icingaForWindows event viewe errors

Skepko · January 13, 2025, 2:03pm

Hello,

Last few months in event view I see error message from Icinga2 and in C:\ProgramData\Microsoft\Windows\WER\ReportQueue crash reports from icinga service crash.

I see this with several OS types, 2019, 2022. The icinga2 itself works fine, but I am curious about the cause of the crash. I will also upload the notifications from eventview.

Component Version Available

agent 2.14.2 2.14.2
framework 1.12.3 1.12.3
mssql 1.5.0 1.5.0
plugins 1.12.0 1.12.0
service 1.2.0 1.2.0
RESTApi.txt (1.6 KB)
Framework.txt (3.2 KB)

cstein · January 31, 2025, 9:19am

github.com/Icinga/icinga-powershell-framework

Since upgrading icinga-powershell-framework to 1.12.3, timeouts occur more often

opened 10:04AM - 04 Dec 24 UTC

TheCry

Bug Investigation

We With CVE-2024-49369, we have updated all window servers to the latest icinga-…powershell-framework (1.12.3) and Icinga Client (2.14.3). Now we notice that different servers get a timeout every now and then during the simple check "Invoke-IcingaCheckTimeSync". We tested 2 different servers (Windows 2019 with the same function). For one of them, the check runs through within 2-3 seconds and for the other, the check takes at least 20 seconds until the timeouts (30 seconds). This is what the event log says: `warning/Process: Killing process group 6444 ('C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -ExecutionPolicy ByPass -C "try { Use-Icinga -Minimal; } catch { Write-Output 'The Icinga PowerShell Framework is either not installed on the system or not configured properly. Please check https://icinga.com/docs/windows for further details'; Write-Output 'Error:' $($_.Exception.Message)Components:`r`n$( Get-Module -ListAvailable 'icinga-powershell-*' )`r`n'Module-Path:'`r`n$($Env:PSModulePath); exit 3; }; Exit-IcingaExecutePlugin -Command 'Invoke-IcingaCheckTimeSync' " -Server '***.***.***.***' -Warning -1s:1s -Critical -2s:2s -Verbosity 2') after timeout of 30 seconds` Before the update, these problems never existed. Now I hope that you can find something, because we don't have a approach. Thank you Greeting Sascha

Just as reference. For the moment there is no solution in sight, as the reason is not known and requires more research.

Skepko · February 7, 2025, 10:53am

@cstein Thank you for the reply, i hoop its will be resolved somedays.

Skepko · May 2, 2025, 9:06am

@cstein I am still see alote of icinga errors in Event view on differents clients. Any reason for?

Framework.txt (2.7 KB)
RESTApi.txt (1.6 KB)

cstein · May 9, 2025, 10:35am

Hello

I’m honestly not entirely sure why this issue occurs. I haven’t found a reliable way of reproducing this, therefore fixing it makes it even harder.

Currently I’m having one last idea which could maybe resolve the problem and will provide a PR later next week.

Skepko · June 11, 2025, 12:16pm

@cstein Thank you for the reply, and sorry for late reaction. Any update?