New command: check_iostat Fix incorrect variable names for the check_impi plugin Cluster Improve cluster performance Fix connection handling problems (multiple connections for the same endpoint) Performance improvements for the DB IDO modules Lots and lots of various other bugfixes Documentation updates (Configuration): Add String\#trim (Cluster): Support TLSv1.1 and TLSv1.2 for the cluster transport encryption (Plugins): Add Timeout parameter to snmpv3 check (DB IDO): Log DB IDO query queue stats (DB IDO): DB IDO: Add a log message when the connection handling is completed (Configuration): Raise a config error for "Checkable" objects in global zones (Plugins): Add "-x" parameter in command definition for disk-windows CheckCommand (CLI): "node setup" tries to chown\(\) files before they're created : CentOS 5 doesn't support epoll\_create1 (Configuration): YYYY-MM-DD time specs are parsed incorrectly (API): Connections are not cleaned up properly (Cluster): Cluster WQ thread dies after fork\(\) : Clean up unused variables a bit (DB IDO): Problem with hostgroup\_members table cleanup (API): API queries on non-existant objects cause exception (Configuration): Crash in ConfigItem::RunWithActivationContext (Cluster): Ensure that config sync updates are always sent on reconnect (DB IDO): Deleting an object via API does not disable it in DB IDO (Cluster): Master reloads with agents generate false alarms (DB IDO): next\_check noise in the IDO (Cluster): Check event duplication with parallel connections involved (Cluster): Segfault in ApiListener::ConfigUpdateObjectAPIHandler : Stream buffer size is 512 bytes, could be raised (CLI): Escaped sequences not properly generated with 'node update-config' (Configuration): Mistake in mongodb command definition \(mongodb\_replicaset\) : Modified attributes do not work for the IcingaApplication object w/ external commands (Cluster): high load and memory consumption on icinga2 agent

(Configuration): Icinga state file corruption with temporary file creation (Cluster): Cluster config sync: Ensure that /var/lib/icinga2/api/zones/\ exists (Cluster): Exception stack trace on icinga2 client when the master reloads the configuration (API): API actions: Decide whether fixed: false is the right default (DB IDO): is\_active in IDO is only re-enabled on "every second" restart : Remove superfluous \#ifdef (DB IDO): Icinga2 crashes in IDO when removing a comment (CLI): "repository add" cli command writes invalid "type" attribute (DB IDO): Evaluate if CanExecuteQuery/FieldToEscapedString lead to exceptions on !m\_Connected (DB IDO): Implement support for re-ordering groups of IDO queries (Configuration): Config validation doesn't fail when templates are used as object names (DB IDO): IDO breaks when writing to icinga\_programstatus with latest snapshots (Configuration): Relative path in include\_zones does not work (API): Cluster config sync ignores zones.d from API packages : Use NodeName in null and random checks (DB IDO): Failed IDO query for icinga\_downtimehistory : Incorrect information in --version on Linux (DB IDO): Avoid duplicate config and status updates on startup (Configuration): Disallow lambda expressions where side-effect-free expressions are not allowed : Missing path in mkdir\(\) exceptions (DB IDO): build of icinga2 with gcc 4.4.7 segfaulting with ido (API): Missing num\hosts\pending in /v1/status/CIB (CLI): node wizard does not remember user defined port (CLI): Remove the local zone name question in node wizard (API): API is not working on wheezy (Cluster): ApiListener::ReplayLog can block with a lot of clients (Cluster): Zone::CanAccessObject is very expensive (Compat): Crash in ExternalCommandListener (API): API queries cause memory leaks (DB IDO): Non-UTF8 characters from plugins causes IDO to fail (Plugins): check\_network performance data in invalid format (Plugins): check\memory and check\swap plugins do unit conversion and rounding before percentage calculations resulting in imprecise percentages (Livestatus): Livestatus log query - filter "class" yields empty results : Icinga2 reload timeout results in killing old and new process because of systemd (DB IDO): DB IDO: notification\_id for contact notifications is out of range (DB IDO): Add priority queue for disconnect/programstatus update events : Re-checks scheduling w/ retry\_interval (ITL): Checkcommand Disk : Option Freespace-ignore-reserved (ITL): The hpasm check command is using the PluginDir constant (ITL): Add check\_iostat to ITL (ITL): ITL check command possibly mistyped variable names (Documentation): Documentation: Unescaped pipe character in tables (Documentation): Outdated link to icingaweb2-module-nagvis (Documentation): Partially missing escaping in doc/7-icinga-template-library.md (Documentation): Incorrect IdoPgSqlConnection Example in Documentation (Documentation): Incorrect name in AUTHORS (Documentation): Troubleshooting: Explain how to fetch the executed command (Documentation): Better explaination for array values in "disk" CheckCommand docs (Documentation): Add example how to use custom functions in attributes (Documentation): Typos in the "troubleshooting" section of the documentation (Documentation): "setting up check plugins" section should be enhanced with package manager examples (Documentation): Formatting problem in "Advanced Filter" chapter (Documentation): Missing documentation for API packages zones.d config sync (Documentation): Missing SUSE repository for monitoring plugins documentation (Documentation): Wrong postgresql-setup initdb command for RHEL7 (Documentation): A PgSQL DB for the IDO can't be created w/ UTF8 (Documentation): Incorrect SQL command for creating the user of the PostgreSQL DB for the IDO (Packages): Windows build fails on InterlockedIncrement type (Installation): Race condition when using systemd unit file (Installation): Compiler warnings in lib/remote/base64.cpp (Installation): Logrotate on systemd distros should use systemctl not service (Installation): Build error with older CMake versions on VERSION\_LESS compare (Packages): Windows build fails with latest git master (Packages): chcon partial context error in safe-reload prevents reload (Installation): Crash on startup with incorrect directory permissions (Installation): Add CMake flag for disabling the unit tests ITL Add runningkernelusesudo option for the runningkernel check Configuration Add global constants:

`PlatformVersion`, `PlatformKernel` and `PlatformKernelVersion` CLI Use NodeName and ZoneName constants for 'node setup' and 'node wizard' (CLI): Use NodeName and ZoneName constants for 'node setup' and 'node wizard' (CLI): Remove --master\_zone from --help because it is currently not implemented (CLI): CLI command 'repository add' doesn't work (CLI): node wizard checks for /var/lib/icinga2/ca directory but not the files : lib/base/process.cpp SIGSEGV on Debian squeeze / RHEL 6 (API): Icinga 2 crashes when ScheduledDowntime objects are used (CLI): API setup command incorrectly overwrites existing certificates (CLI): "node wizard" does not ask user to verify SSL certificate (ITL): Add running\kernel\use\sudo option for the running\kernel check (ITL): Indentation in command-plugins.conf (ITL): Add by\ssh\options argument for the check\by\ssh plugin (Documentation): Incorrect path for icinga2 binary in development documentation (Documentation): Fix typos in the documentation (Documentation): Documentation for schedule-downtime is missing required paremeters (Documentation): Documentation example in "Access Object Attributes at Runtime" doesn't work correctly (Documentation): Incorrect web inject URL in documentation (Installation): Windows setup wizard crashes when InstallDir registry key is not set (Installation): Incorrect redirect for stderr in /usr/lib/icinga2/prepare-dirs (Packages): Build fails on SLES 11 SP3 with GCC 4.8 API RESTful API with basic auth or client certificates Filters, types, permissions configuration package management query/create/modify/delete config objects at runtime status queries for global stats actions (e.g. acknowledge all service problems) event streams ITL and Plugin Check Command definitions The 'running_kernel' check command was moved to the plugins-contrib section. You have to update your config to include 'plugins-contrib' Configuration The global constants Enable and Vars have been removed. Use the IcingaApplication object attributes instead. Features New Graphite tree. Please check the documentation how enable the legacy schema. IcingaStatusWriter feature has been deprecated and will be removed in future versions. Modified attributes are not exposed as bit mask to external interfaces anymore (api related changes). External commands like CHANGE__MODATTR have been removed. : Release 2.4.0 (API): Enhance programmatic examples for the API docs (API): Change object query result set (API): Change 'api setup' into a manual step while configuring the API (CLI): Icinga 2 script debugger (CLI): Change output format for 'icinga2 console' : Change GetLastStateUp/Down to host attributes (Plugins): Missing parameters for check jmx4perl (CLI): Use ZoneName variable for parent\_zone in node update-config (CLI): Rewrite man page (DB IDO): Add the name for comments/downtimes next to legacy\_id to DB IDO : Remove api.cpp, api.hpp (Cluster): Add getter for endpoint 'connected' attribute (API): Hide internal attributes (API): Original attributes list in IDO (API): Log a warning message on unauthorized http request (API): Use the API for "icinga2 console" (DB IDO): DB IDO should provide its connected state via /v1/status (API): Document that modified attributes require accept\_config for cluster/clients (Configuration): Pretty-print arrays and dictionaries when converting them to strings (API): Change object version to timestamps for diff updates on config sync (Configuration): Provide keywords to retrieve the current file name at parse time (API): Move /v1/\<type\> to /v1/objects/\<type\> (API): Rename statusqueryhandler to objectqueryhandler (API): Sanitize error status codes and messages : Make ConfigObject::{G,S}etField\(\) method public (API): Add global status handler for the API (API): Implement CSRF protection for the API (API): Implement joins for status queries (API): Implement a demo API client: Icinga Studio (API): URL class improvements (API): Add plural\_name field to /v1/types (Configuration): Use an AST node for the 'library' keyword (Configuration): Implement ignore\on\error keyword (API): Rename config/modules to config/packages (API): Remove debug messages in HttpRequest class : Add String::ToLower/ToUpper (API): Add package attribute for ConfigObject and set its origin (API): Implement support for restoring modified attributes (API): Implement support for indexers in ConfigObject::RestoreAttribute : Implement Object\#clone and

Array/Dictionary\#clone to shallow\_clone : Add override keyword for all relevant methods (API): Figure out how to sync dynamically created objects inside the cluster (API): Ensure that runtime config objects are persisted on disk : Implement the 'base' field for the Type class : Rename DynamicObject/DynamicType to ConfigObject/ConfigType : Implement support for attaching GDB to the Icinga process on crash (API): Implement global modified attributes (API): Implement support for . in modify\_attribute (API): Remove GetModifiedAttributes/SetModifiedAttributes (API): Re-implement events for attribute changes (API): Validation for modified attributes (Configuration): Setting global variables with i2tcl doesn't work (API): Make Comments and Downtime types available as ConfigObject type in the API (API): Update the url parsers behaviour (API): Documentation for config management API (API): Add real path sanity checks to provided file paths : String::Trim\(\) should return a new string rather than modifying the current string (API): Implement support for X-HTTP-Method-Override : Add Array::FromVector\(\) method : Add exceptions for Utility::MkDir{,P} : Move url to /lib/remote from /lib/base : Register ServiceOK, ServiceWarning, HostUp, etc. as constants (API): Implement base64 de- and encoder (API): Implement ApiUser type (API): Implement URL parser (Graphite): New Graphite schema (API): Implement support for filter\_vars (API): Define RESTful url schema (API): Implement support for HTTP : Allow comments when parsing JSON (DB IDO): DB IDO/Livestatus: Add zone object table w/ endpoint members (API): API Documentation (API): Implement config file management commands (API): Staging for configuration validation (API): Support validating configuration changes (API): Commands for adding and removing objects (API): Multiple sources for zone configuration tree (API): Implement support for writing configuration files (API): Update modules to support adding and removing objects at runtime (API): Dependency tracking for objects (API): Disallow changes for certain config attributes at runtime (API): Changelog for modified attributes (API): API status queries (API): API permissions (API): Create default administrative user (API): Password-based authentication for the API (API): Certificate-based authentication for the API (API): Enable the ApiListener by default (API): Configuration file management for the API (API): Runtime configuration for the API (API): Add modified attribute support for the API (API): Add commands \(actions\) for the API (API): Implement status queries for the API (API): Event stream support for the API (API): Implement filters for the API (API): Reflection support for the API (API): Basic API framework (Configuration): Implement sandbox mode for the config parser (Configuration): Remove the ScopeCurrent constant : Avoid unnecessary dictionary lookups : Move implementation code from thpp files into separate files (Configuration): Use DebugHint information when reporting validation errors : Add support for the C++11 keyword 'override' (Configuration): Implement constructor-style casts (Configuration): Refactor the startup process (CLI): Implement support for libedit : Deprecate IcingaStatusWriter feature (DB IDO): Implement support for CLIENT\MULTI\STATEMENTS (DB IDO): Add support for current and current-1 db ido schema version (DB IDO): Add embedded DB IDO version health check : Allow some of the Array and Dictionary methods to be inlined by the compiler : 'icinga2 console' should serialize temporary attributes \(rather than just config + state\) (Graphite): graphite writer should pass "-" in host names and

in perf data (API): Add icinga, cluster, cluster-zone check information to the ApiListener status handler (Configuration): Validators should be implemented in \(auto-generated\) native code : Use notify\_one in WorkQueue::Enqueue : Utility::FormatErrorNumber fails when error message uses arguments (DB IDO): Group memberships are not updated for runtime created objects (API): API overwrites \(and then deletes\) config file when trying to create an object that already exists (API): Don't allow users to set state attributes via PUT : Deadlock in MacroProcessor::EvaluateFunction : modify\_attribute: object cannot be cloned (API): Detailed error message is missing when object creation via API fails (API): API call doesn't fail when trying to use a template that doesn't exist : Improve location information for errors in API filters (API): /v1/console should only use a single permission (API): 'remove-comment' action does not support filters (CLI): 'api setup' should create a user even when api feature is already enabled (CLI): Autocompletion doesn't work in the debugger (API): There's a variable called 'string' in filter expressions (CLI): Broken build - unresolved external symbol "public: void \\thiscall icinga::ApiClient::ExecuteScript... (DB IDO): Async mysql queries aren't logged in the debug log : Don't validate custom attributes that aren't strings : Crash in ConfigWriter::EmitIdentifier (CLI): Spaces do not work in command arguments (DB IDO): Change session\_token to integer timestamp : Fix indentation for Dictionary::ToString : Crash in ConfigWriter::GetKeywords (Cluster): Circular reference between \Connection and TlsStream objects (API): Mismatch on {comment,downtime}\_id vs internal name in the API : CreatePipeOverlapped is not thread-safe : Figure out whether we need the Checkable attributes state\raw, last\state\raw, hard\state\_raw (Plugins): Increase the default timeout for OS checks (API): Plural name rule not treating edge case correcly (API): IcingaStudio: Accessing non-ConfigObjects causes ugly exception (API): Incorrect JSON-RPC message causes Icinga 2 to crash (DB IDO): Unique constraint violation with multiple comment inserts in DB IDO (DB IDO): IDO tries to execute empty UPDATE queries (Configuration): Crash in IndexerExpression::GetReference when attempting to set an attribute on an object other than the current one (Configuration): Line continuation is broken in 'icinga2 console' (Configuration): Don't allow scripts to access FANoUserView attributes in sandbox mode (Cluster): Improve error handling during log replay (CLI): Improve --help output for the --log-level option (CLI): "Command options" is empty when executing icinga2 without any argument. (DB IDO): Custom variables aren't removed from the IDO database (DB IDO): Changing a group's attributes causes duplicate rows in the icinga\_\group\_members table : OpenBSD: hang during ConfigItem::ActivateItems\(\) in daemon startup (CLI): Misleading wording in generated zones.conf (API): restore\_attribute does not work in clusters (API): Ensure that modified attributes work with clients with local config and no zone attribute (API): Icinga2 API performance regression (API): Version updates are not working properly (CLI): icinga2 repository host add does not work : ConfigWriter::EmitValue should format floating point values properly (API): Config sync does not set endpoint syncing and plays disconnect-sync ping-pong (API): /v1/objects/\<type\> returns an HTTP error when there are no objects of that type (API): Config Sync shouldn't send updates for objects the client doesn't have access to (API): Properly encode URLs in Icinga Studio (API): Use a temporary file for modified-attributes.conf updates (Configuration): ASCII NULs don't work in string values (API): URL parser is cutting off last character (API): PerfdataValue is not properly serialised in status queries (API): Move the Collection status handler to /v1/status (Configuration): Detect infinite recursion in user scripts (API): API actions do not follow REST guidelines (DB IDO): Add object\id where clause for icinga\downtimehistory (API): Error handling in HttpClient/icinga-studio (CLI): Unused variable console\_type in consolecommand.cpp (API): Filtering by name doesn't work (API): HTTP keep-alive does not work with .NET WebClient : Unused variable 'dobj' in configobject.tcpp (Configuration): Don't parse config files for branches not taken (Configuration): Crash in ConfigCompiler::RegisterZoneDir (API): Implement support for '.' when persisting modified attributes : Fix formatting in mkclass (API): Do not let API users create objects with invalid names (API): Missing conf.d or

cause parse failure : Crash during cluster log replay (CLI): Color codes in console prompt break line editing (CLI): Crash in ScriptFrame::~ScriptFrame (CLI): console autocompletion should take into account parent classes' prototypes (API): win32 build: S\_ISDIR is undefined (Configuration): ScriptFrame's 'Self' attribute gets corrupted when an expression throws an exception (Configuration): Operator - should not work with "" and numbers : Accessing field ID 0 \("prototype"\) fails (API): Broken cluster config sync w/o include\_zones (API): Problem with child nodes in http url registry (CLI): 'node wizard/setup' should always generate new CN certificates (DB IDO): Overflow in freshness\_threshold column \(smallint\) w/ DB IDO MySQL (API): build failure: demo module (DB IDO): Fix incorrect datatype for the check\source column in icinga\statehistory table (Configuration): Remove incorrect 'ignore where' expression from 'ssh' apply example (Cluster): Wrong vars changed handler in api events (DB IDO): PostgreSQL schema sets default timestamps w/o time zone : Compiler warnings with latest HEAD 5ac5f98 (DB IDO): pgsql driver does not have latest mysql changes synced (Configuration): Crash in VMOps::FunctionCall (Configuration): Validation fails even though field is not required (DB IDO): Failed assertion in IdoMysqlConnection::FieldToEscapedString (Configuration): Make default notifications include users from host.vars.notification.mail.users : Don't allow users to instantiate the StreamLogger class (ITL): Add ipv4/ipv6 only to tcp and http CheckCommand (ITL): Add check command mysql (ITL): Add check command negate (ITL): 'dig\_lookup' custom attribute for the 'dig' check command isn't optional (ITL): Ability to set port on SNMP Checks (ITL): Add check command nginx\_status (ITL): Move 'running\_kernel' check command to plugins-contrib 'operating system' section (ITL): Move the base command templates into libmethods (Documentation): Update wxWidgets documentation for Icinga Studio (Documentation): Explain DELETE for config stages/packages (Documentation): Documentation for /v1/types (Documentation): Documentation for the script debugger (Documentation): Explain variable names for joined objects in filter expressions (Documentation): Documentation for /v1/console (Documentation): Mention wxWidget \(optional\) requirement in INSTALL.md (Documentation): Icinga 2 API Docs (Documentation): Documentation should not reference real host names (Documentation): Documentation: Reorganize Livestatus and alternative frontends (Documentation): Incorrect attribute name in the documentation (Documentation): Add documentation for apply+for in the language reference chapter (Documentation): Escaping $ not documented (Documentation): Add 'support' tracker to changelog.py (Documentation): Remove duplicated text in section "Apply Notifications to Hosts and Services" (Documentation): Add documentation for api-users.conf and app.conf (Documentation): Document Object\#clone (Packages): Download URL for NSClient++ is incorrect (Packages): Update OpenSSL for the Windows builds (Installation): Don't try to use --gc-sections on Solaris (Packages): 'which' isn't available in a minimal CentOS container (Installation): "-Wno-deprecated-register" compiler option breaks builds on SLES 11 (Installation): icinga demo module can not be built (Packages): Specify pidfile for status\of\proc in the init script (Packages): Update OpenSSL for the Windows builds Function for performing CIDR matches: cidr_match() New methods: String#reverse and Array#reverse New ITL command definitions: nwc_health, hpasm, squid, pgsql Additional arguments for ITL command definitions: by_ssh, dig, pop, spop, imap, simap Documentation updates Various bugfixes (DB IDO): Add a debug log message for updating the program status table in DB IDO : New method: cidr\_match\(\) : Implement the Array\#reverse

String\#reverse methods : Implement a way for users to resolve commands+arguments in the same way Icinga does : escape\shell\arg\(\) method (Metrics): Add timestamp support for OpenTsdbWriter (Cluster): Wrong connection log message for global zones : cidr\_match\(\) doesn't properly validate IP addresses (Cluster): ApiListener::SyncRelayMessage doesn't send message to all zone members (Compat): Missing Start call for base class in CheckResultReader (Compat): Checkresultreader is unable to process host checks : "Not after" value overflows in X509 certificates on RHEL5 (Cluster): Don't log messages we've already relayed to all relevant zones (Metrics): Performance Data Labels including '=' will not be displayed correct : Percent character whitespace on Windows (Cluster): Don't throw an exception when replaying the current replay log file : Deadlock in TlsStream::Close (Configuration): config checker reports wrong error on apply for rules (Configuration): Config parser problem with parenthesis and newlines (Configuration): Remove unnecessary MakeLiteral calls in SetExpression::DoEvaluate (Configuration): null + null should not be "" (API): Problem with customvariable table update/insert queries (Livestatus): Improve error message for socket errors in Livestatus (Cluster): Deadlock in WorkQueue::Enqueue (Configuration): String methods cannot be invoked on an empty string (Livestatus): sending multiple Livestatus commands rejects all except the first (Cluster): check cluster-zone returns wrong log lag (ITL): Add timeout argument for pop, spop, imap, simap commands (ITL): Make check\_disk.exe CheckCommand Config more verbose (ITL): expand check command dig (ITL): Add ipv4/ipv6 only to nrpe CheckCommand (ITL): Add check command pgsql (ITL): Add check command squid (ITL): check\command for plugin check\hpasm (ITL): add check command for check\nwc\health (Documentation): Improve timeperiod documentation (Documentation): Broken table layout in chapter 20 (Documentation): Clarify on cluster/client naming convention and add troubleshooting section (Documentation): Find a better description for cluster communication requirements (Documentation): Windows Check Update -\> Access denied (Documentation): Improve documentation for check\_memory (Documentation): Update graphing section in the docs (Documentation): Update debug docs for core dumps and full backtraces (Documentation): Command Execution Bridge: Use of same endpoint names in examples for a better understanding (Documentation): Add FreeBSD setup to getting started (Installation): Rather use unique SID when granting rights for folders in NSIS on Windows Client (Packages): icinga2 ido mysql misspelled database username Feature 9218: Use the commandendpoint name as checksource value if defined : Use the command\endpoint name as check\source value if defined : Missing zero padding for generated CA serial.txt : Wrong calculation for host compat state "UNREACHABLE" in DB IDO (Cluster): Missing fix for reload on Windows in 2.3.9 : Nested "outer" macro calls fails on \(handled\) missing "inner" values (DB IDO): String escape problem with PostgreSQL \>= 9.1 and standard\conforming\strings=on Fix that the first SOFT state is recognized as second SOFT state Implemented reload functionality for Windows New ITL check commands Documentation updates Various other bugfixes (Livestatus): Use an empty dictionary for the 'this' scope when executing commands with Livestatus : Implement the Dictionary\#keys method : Implement Dictionary\#get and Array\#get (Configuration): Adding "-r" parameter to the check\_load command for dividing the load averages by the number of CPUs. (Configuration): Icinga2 - too many open files - Exception : Utility::Glob on Windows doesn't support wildcards in all but the last path component : Serial number field is not properly initialized for CA certificates (DB IDO): Add missing category for IDO query (Plugins): Default disk checks on Windows fail because check\_disk doesn't support -K : First SOFT state is recognized as second SOFT state (Cluster): Warning about invalid API function icinga::Hello : Agent freezes when the check returns massive output (Configuration): Dict initializer incorrectly re-initializes field that is set to an empty string (Configuration): Operator + is inconsistent when used with empty and non-empty strings (CLI): icinga2 node wizard don't take zone\_name input : Trying to set a field for a non-object instance fails (Cluster): Add log for missing EventCommand for command\_endpoints : Set correct X509 version for certificates (CLI): missing config warning on empty port in endpoints (Cluster): cluster check w/ immediate parent and child zone endpoints : Missing DEL\DOWNTIME\BY\HOST\NAME command required by Classic UI

(Cluster): Reload does not work on Windows (ITL): Add new arguments openvmtools for Open VM Tools (ITL): add check command nscp-local-counter (ITL): fix check command nscp-local (ITL): check\command interfaces option match\aliases has to be boolean (ITL): snmpv3 CheckCommand section improved (ITL): add check command for check\_mailq (ITL): Add check\_jmx4perl to ITL (ITL): check\command for plugin check\clamd (ITL): Add check\_redis to ITL (ITL): Add check\_yum to ITL (ITL): CheckCommand for check\_interfaces (Documentation): Duplicate severity type in the documentation for SyslogLogger (Documentation): Fix global Zone example to "Global Configuration Zone for Templates" (Documentation): typo in docs (Documentation): Update gdb pretty printer docs w/ Python 3 (Packages): Don't re-download NSCP for every build (Packages): missing check\_perfmon.exe (Tests): Build fix for Boost 1.59 Bugfixes (Metrics): Escaping does not work for OpenTSDB perfdata plugin (DB IDO): DB IDO: Do not update endpointstatus table on config updates (Configuration): Don't allow "ignore where" for groups when there's no "assign where" (ITL): checkcommand disk does not check free inode - check\_disk (ITL): Wrong parameter for CheckCommand "ping-common-windows" Bugfixes : Missing lock in ScriptUtils::Union : Assertion failed in icinga::ScriptUtils::Intersection (DB IDO): DB IDO: endpoint\ tables are cleared on reload causing constraint violations : Incorrect return value for the macro\(\) function (Configuration): Config parser ignores "ignore" in template definition (Cluster): Selective cluster reconnecting breaks client communication (Documentation): Enhance troubleshooting ssl errors & cluster replay log (Documentation): Wrong formatting in DB IDO extensions docs Require openssl1 on sles11sp3 from Security Module repository Bug in SLES 11's OpenSSL version 0.9.8j preventing verification of generated certificates. Re-create these certificates with 2.3.6 linking against openssl1 (cli command or CSR auto-signing). ITL: Add ldap, ntp_peer, mongodb and elasticsearch CheckCommand definitions Bugfixes (Cluster): Generated certificates cannot be verified w/ openssl 0.9.8j on SLES 11 (Cluster): Add log message for discarded cluster events \(e.g. from unauthenticated clients\) : Fix stability issues in the TlsStream/Stream classes (Cluster): Windows client w/ command\endpoint broken with $nscp\path$ and NscpPath detection (CLI): node setup: indent accept\config and accept\commands (Notifications): Functions can't be specified as command arguments (CLI): port empty when using icinga2 node wizard (ITL): new options for smtp CheckCommand (ITL): Add new options for ntp\_time CheckCommand (ITL): Add ntp\_peer CheckCommand (ITL): itl/plugins-contrib.d/\.conf should point to PluginContribDir (ITL): Incorrect check\_ping.exe parameter in the ITL (ITL): snmpv3 CheckCommand: Add possibility to set securityLevel (ITL): Add elasticsearch checkcommand to itl (ITL): Missing 'snmp\is\cisco' in Manubulon snmp-memory command definition (ITL): Incorrect variable name in the ITL (ITL): Add "mongodb" CheckCommand definition (ITL): Add "ldap" CheckCommand for "check\_ldap" plugin (Documentation): Update getting started for Debian Jessie (Documentation): wrong default port documentated for nrpe (Documentation): Missing openssl verify in cluster troubleshooting docs (Documentation): Documentation for checks in an HA zone is wrong (Documentation): Wrong file reference in README.md (Documentation): Merge documentation fixes from GitHub (Documentation): add pagerduty notification documentation (Packages): Require gcc47-c++ on sles11 from SLES software development kit repository (Packages): mysql-devel is not available in sles11sp3 (Installation): changelog.py: Allow to define project, make custom\_fields and changes optional (Installation): Enhance changelog.py with wordpress blogpost output (Packages): Add Icinga 2 to Chocolatey Windows Repository NSClient++ is now bundled with the Windows setup wizard and can optionally be installed Windows Wizard: "include <nscp>" is set by default Windows Wizard: Add update mode Plugins: Add check_perfmon plugin for Windows ITL: Add CheckCommand objects for Windows plugins ("include <windows-plugins>") ITL: Add CheckCommand definitions for "mongodb", "iftraffic", "disk_smb" ITL: Add arguments to CheckCommands "dns", "ftp", "tcp", "nscp" (Configuration): Add the --load-all and --log options for nscp-local (Configuration): Include \<nscp\> by default on Windows (Metrics): Add timestamp support for PerfdataWriter (Configuration): Add CheckCommand objects for Windows plugins (Plugins): Add check\_perfmon plugin for Windows (Plugins): plugins-contrib.d/databases.conf: wrong argument for mssql\_health (Compat): Multiline vars are broken in

output (Compat): Multi line output not correctly handled from compat channels (Configuration): Disk and 'icinga' services are missing in the default Windows config (Configuration): Some checks in the default Windows configuration fail (DB IDO): Missing custom attributes in backends if name is equal to object attribute (DB IDO): Incorrect type and state filter mapping for User objects in DB IDO (DB IDO): Downtimes are always "fixed" (DB IDO): Possible DB deadlock (Configuration): node update-config reports critical and warning (Configuration): WIN: syslog is not an enable-able feature in windows (DB IDO): Wrong timestamps w/ historical data replay in DB IDO (CLI): Node wont connect properly to master if host is is not set for Endpoint on new installs : Icinga2 --version: Error showing Distribution (Configuration): Syntax Highlighting: host.address vs host.add (ITL): Add 'iftraffic' to plugins-contrib check command definitions (ITL): Add 'disk\_smb' Plugin CheckCommand definition (ITL): 'disk': wrong order of threshold command arguments (ITL): Add arguments to "tcp" CheckCommand (ITL): Add arguments to "ftp" CheckCommand (ITL): Add arguments to "dns" CheckCommand (ITL): Add 'check\_drivesize' as nscp-local check command (ITL): Add SHOWALL to NSCP Checkcommand (ITL): Including \<nscp\> on Linux fails with unregistered function (Documentation): Documentation: Move configuration before advanced topics (Documentation): Enhance cluster docs with HA command\_endpoints (Documentation): Enhance cluster/client troubleshooting (Documentation): Documentation: Update the link to register a new Icinga account (Documentation): Documentation: Typo (Documentation): Documentation: Extend Custom Attributes with the boolean type (Documentation): Wrong service table attributes in Livestatus documentation (Documentation): Documentation: Typo (Documentation): Update documentation for escape sequences (Documentation): Explain string concatenation in objects by real-world example (Documentation): Use a more simple example for passing command parameters (Documentation): Add local variable scope for \Command to documentation \(host, service, etc\) (Documentation): Add typeof in 'assign/ignore where' expression as example (Documentation): Add examples for function usage in "set\_if" and "command" attributes (Documentation): Best practices: cluster config sync (Documentation): Update service apply for documentation (Documentation): Typo in Configuration Best Practice (Documentation): Include Windows support details in the documentation (Documentation): ITL Documentation: Add a link for passing custom attributes as command parameters (Documentation): Missing "\)" in last Apply Rules example (Documentation): Add documentation and CheckCommands for the windows plugins (Installation): Wrong permission etc on windows (Installation): Add support for installing NSClient++ in the Icinga 2 Windows wizard (Installation): Determine NSClient++ installation path using MsiGetComponentPath (Installation): --scm-installs fails when the service is already installed (Installation): Bundle NSClient++ in Windows Installer (Packages): SPEC: Give group write permissions for perfdata dir (Installation): Extend Windows installer with an update mode ITL: Check commands for various databases Improve validation messages for time periods Update maxcheckattempts in generic-{host,service} templates Update logrotate configuration Bugfixes : Improve timeperiod validation error messages (Cluster): Agent Wizard: add options for API defaults (Configuration): custom attributes with recursive macro function calls causing sigabrt (CLI): troubleshoot truncates crash reports : Acknowledging problems w/ expire time does not add the expiry information to the related comment for IDO and compat (Notifications): Multiple log messages w/ "Attempting to send notifications for notification object" (DB IDO): scheduled\downtime\depth column is not reset when a downtime ends or when a downtime is being removed (DB IDO): Downtimes which have been triggered are not properly recorded in the database (DB IDO): Don't update scheduleddowntime table w/ trigger\_time column when only adding a downtime : Fix complexity class for Dictionary::Get (CLI): Node wizard should only accept 'y', 'n', 'Y' and 'N' as answers for boolean questions (Configuration): Default max\check\attempts should be lower for hosts than for services (Configuration): Validation errors for time ranges which span the DST transition (Configuration): logrotate does not work (Cluster): command\endpoint check\results are not replicated to other endpoints in the same zone (ITL):

is not in the RPM package (ITL): check\_disk order of command arguments (ITL): Add arguments to the UPS check (ITL): Add database plugins to ITL (Documentation): Documentation: set\_if usage with boolean values and functions (Documentation): Typo in graphite feature enable documentation (Documentation): Fix a typo (Documentation): Add explanatory note for Icinga2 client documentation (Documentation): Fix a minor markdown error (Documentation): Reword documentation of check\_address (Installation): Vim syntax: Match groups before host/service/user objects (Installation): Windows Build: Flex detection (Packages): logrotate doesn't work on Ubuntu New function: parseperformancedata Include more details in --version Improve documentation Bugfixes : Include more details in --version : New function: parse\performance\data (Notifications): Show state/type filter names in notice/debug log : Array in command arguments doesn't work (Configuration): Local variables in "apply for" are overridden (CLI): Segmentation fault when executing "icinga2 pki new-cert" (Configuration): Return doesn't work inside loops (Configuration): Figure out why command validators are not triggered (Configuration): object Notification + apply Service fails with error "...refers to service which doesn't exist" (Plugins): Plugin "check\_http" is missing in Windows environments (Configuration): Add missing keywords in the syntax highlighting files : Don't ignore extraneous arguments for functions (DB IDO): Don't update custom vars for each status update : startup.log broken when the DB schema needs an update (Configuration): Missing config validator for command arguments 'set\_if' (Configuration): Update syntax highlighting for 2.3 features (Configuration): Improve error message for invalid field access (Configuration): Fix VIM syntax highlighting for comments (ITL): wrong 'dns\_lookup' custom attribute default in command-plugins.conf (ITL): Add "random" CheckCommand for test and demo purposes (Documentation): Fix incorrect perfdata templates in the documentation (Documentation): Move release info in INSTALL.md into a separate file (Documentation): Correct HA documentation (Documentation): Typo and invalid example in the runtime macro documentation (Documentation): Remove prompt to create a TicketSalt from the wizard (Documentation): Explain processing logic/order of apply rules with for loops (Documentation): Revamp migration documentation (Documentation): Typo in doc library-reference (Documentation): Fix a typo in the documentation of ICINGA2\WITH\MYSQL and ICINGA2\WITH\PGSQL (Documentation): Add "access objects at runtime" examples to advanced section (Documentation): Update documentation for "apply for" rules (Documentation): Re-order the object types in alphabetical order (Installation): Flex version check does not reject unsupported versions (Installation): Build warnings with CMake 3.1.3 Bugfixes : Log message for cli commands breaks the init script Bugfixes Please note that this version fixes the default thresholds for the disk check which were inadvertently broken in 2.3.0; if you're using percent-based custom thresholds you will need to add the '%' sign to your custom attributes (Configuration): Implement String\#contains : Crash in Dependency::Stop : Fix formatting for the GDB stacktrace : Make sure that the /var/log/icinga2/crash directory exists (Configuration): Config validation fail because of unexpected new-line (Cluster): Api heartbeat message response time problem (CLI): Missing program name in 'icinga2 --version' : Kill signal sent only to check process, not whole process group (ITL): Fix check\_disk thresholds: make sure partitions are the last arguments (Documentation): Update documentation for DB IDO HA Run-Once (Documentation): Fix check\_disk default thresholds and document the change of unit (Packages): Debian packages do not create /var/log/icinga2/crash Improved configuration validation Unnecessary escapes are no longer permitted (e.g. \') Dashes are no longer permitted in identifier names (as their semantics are ambiguous) Unused values are detected (e.g. { "-M" }) Validation for time ranges has been improved Additional validation rules for some object types (Notification and User) New language features Implement a separate type for boolean values Support for user-defined functions Support for conditional statements (if/else) Support for 'for' and 'while' loops Support for local variables using the 'var' keyword New operators: % (modulo), ^ (xor), - (unary minus) and + (unary plus) Implemented prototype-based methods for most built-in types (e.g. [ 3, 2 ].sort()) Explicit access to local and global variables using the 'locals' and 'globals' keywords Changed the order in which filters are evaluated for apply rules with 'for' Make type objects accessible as global variables Support for using functions in custom attributes Access objects and their runtime attributes in functions (e.g.

ITL improvements Additional check commands were added to the ITL Additional arguments for existing check commands CLI improvements Add the 'icinga2 console' CLI command which can be used to test expressions Add the 'icinga2 troubleshoot' CLI command for collecting troubleshooting information Performance improvements for the 'icinga2 node update-config' CLI command Implement argument auto-completion for short options (e.g. daemon -c) 'node setup' and 'node wizard' create backups for existing certificate files Add ignoresoftstates option for Dependency object configuration Fewer threads are used for socket I/O Flapping detection for hosts and services is disabled by default Added support for OpenTSDB New Livestatus tables: hostsbygroup, servicesbygroup, servicesbyhostgroup Include GDB backtrace in crash reports Various documentation improvements Solved a number of issues where cluster instances would not reconnect after intermittent connection problems A lot of other, minor changes to `1.13.0` required! : Support the SNI TLS extension : Add validator for time ranges in ScheduledDowntime objects : Remove macro argument for IMPL\TYPE\LOOKUP : Include GDB backtrace in crash reports (Configuration): Add support for else-if (Livestatus): Change Livestatus query log level to 'notice' (Cluster): Show slave lag for the cluster-zone check (Configuration): introduce time dependent variable values (Cluster): Add the ability to use a CA certificate as a way of verifying hosts for CSR autosigning : udp check command is missing arguments. (CLI): Backup certificate files in 'node setup' (Configuration): Implement continue/break keywords (Configuration): Implement support for Json.encode and Json.decode (Metrics): Add timestamp support for Graphite (Configuration): Add path information for objects in object list (Configuration): Implement Array\#join (Configuration): Implement validator support for function objects (Configuration): Make operators &&, || behave like in JavaScript : Add macros $host.check\source$ and $service.check\source$ (Configuration): Implement the while keyword (Configuration): Implement keywords to explicitly access globals/locals (CLI): Make invalid log-severity option output an error instead of a warning : Host/Service runtime macro downtime\_depth (Configuration): Assignments shouldn't have a "return" value : Implement additional methods for strings (CLI): Figure out what to do about libreadline \(license\) (CLI): Figure out a better name for the repl command (Configuration): Implement line-continuation for the "console" command (CLI): feature enable should use relative symlinks (Configuration): Document the new language features in

(CLI): Implement readline support for the "console" CLI command (CLI): Backport i2tcl's error reporting functionality into "icinga2 console" (Configuration): Figure out how variable scopes should work (Configuration): Implement a way to call methods on objects (Configuration): Implement a way to remove dictionary keys (Plugins): Windows plugins should behave like their Linux cousins (Configuration): ConfigCompiler::HandleInclude should return an inline dictionary (Configuration): Implement a boolean sub-type for the Value class : Disallow calling strings as functions (Configuration): Evaluate usage of function\(\) : Improve output of ToString for type objects : Register type objects as global variables (Configuration): The lexer shouldn't accept escapes for characters which don't have to be escaped (DB IDO): Implement socket\_path attribute for the IdoMysqlConnection class (Configuration): Implement official support for user-defined functions and the "for" keyword (Plugins): Windows agent is missing the standard plugin check\_ping (Plugins): Plugin Check Commands: Add icmp (Configuration): Implement the "if" and "else" keywords (Configuration): Figure out whether Number + String should implicitly convert the Number argument to a string (Configuration): Make the config parser thread-safe (Configuration): Implement the % operator : Move the cast functions into libbase (Configuration): Implement unit tests for the config parser : Implement an option to disable building the Demo component : Implement an option to disable building the Livestatus module (Notifications): Implement the DISABLE\HOST\SVC\NOTIFICATIONS and ENABLE\HOST\SVC\NOTIFICATIONS commands (Plugins): Missing check\_disk output on Windows (Configuration): Implement an AST Expression for T\_CONST : Rename \DEBUG to I2\DEBUG (Configuration): Redesign how stack frames work for scripts : ConfigCompiler::Compile\ should return an AST node (Configuration): ConfigCompiler::HandleInclude\ should return an AST node (CLI): Add an option that hides CLI commands (Configuration): Evaluate apply/object rules when the parent objects are created (Configuration): Variable from for loop not usable in assign statement (Configuration): Access object runtime attributes in custom vars & command arguments (Configuration): Please add labels in SNMP checks (Livestatus): Livestatus: Add GroupBy tables: hostsbygroup, servicesbygroup, servicesbyhostgroup (Configuration): Add parent soft states option to Dependency object configuration (Metrics): Add OpenTSDB Writer (Configuration): extended Manubulon SNMP Check Plugin Command (DB IDO): IDO should fill program\end\time on a clean shutdown (Notifications): Disable flapping detection by default : Run CheckCommands with C locale \(workaround for comma vs dot and plugin api bug\) (Plugins): Plugin Check Commands: add check\vmware\esx (Configuration): Disallow side-effect-free r-value expressions in expression lists : Don't spawn threads for network connections (CLI): Add troubleshooting collect cli command (DB IDO): Crash when using ido-pgsql : Icinga2 shuts down when service is reloaded (Configuration): Attribute hints don't work for nested attributes (Configuration): Dependency: Validate \\{host,service}\name objects on their existance (Livestatus): Improve Livestatus query performance (Configuration): Memory leak in Expression::GetReference (Configuration): else if doesn't work without an else branch : Check whether the new TimePeriod validator is working as expected (CLI): Resource leak in TroubleshootCommand::ObjectInfo (CLI): Resource leak in TroubleshootCommand::Run : Check if scheduled downtimes work properly (Plugins): check\_memory tool shows incorrect memory size on windows (Cluster): Don't accept config updates for zones for which we have an authoritative copy of the config (Cluster): Icinga crashed on SocketEvent (Cluster): Crash in ApiClient::TimeoutTimerHandler : Deadlock in TlsStream::Handshake (Cluster): Deadlock in ApiClient::Disconnect : Crash in SocketEvents::Register (Livestatus): Windows build fails (DB IDO): Hosts: process\performance\data = 0 in database even though enable\_perfdata = 1 in config (DB IDO): Crash in DbObject::SendStatusUpdate (Compat): Valgrind warning for ExternalCommandListener::CommandPipeThread : Crash in ApiEvents::RepositoryTimerHandler (Livestatus): livestatus limit header not working (Configuration): apply-for incorrectly converts loop var to string (Configuration): Config parser fails non-deterministic on Notification missing Checkable (CLI): Crash in icinga2 console (DB IDO): Deadlock with DB IDO dump and forcing a scheduled check (CLI): SIGSEGV in CLI (DB IDO): Icinga doesn't update long\_output in DB (Cluster): Misleading ApiListener connection log messages on a master \(Endpoint vs Zone\) (CLI): Figure out why 'node update-config' becomes slow over time : Icinga 2 sometimes doesn't reconnect to the master (Cluster): ICINGA process crashes every night (CLI): Build fails on Debian squeeze : Exception in WorkQueue::StatusTimerHandler (Cluster): deadlock in client connection (Cluster): Don't request heartbeat messages until after we've synced the log (Livestatus): Livestatus query on commands table with custom vars fails (DB IDO): Icinga2 segfaults when issuing postgresql queries : "node wizard" crashes : Don't attempt to restore program state from non-existing state file (DB IDO): DB IDO {host,service}checks command\_line value is "Object of type 'icinga::Array'" (DB IDO): Indicate that Icinga2 is shutting down in case of a fatal error : Make the arguments for the stats functions const-ref (DB IDO): DB IDO: Duplicate entry icinga\_scheduleddowntime (Plugins): Ignore the -X option for check\_disk on Windows : Compiler warnings (Cluster): Agent writes CR CR LF in synchronized config files : Added downtimes must be triggered immediately if checkable is Not-OK (Cluster): Config sync authoritative file never created (Compat): StatusDataWriter: Wrong host notification filters \(broken fix

\#8192\) (Compat): last\hard\state missing in StatusDataWriter (Configuration): Stacktrace on Endpoint not belonging to a zone or multiple zones : Icinga2 master doesn't change check-status when "accept\_commands = true" is not set at client node (Configuration): Apply rule '' for host does not match anywhere! (Cluster): Incorrectly formatted timestamp in .timestamp file : Crash in ScheduledDowntime::CreateNextDowntime : PidPath, VarsPath, ObjectsPath and StatePath no longer read from init.conf (Configuration): Don't allow comparison of strings and numbers (Cluster): ApiListener::ReplayLog shouldn't hold mutex lock during call to Socket::Poll : notify flag is ignored in ACKNOWLEDGE\_\\_PROBLEM commands (DB IDO): Duplicate entry on icinga\_hoststatus (CLI): Running icinga2 command as non privilged user raises error (Livestatus): Livestatus operator =~ is not case-insensitive (CLI): icinga2 node wizard: Create backups of certificates (Cluster): Report missing command objects on remote agent (Cluster): Problems using command\_endpoint inside HA zone (CLI): CLI console fails to report errors in included files (Configuration): Deadlock when accessing loop variable inside of the loop (Configuration): Lexer term for T\ANGLE\STRING is too aggressive (CLI): icinga2 node update should not write config for blacklisted zones/host (CLI): Argument auto-completion doesn't work for short options : group assign fails with bad lexical cast when evaluating rules : Exception on missing config files (Livestatus): Error messages when stopping Icinga : Compiler warnings : Segfault on icinga::String::operator= when compiling configuration (Configuration): parsing include\_recursive (Configuration): escaped backslash in string literals (CLI): Icinga crashes when config file name is invalid (Configuration): Debug info for indexer is incorrect : Config file passing validation causes segfault (Cluster): Agent checks fail when there's already a host with the same name (Configuration): User::ValidateFilters isn't being used (Configuration): ConfigCompilerContext::WriteObject crashes after ConfigCompilerContext::FinishObjectsFile was called (Configuration): segfault on startup (DB IDO): POSTGRES IDO: invalid syntax for integer: "true" while trying to update table icinga\_hoststatus (CLI): console: Don't repeat line when we're reporting an error for the last line (Configuration): Modulo 0 crashes Icinga (Configuration): Location info for strings is incorrect (Configuration): Setting an attribute on an r-value fails (Configuration): Confusing error message when trying to set a field on a string (Configuration): icinga 2 Config Error needs to be more verbose (Configuration): Debug visualizer for the Value class is broken (Configuration): if doesn't work for non-boolean arguments (Configuration): Require at least one user for notification objects \(user or as member of user\_groups\) (Configuration): Confusing error message for import : The Boolean type change broke set\_if (Configuration): len\(\) overflows (Configuration): operator precedence for % and \> is incorrect : Value\(""\).IsEmpty\(\) should return true (Cluster): Windows Agent: Missing directory "zones" in setup (Configuration): Config validator doesn't show in which file the error was found : Serialize\(\) fails to serialize objects which don't have a registered type : Fix warnings when using CMake

(DB IDO): Missing persistent\comment, notify\contact columns for acknowledgement table (Configuration): - shouldn't be allowed in identifiers : Compiler warnings (Configuration): - operator doesn't work in expressions (Configuration): Set expression should check whether LHS is a null pointer (Configuration): Validate array subscripts (Configuration): The \\return keyword is broken (Configuration): Return values for functions are broken : Scoping rules for "for" are broken (Configuration): Unterminated string literals should cause parser to return an error (Configuration): Change parameter type for include and include\recursive to T\STRING (Configuration): Fix the shift/reduce conflicts in the parser (DB IDO): DB IDO: Duplicate entry icinga\_{host,service}dependencies (Notifications): Reminder notifications not being sent but logged every 5 secs : Avoid rebuilding libbase when the version number changes : Unity build doesn't work with MSVC (Configuration): validate configured legacy timeperiod ranges (Configuration): Update validators for CustomVarObject (Configuration): Invalid macro results in exception : Scheduled start time will be ignored if the host or service is already in a problem state : Remove name and return value for stats functions (ITL): Add check commands for NSClient++ (ITL): ITL: The procs check command uses spaces instead of tabs (ITL): Rename PluginsContribDir to PluginContribDir (ITL): Snmp CheckCommand misses various options (ITL): add webinject checkcommand (ITL): Add ITL check command for check\ipmi\sensor (ITL): Extend disk checkcommand (ITL): The check "hostalive" is not working with ipv6 (ITL): ITL: ESXi-Hardware (ITL): ITL: Check\_Mem.pl (ITL): ITL: Interfacetable (Documentation): Document closures \('use'\) (Documentation): Fix a typo in documentation (Documentation): Update Remote Client/Distributed Monitoring Documentation (Documentation): Add documentation for cli command 'console' (Documentation): Remote Clients: Add manual setup cli commands (Documentation): The Zone::global attribute is not documented (Documentation): Allow name changed from inside the object (Documentation): Documentation enhancement for snmp traps and passive checks. (Documentation): Document operator precedence (Documentation): Variable expansion is single quoted. (Documentation): Add some more PNP details (Installation): Build fails on OpenBSD (Packages): Icinga2 config reset after package update \(centos6.6\) (Packages): '../features-available/checker.conf' does not exist \[Windows\] (Packages): Move the config file for the ido-\sql features into the icinga2-ido-\* packages (Installation): Don't build db\_ido when both MySQL and PostgreSQL aren't enabled Bugfixes (CLI): Output in "node wizard" is confusing (Compat): enable\event\handlers attribute is missing in status.dat : Segfault in Checkable::AddNotification : Scheduling downtime for host and all services only schedules services (CLI): Restart of Icinga hangs (DB IDO): Crash in DbConnection::ProgramStatusHandler (CLI): Restart fails after deleting a Host (Compat): Feature statusdata shows wrong host notification options (CLI): Satellite doesn't use manually supplied 'local zone name' : vfork\(\) hangs on OS X (Notifications): kUn-Bashify mail-{host,service}-notification.sh : livestatus / nsca / etc submits are ignored during reload : Configured recurring downtimes not applied on saturdays (ITL): check\ssmtp command does NOT support mail\from (Documentation): Typos in readme file for windows plugins (Documentation): inconsistent URL http\(s\)://www.icinga.org (Documentation): Update Icinga Web 2 uri to /icingaweb2 (Packages): Fix YAJL detection on Debian squeeze (Packages): Icinga 2.2.2 build fails on SLES11SP3 because of changed boost dependency Bugfixes (CLI): Segfault on update-config old empty config (CLI): icinga2 node update config shows hex instead of human readable names : Icinga 2.2.2 segfaults on FreeBSD : DB IDO query queue limit reached on reload (CLI): check\_interval must be greater than 0 error on update-config (Cluster): Arguments without values are not used on plugin exec (Plugins): Windows plugin check\_service.exe can't find service NTDS (CLI): Incorrect ticket shouldn't cause "node wizard" to terminate (Notifications): Volatile checks trigger invalid notifications on OK-\>OK state changes (Documentation): Typo in example of StatusDataWriter (Packages): Icinga 2.2.2 doesn't build on i586 SUSE distributions Bugfixes (Compat): StatusDataWriter: Wrong export of event\handler\enabled (CLI): Remove usage info from --version (DB IDO): DB IDO: Missing last\hard\state column update in {host,service}status tables : exception during config check : typeof does not work for numbers : SIGABRT while evaluating apply rules (Configuration): typeof\(\) seems to return null for arrays and dictionaries (Configuration): Apache 2.2 fails with new apache conf (Configuration): Test Classic UI config file with Apache

(Cluster): update\_config not updating configuration : CLI `icinga2 node update-config` doesn't sync configs from remote clients as expected (DB IDO): Improve error reporting when libmysqlclient or libpq are missing (Cluster): Segfault on issuing node update-config (Cluster): execute checks locally if command\_endpoint == local endpoint (Cluster): Cluster heartbeats need to be more aggressive (CLI): "node wizard" shouldn't crash when SaveCert fails (DB IDO): If a parent host goes down, the child host isn't marked as unrechable in the db ido (Cluster): Repository does not support services which have a slash in their name (Configuration): CPU usage at 100% when check\_interval = 0 in host object definition (Cluster): update-config fails to create hosts (Compat): Feature `compatlog' should flush output buffer on every new line : double macros in command arguments seems to lead to exception (Notifications): Docs: Better explaination of dependency state filters (Livestatus): Missing host downtimes/comments in Livestatus (ITL): No option to specify timeout to check\_snmp and snmp manubulon commands (Documentation): Setting a dictionary key to null does not cause the key/value to be removed (Documentation): Update host examples in Dependencies for Network Reachability documentation (Documentation): Wrong command in documentation for installing Icinga 2 pretty printers. (Documentation): Livestatus: Replace unixcat with nc -U (Documentation): Documentation: Add note on default notification interval in getting started notifications.conf (Tests): Unit tests fail on FreeBSD (Packages): SUSE packages %set\_permissions post statement wasn't moved to common (Packages): /usr/lib/icinga2 is not owned by a package (Tests): The unit tests still crash sometimes (Packages): icinga2 init-script doesn't validate configuration on reload action Support arrays in #6709 Allows to define multiple parameters for , , , . Bugfixes : Release 2.2.1 (Configuration): The classicui Apache conf doesn't support Apache 2.4 : Support for arrays in macros (CLI): Segfault in CA handling (Cluster): Verify if master radio box is disabled in the Windows wizard (Configuration): !in operator returns incorrect result (Configuration): Objects created with node update-config can't be seen in Classic UI (Cluster): Incorrect error message for localhost (Cluster): Icinga2 node add failed with unhandled exception : Restart Icinga - Error Restoring program state from file '/var/lib/icinga2/icinga2.state' (Cluster): Windows wizard is missing --zone argument (Cluster): Windows wizard uses incorrect CLI command (Cluster): Built-in commands shouldn't be run on the master instance in remote command execution mode (Livestatus): livestatus large amount of submitting unix socket command results in broken pipes (ITL): Increase default timeout for NRPE checks (Documentation): Documentation: Explain how unresolved macros are handled (Documentation): Document how arrays in macros work (Documentation): Wrong information in section "Linux Client Setup Wizard for Remote Monitoring" (Documentation): 2.2.0 has out-of-date icinga2 man page (Documentation): object and template with the same name generate duplicate object error (Packages): Fix Apache config in the Debian package (Packages): Wrong permission in run directory after restart (Packages): Move the icinga2-prepare-dirs script elsewhere (Packages): Icinga 2.2 misses the build requirement libyajl-devel for SUSE distributions (Packages): /usr/sbin/icinga-prepare-dirs conflicts in the bin and common package (Packages): Systemd rpm scripts are run in wrong package (Packages): icinga2 checkconfig should fail if group given for command files does not exist (Packages): Update spec file to use yajl-devel (Packages): service icinga2 status gives wrong information when run as unprivileged user DB IDO schema update to version `1.12.0` schema files in `lib/dbido{mysql,pgsql}/schema` (source) Table `programstatus`: New column `program_version` Table `customvariables` and `customvariablestatus`: New column `is_json` (required for custom attribute array/dictionary support) New features : Logging check results, state changes, notifications to GELF (graylog2, logstash) #7619 Agent/Client/Node framework #7249 Windows plugins for the client/agent parts #7242 #7243 New CLI commands #7245 `icinga2 feature {enable,disable}` replaces `icinga2-{enable,disable}-feature` script #7250 `icinga2 object list` replaces `icinga2-list-objects` script #7251 `icinga2 pki` replaces` icinga2-build-{ca,key}` scripts #7247 `icinga2 repository` manages `/etc/icinga2/repository.d` which must be included in `icinga2.conf` #7255 `icinga2 node` cli command provides node (master, satellite, agent) setup (wizard) and management functionality #7248 `icinga2 daemon` for existing daemon arguments (`-c`, `-C`). Removed `-u` and `-g` parameters in favor of . bash auto-completion & terminal colors #7396 Configuration Former `localhost` example host is now defined in #7594 All example services moved into advanced apply rules in Updated downtimes configuration example in #7472 Updated notification apply example in #7594 Support for object attribute 'zone' #7400 Support setting #7479 Support arrays and dictionaries in #6544 #7560 Add for advanced dynamic object generation #7561 New attribute `accept_commands` for #7559 New file included first containing new constants `RunAsUser` and

Cluster Add using generated ticket #7244 Allow to on endpoint clients #7559 Perfdata : Don't change perfdata, pass through from plugins #7268 : Add warn/crit/min/max perfdata and downtime_depth stats values #7366 #6946 Packages `python-icinga2` package dropped in favor of integrated cli commands #7245 Windows Installer for the agent parts #7243 Note Please remove `conf.d/hosts/localhost*` after verifying your updated configuration! : Icinga 2 should use less RAM (Metrics): Add GelfWriter for writing log events to graylog2/logstash : Optimize class layout (Configuration): Revamp sample configuration: add NodeName host, move services into apply rules schema (Configuration): Refactor AST into multiple classes (Configuration): Implement support for arbitrarily complex indexers (Configuration): Generate objects using apply with foreach in arrays or dictionaries \(key =\> value\) (Configuration): Support dictionaries in custom attributes (Cluster): Execute remote commands on the agent w/o local objects by passing custom attributes : Implement keys\(\) (CLI): Cli command Node: Disable notifications feature on client nodes (CLI): Cli Command: Rename 'agent' to 'node' (Cluster): Require --zone to be specified for "node setup" (Cluster): Rename --agent to --zone \(for blacklist/whitelist\) (CLI): Cli: Use Node Blacklist functionality in 'node update-config' (CLI): Find a better name for 'repository commit --clear' (Configuration): Set host/service variable in apply rules (Configuration): Update downtimes.conf example config (Cluster): Remove virtual agent name feature for localhost (CLI): Cli command: Node Setup Wizard \(for Satellites and Agents\) (CLI): Cli command: Repository remove host should remove host.conf host/ dir with services (CLI): validate repository config updates : Only build YAJL when there's no system-provided version available : Replace cJSON with a better JSON parser (CLI): Use "variable get" for "pki ticket" (CLI): Validate number of arguments (CLI): Support for writing api.conf (CLI): Cli command: pki needs option to define the algorithm (CLI): Rename PKI arguments (CLI): Cli command: Node Setup (CLI): "pki request" should ask user to verify the peer's certificate (CLI): Add -h next to --help (CLI): Remove "available features" list from "feature list" (CLI): Implement "feature disable" for Windows (CLI): CLI: List disabled features in feature list too : Move WSAStartup call to INITIALIZE\_ONCE (CLI): Implement field attribute to hide fields in command auto-completion (CLI): Add autocomplete to 'host/service add' for object attributes \(e.g. --check\_interval\) (Configuration): Remove zone keyword and allow to use object attribute 'zone' (Configuration): Move localhost config into repository (CLI): Implement generic color support for terminals (CLI): Implement support for serial files (DB IDO): Add program\_version column to programstatus table : Release 2.2 (CLI): Auto-completion for feature enable/disable (CLI): Windows support for cli command feature (CLI): CLI Commands: Remove timestamp prefix when logging output (CLI): autocomplete should support '--key value' (CLI): Cli command parser must support unregistered boost::program\_options (CLI): CLI command: variable (Graphite): GraphiteWriter: Add warn/crit/min/max perfdata values if existing (Graphite): GraphiteWriter: Add support for customized metric prefix names : macro processor needs an array printer (CLI): Cli command: Repository (CLI): Cli Commands: Node Repository Blacklist & Whitelist (CLI): Cli command: SCM (CLI): Cli command: Object (CLI): Cli command: Feature (CLI): Node Repository (CLI): Cli command: Node (CLI): Cli command: pki (CLI): Cli command framework (CLI): Cli commands (Cluster): CSR auto-signing (Plugins): Windows plugins (Cluster): Windows Wizard (CLI): Cli commands: add filter capability to 'object list' (Cluster): Windows installer (Graphite): Add downtime depth as statistic metric for GraphiteWriter (Configuration): Support for array in custom variable. : Add copyright header to

files and add support for comments in mkclass (Configuration): Names for nested objects are evaluated at the wrong time (Configuration): DebugInfo is missing for nested dictionaries : CreateProcess fails on Windows 7 (Cluster): node wizard uses incorrect path for the CA certificate (Configuration): Wrong set of dependency state when a host depends on a service : Unit tests fail to run : Get rid of static boost::mutex variables (DB IDO): IDO module crashes on Windows : Installation on Windows fails (Notifications): Missing state filter 'OK' must not prevent recovery notifications being sent : mkclass crashes when called without arguments (Cluster): Removing multiple services fails : Plugin execution on Windows does not work : Compilation Error with boost 1.56 under Windows : Exception when executing check (Configuration): Nested templates do not work \(anymore\) (CLI): Typo in output of 'icinga2 object list' (Notifications): only notify users on recovery which have been notified before \(not-ok state\) (Cluster): Invalid checkresult object causes Icinga 2 to crash (CLI): 'pki request' fails with serial permission error (Configuration): There is no \\name available to nested objects (Configuration): Nesting an object in a template causes the template to become non-abstract (Configuration): Object list dump erraneously evaluates template definitions (Cluster): Error message is always shown even when the host exists (Cluster): Incorrect warning message for "node update-config" (Cluster): Error in migrate-hosts (CLI): Change blacklist/whitelist storage (Cluster): Use ScriptVariable::Get for RunAsUser/RunAsGroup (Cluster): Agent health check must not have zone attribute (Cluster): Misleading error messages for blacklist/whitelist remove (Configuration): Icinga2 fails to start due to configuration errors : Build fails : Utility::GetFQDN doesn't work on OS X : Hosts/services should not have themselves as parents : OnStateLoaded isn't called for objects which don't have any state (CLI): cli command 'node setup update-config' overwrites existing constants.conf (CLI): Cli: Node Setup/Wizard running as root must chown\(\) generated files to icinga daemon user (Configuration): can't assign Service to Host in nested HostGroup (Metrics): Performance data via API is broken (CLI): Cli command: Repository should validate if object exists before add/remove (Cluster): When replaying logs the secobj attribute is ignored (CLI): Cli command: pki request throws exception on connection failure : CMake warnings on OS X (CLI): CLI: Auto-completion with colliding arguments (DB IDO): CLI / MySQL error during vagrant provisioning (CLI): pki new-cert doesn't check whether the files were successfully written (DB IDO): Schema upgrade files are missing in /usr/share/icinga2-ido-{mysql,pgsql} (CLI): Cli commands: Integers in arrays are printed incorrectly (CLI): failed en/disable feature should return error (CLI): Commands are auto-completed when they shouldn't be (Configuration): custom attribute name 'type' causes empty vars dictionary (Compat): Fix reading perfdata in compat/checkresultreader (Plugins): Setting snmp\_v2 can cause snmp-manubulon-command derived checks to fail (Configuration): snmp-load checkcommand has a wrong "-T" param value (Configuration): Importing a CheckCommand in a NotificationCommand results in an exception without stacktrace. (Configuration): Error messages for invalid imports missing (Configuration): config parser crashes on unknown attribute in assign (Configuration): snmp-load checkcommand has wrong threshold syntax (Metrics): icinga2 returns exponentail perfdata format with check\_nt (Metrics): Icinga2 changes perfdata order and removes maximum (Notifications): default value for "disable\_notifications" in service dependencies is set to "false" (Configuration): Typo for "HTTP Checks" match in groups.conf (Notifications): delaying notifications with

should postpone first notification into that window (ITL): Plugin Check Commands: disk is missing '-p', 'x' parameter (ITL): ITL: check\procs and check\http are missing arguments (Documentation): Documentation: Update Icinga Web 2 installation (Documentation): link missing in documentation about livestatus (Documentation): Documentation for arrays & dictionaries in custom attributes and their usage in apply rules for (Documentation): Documentation: Explain how to manage agent config in central repository (Documentation): Documentation: Move troubleshooting after the getting started chapter (Documentation): Documentation: Revamp getting started with 1 host and multiple \(service\) applies (Documentation): Documentation: Mention 'icinga2 object list' in config validation (Documentation): Fix typos and other small corrections in documentation (Documentation): Documentation: 1-about contribute links to non-existing report a bug howto (Documentation): Wrong usermod command for external command pipe setup (Documentation): Documentation: Cli Commands (Documentation): Documentation: Wrong check command for snmp-int\(erface\) (Documentation): Docs: Default command timeout is 60s not 5m (Documentation): Icinga2 docs: link supported operators from sections about apply rules (Documentation): Documentation: Add support for locally-scoped variables for host/service in applied Dependency (Documentation): Documentation: Add host/services variables in apply rules (Documentation): Documentation: Agent/Satellite Setup (Documentation): Document how to use multiple assign/ignore statements with logical "and" & "or" (Packages): Conditionally enable MySQL and PostgresSQL, add support for FreeBSD and DragonFlyBSD (Packages): Enable parallel builds for the Debian package (Packages): Feature `checker' is not enabled when installing Icinga 2 using our lates RPM snapshot packages (Packages): Build fails on RHEL 6.6 (Packages): Post-update script \(migrate-hosts\) isn't run on RPM-based distributions (Packages): Unity build fails on RHEL 5 (Packages): Debian package root permissions interfere with icinga2 cli commands as icinga user (Packages): SLES \(Suse Linux Enterprise Server\) 11 SP3 package dependency failure : Unity builds: Detect whether \\COUNTER\\ is available : Implement support for unity builds : Ensure that namespaces for INITIALIZE\ONCE and REGISTER\TYPE are truly unique : Add include guards for mkclass files : Change log message for checking/sending notifications : fix memory leak ido\_pgsql (Livestatus): Livestatus hangs from time to time (Plugins): fping4 doesn't work correctly with the shipped command-plugins.conf (Cluster): Segfault using cluster in TlsStream::IsEof (Configuration): Manubulon-Plugin conf Filename wrong : Build fails on Haiku (Cluster): new SSL Errors with too many queued messages : Missing differentiation between service and systemctl (Metrics): GraphiteWriter should ignore empty perfdata value : pipe2 returns ENOSYS on GNU Hurd and Debian kfreebsd : Exit code is not initialized for some failed checks : icinga2-list-objects complains about Umlauts and stops output : icinga2-list-objects doesn't work with Python 3 (Configuration): Remove validator for the Script type : "Error parsing performance data" in spite of "enable\_perfdata = false" (Cluster): SSL errors with interleaved SSL\_read/write (Cluster): SSL\_read errors during restart (Cluster): Too many queued messages : make test fails on openbsd : Link libcJSON against libm (Documentation): clarify on db ido upgrades (Documentation): Extend documentation for icinga-web on Debian systems (Documentation): Explain event commands and their integration by a real life example \(httpd restart via ssh\) (Documentation): Document how to use @ to escape keywords (Packages): GNUInstallDirs.cmake outdated (Packages): service icinga2 status - prints cat error if the service is stopped (Packages): icinga2 init-script terminates with exit code 0 if $DAEMON is not in place or not executable (Packages): Enable unity build for RPM/Debian packages (Packages): Figure out a better way to set the version for snapshot builds (Packages): Fix rpmlint errors (Packages): icinga2.spec: files-attr-not-set for python-icinga2 package DB IDO schema upgrade (, required! new schema version: 1.11.7* RPMs install the schema files into `/usr/share/icinga2-ido` instead of `/usr/share/doc/icinga2-ido*` #6881 using `icinga2-list-objects` script #6702 Add Python 2.4 as requirement #6702 Add search path: If `-c /etc/icinga2/icinga2.conf` is omitted, use `SysconfDir + "/icinga2/icinga2.conf"` #6874 Change log level for failed commands #6751 Notifications are load-balanced in a #6203 New config attribute: `enable_ha` DB IDO "run once" or "run everywhere" mode in a #6203 #6827 New config attributes: `enableha` and `failovertimeout` RPMs use the `icingacmd` group for /var/{cache,log,run}/icinga2 #6948 : Enhance logging for perfdata/graphitewriter (Configuration): add search path for icinga2.conf (DB IDO): delay ido connect in ha cluster : Change log level for failed commands : Release

(Configuration): Information for config objects (Plugins): Plugin Check Commands: add manubulon snmp plugins (Cluster): Log replay sends messages to instances which shouldn't get those messages (Cluster): Better cluster support for notifications / IDO (Cluster): Better log messages for cluster changes (Cluster): Cluster support for modified attributes : Build fails with Boost 1.56 (Cluster): Host and service checks stuck in "pending" when hostname = localhost a parent/satellite setup : Commands are processed multiple times : check file permissions in /var/cache/icinga2 : External command pipe: Too many open files : ExternalCommandListener fails open pipe: Too many open files (Documentation): add example selinux policy for external command pipe (Documentation): how to add a new cluster node (Documentation): Keyword "required" used inconsistently for host and service "icon\_image\" attributes (Documentation): Update command arguments 'set\_if' and beautify error message (Documentation): Add documentation for icinga2-list-objects (Documentation): Enhance Graphite Writer description (Documentation): clarify on which config tools are available (Documentation): Wrong parent in Load Distribution (Documentation): Wrong object attribute 'enable\flap\detection' (Documentation): Add systemd options: enable, journal (Documentation): add section about disabling re-notifications (Documentation): Add section for reserved keywords (Documentation): Explain how the order attribute works in commands (Documentation): Better explanation for HA config cluster (Documentation): Documentation for zones and cluster permissions (Documentation): Migration: note on check command timeouts (Packages): 64-bit RPMs are not installable (Packages): Recommend related packages on SUSE distributions (Installation): Clean up spec file (Packages): enforce /usr/lib as base for the cgi path on SUSE distributions (Installation): use \_rundir macro for configuring the run directory (Packages): make install does not install the db-schema DB IDO schema upgrade required (new schema version: 1.11.6) (Plugins): Plugin Check Commands: Add timeout option to check\_ssh : Print application paths for --version : Release 2.0.2 (Configuration): Require command to be an array when the arguments attribute is used (Plugins): Plugin Check Commands: Add expect option to check\_http : write startup error messages to error.log : event command execution does not call finish handler : Startup logfile is not flushed to disk (DB IDO): exit application if ido schema version does not match : Error handler for getaddrinfo must use gai\_strerror : Missing space in error message : \[Patch\] Fix build issue and crash found on Solaris, potentially other Unix OSes : Icinga 2 crashes during startup (Cluster): High Availablity does not synchronise the data like expected : Service icinga2 reload command does not cause effect : Fix notification definition if no host\name / service\description given : Config validation without filename argument fails with unhandled exception (Metrics): GraphiteWriter: Malformatted integer values (Cluster): TLS Connections still unstable in 2.0.1 : "order" attribute doesn't seem to work as expected (Configuration): sample config: add check commands location hint \(itl/plugin check commands\) (Configuration): Remove superfluous quotes and commas in dictionaries : Event Commands are triggered in OK HARD state everytime : additional group rights missing when Icinga started with -u and -g (Cluster): Missing detailed error messages on ApiListener SSL Errors : RPMLint security warning - missing-call-to-setgroups-before-setuid /usr/sbin/icinga2 (DB IDO): NULL vs empty string (Cluster): Infinite loop in TlsStream::Close (DB IDO): Two Custom Variables with same name, but Upper/Lowercase creating IDO duplicate entry : Command pipe blocks when trying to open it more than once in parallel : Check and retry intervals are incorrect : $TOTALHOSTSERVICESWARNING$ and $TOTALHOSTSERVICESCRITICAL$ aren't getting converted : Service dependencies aren't getting converted properly : group names quoted twice in arrays : add log message for invalid performance data : GraphiteWriter regularly sends empty lines (Configuration): Add cmake constant for PluginDir (Notifications): Notifications not always triggered : ipmi-sensors segfault due to stack size (DB IDO): objects and their ids are inserted twice (ITL): The "ssl" check command always sets -D (ITL): Order doesn't work in check ssh command (Documentation): wrong path for the file

(Documentation): Missing documentation about implicit dependency (Documentation): icinga Web: wrong path to command pipe (Documentation): update installation with systemd usage (Documentation): clarify on which features are required for classic ui/web/web2 (Packages): Remove if\(NOT DEFINED ICINGA2\_SYSCONFIGFILE\) in etc/initsystem/CMakeLists.txt (Packages): incorrect sysconfig path on sles11 (Installation): Repo Error on RHEL 6.5 (Packages): Rename README to README.md (Packages): Build packages for el7 (Installation): Location of the run directory is hard coded and bound to "local\state\dir" (Packages): Classic UI Debian/Ubuntu: apache 2.4 requires 'a2enmod cgi' & apacheutils installed (Packages): SUSE packages Bugfix release (Configuration): Add port option to check imap/pop/smtp and a new dig (Livestatus): OutputFormat python (Notifications): Problem with enable\_notifications and retained state (Notifications): enable\_notifications = false for users has no effect (Cluster): Icinga crashes after "Too many queued messages" : Build fails when MySQL is not installed : Increase icinga.cmd Limit (Configuration): icinga2-sign-key creates ".crt" and ".key" files when the CA passphrase is invalid (Configuration): icinga2-build-ca shouldn't prompt for DN : TLS connections are still unstable : Icinga stops updating IDO after a while (Configuration): Please add --sni option to http check command (Notifications): Notifications causing segfault from exim (DB IDO): icinga2-ido-pgsql snapshot package missing dependecy dbconfig-common : Remove line number information from stack traces : Check command result doesn't match : Dependencies should cache their parent and child object : $SERVICEDESC$ isn't getting converted correctly : Improve systemd service definition (Cluster): Icinga doesn't send SetLogPosition messages when one of the endpoints fails to connect : parsing of double defined command can generate unexpected errors : Reminder notifications are sent on disabled services : icinga2 cannot be built with both systemd and init.d files (Livestatus): Thruk Panorama View cannot query Host Status : icinga2.state could not be opened : build warnings (Cluster): base64 on CentOS 5 fails to read certificate bundles (Cluster): Deadlock in ApiListener::RelayMessage : application fails to start on wrong log file permissions but does not tell about it (DB IDO): PostgreSQL string escaping (ITL): Add more options to snmp check (Documentation): event command execution cases are missing (Documentation): change docs.icinga.org/icinga2/latest to git master (Documentation): Documentation for || and && is missing (Documentation): Array section confusing (Installation): ICINGA2\SYSCONFIGFILE should use full path using CMAKE\INSTALL\FULL\SYSCONFDIR (Packages): htpasswd should be installed with icinga2-classicui on Ubuntu (Packages): Copyright problems (Packages): Debian package icinga2-classicui needs versioned dependency of icinga-cgi\ First official release : Prepare 2.0.0 release (Cluster): Cluster: global zone for all nodes : move vagrant box into dedicated demo project : Revamp migration script : Update website for release : Update documentation for 2.0 : Separate CMakeLists.txt for etc/initsystem (Configuration): logrotate.conf file should rotate log files as icinga user (Livestatus): Column 'host\_name' does not exist in table 'hosts' (Livestatus): Nagvis does not work with livestatus \(invalid format\) : OpenSUSE Packages do not enable basic features (Cluster): Segfault with zones without endpoints on config compile : Check if host recovery notifications work (Cluster): Subdirectories in the zone config are not synced : fd-handling in Daemonize incorrect : Permissions error on startup is only logged but not on stderr (ITL): improve predefined command-plugins (Documentation): explain the icinga 2 reload (Documentation): Add instructions to install debug symbols on debian systems (Documentation): add a note on no length restrictions for plugin output / perfdata (Documentation): Update command definitions to use argument conditions (Documentation): change docs.icinga.org/icinga2/snapshot to 'latest' (Documentation): Replace Sphinx with Icinga Web 2 Doc Module (Installation): man pages for scripts (Installation): Cleanup installer for 2.0 supported features (Installation): remove 0.0.x schema upgrade files (Packages): Ubuntu package Release file lacks 'Suite' line (Packages): Packages are not installable on CentOS 5 (Installation): Less verbose start output using the