Why we cannot recommend upgrading to Log Server 2024R2.X
Posted: Tue Apr 08, 2025 11:33 am
More 2024R2 things that we think are a step backwards.
One of the built-in dashboards is "Top Sources and Types." If you select this dashboard in a previous version, or any dashboard, really, there were actions that you could click on to immediately create a filter on that IP or source, or whatever you clicked on, or to immediately exclude it. Those seem to be gone. So if I'm on Top Sources and Types, and I see that #5 is 10.1.1.1 and want to filter on it, I can't. Same for any of the other "fields" that show up on the dashboard and convert my mouse to a finger instead of its normal pointer.
When creating a dashboard in 2024R1.X, if you have to enter a field name, it auto-completes for you. So typing h-o will populate the list with "host" and "host.raw" so you don't have to know the full field name. In 2024R2, that functionality is simply gone. If I add a "terms" table and type h-o in the field name, nothing happens. This is annoying.
I've mentioned this privately to Nagios staff in the past, but the default queries are annoying AF. Maybe if you're a small dot.com company and need to see what the errors are on your web page, or want to know if someone's trying to brute force SSH into your web server, they're fine. But for a more complicated, sophisticated user, they are mostly useless (especially if you're not a Windows shop) and they should be deletable. All they do is take up screen real estate (at least they're finally collapsable).
No confirmation when deleting a dashboard. Would be nice if it at least asked "are you sure?" before wiping out hours of work accidentally.
As mentioned, the support for loading/importing dashboards from other sources is missing.
I'm sure there's more functionality that was in 2024R1.X that's missing in 2024R2 that we haven't found yet.
We have specifically recommended to our customers - most of whom are large corporations with multiple node log servers gathering data from hundreds or thousands of devices - not to upgrade to this version at this time. Especially since the dashboards that we've developed for them are no longer importable through the web interface.
One of the built-in dashboards is "Top Sources and Types." If you select this dashboard in a previous version, or any dashboard, really, there were actions that you could click on to immediately create a filter on that IP or source, or whatever you clicked on, or to immediately exclude it. Those seem to be gone. So if I'm on Top Sources and Types, and I see that #5 is 10.1.1.1 and want to filter on it, I can't. Same for any of the other "fields" that show up on the dashboard and convert my mouse to a finger instead of its normal pointer.
When creating a dashboard in 2024R1.X, if you have to enter a field name, it auto-completes for you. So typing h-o will populate the list with "host" and "host.raw" so you don't have to know the full field name. In 2024R2, that functionality is simply gone. If I add a "terms" table and type h-o in the field name, nothing happens. This is annoying.
I've mentioned this privately to Nagios staff in the past, but the default queries are annoying AF. Maybe if you're a small dot.com company and need to see what the errors are on your web page, or want to know if someone's trying to brute force SSH into your web server, they're fine. But for a more complicated, sophisticated user, they are mostly useless (especially if you're not a Windows shop) and they should be deletable. All they do is take up screen real estate (at least they're finally collapsable).
No confirmation when deleting a dashboard. Would be nice if it at least asked "are you sure?" before wiping out hours of work accidentally.
As mentioned, the support for loading/importing dashboards from other sources is missing.
I'm sure there's more functionality that was in 2024R1.X that's missing in 2024R2 that we haven't found yet.
We have specifically recommended to our customers - most of whom are large corporations with multiple node log servers gathering data from hundreds or thousands of devices - not to upgrade to this version at this time. Especially since the dashboards that we've developed for them are no longer importable through the web interface.