Skip to content

Version 4.4

Unreleased

  • FIX: Two Checkmk host tags carrying the same name no longer block the update of their whole tag group — Checkmk read them as a renamed tag and refused the change, so new tag values were never created and the host export kept failing on them
  • FEAT: New option CMK_TAG_REPAIR lets Checkmk update the hosts and rules which use a changed tag group, for the case where Checkmk refuses the change and asks for that permission — the documentation says when that is safe and when it widens your rules
  • FEAT: New option CMK_BULK_FALLBACK_SINGLE sends the hosts of a failed bulk request to Checkmk one by one, so a single rejected host no longer takes its whole batch down with it
  • FIX: ./cmdbsyncer commands start right away instead of setting up the Ansible default project first, which had every call open a database connection before it began — a command now starts in about a second where it waited half a minute on a slow or unreachable database
  • FEAT: Checkmk users can be generated from host attributes — one user per LDAP group the hosts carry, named after the group and given the mail address that group has in the directory; a new rule under Checkmk says which attributes hold the group names, and existing users created by hand are never overwritten
  • FEAT: Every field of an LDAP account now explains in the form what it configures
  • FEAT: The Checkmk user generation can rewrite a group name before it is looked up, for hosts that carry it in a different shape than the directory uses — a prefix dropped, a domain cut off; a value the rewrite empties is skipped instead of creating a user from whatever the search filter alone finds
  • FEAT: The fields of a generated Checkmk user can name the group both ways: {{name}} as it was searched in the directory and {{original_name}} as the host carried it before the rewrite
  • FEAT: Checkmk roles and contact groups of a generated user are Jinja too, so a group can say which ones it deserves — an entry that renders to nothing is dropped and one that renders to several names becomes all of them
  • FEAT: New page "Preview Generated Users" under Checkmk shows what the generation rules would make of the hosts you have right now — which groups were found, what the directory returned for them and which Checkmk user each one becomes, without writing anything
  • FIX: "Foreach Value in List" now also accepts an attribute name ending in *, so hosts carrying their groups in several attributes — one per team, each a comma separated list — are read as one list instead of yielding nothing
  • FIX: An own LDAP filter in the directory search now replaces the search filter of the account instead of being added to it, so a filter looking for something else than the imported hosts finds it; the account's filter can be switched back on with the box below the search field
  • FEAT: The Checkmk user generation can be debugged from the command line: --debug shows which subtree, filter and attribute the group lookup used and which groups the directory did not return, and --search-filter tries another group filter out without anybody editing the rules first
  • FEAT: New account option "http_proxy" sends every HTTP request of that account through a proxy — for a target system like ServiceNow that is only reachable through the corporate proxy; direct sends a single account past a proxy the environment sets for everything else
  • FEAT: The Checkmk rule export calculates its rules about three times faster, so a big inventory spends far less time in "Loop over Hosts and collect distinct rules"
  • FIX: Host timestamps are now written in UTC everywhere, so the "not seen for X days" cleanup, the stale marking and the API timestamps agree with each other on servers that do not run in UTC
  • FIX: An import source delivering a hostname that is not text now reports a readable error instead of a traceback
  • FIX: Inventorize runs only write a host to the database when an attribute really changed, which noticeably speeds up large Netbox inventories
  • FIX: A database problem while looking up CMDB templates is written to the log instead of silently looking like "no template matched"

Version 4.4.0

(Initial 4.4 release — entries currently live in the Unreleased section above. They get folded down into this section when the release is cut.)