08/30/21 Release Notes

​

Monitoring & Analytics - Custom Transaction injected in a Replay

​

Description

One of our clients needed to automatically inject a “Custom” Transaction into a User Session Replay (recorded automatically by Germain), everytime its clients click on a button (e.g. Checkout Cart, Session Started) on their eCommerce UI. This allows them to faster identify session they care about the most. Alternatively, they could have used our Business Process mechanism to define that user click.

​

Configuration

These rest APIs: Germain.createEvent(name, details) where

• name: name of event (e.g. session started)
• details: an optional object where you can pass along additional information that’s available on drillthrough screens

Germain.createMetric(name, value, details) where

• name: is the name of the metric you want to record
• value: a numeric value (type double) for the metric
• details: an optional object where you can pass along additional information that’s available on drillthrough screens

The events/metrics will be shown in the event list of replays (see screenshot). If you configure the SLAs for each of these KPIs (Browser Event/Browser Metric), SLA violations will also show up in the timeline of a replay You can of course also configure portlets on your dashboard for these events/metrics.

​

Example

​

Monitoring & Analytics - Thumbnails for replay of multi-tab apps

​

Description

If you have an application that opens up many tabs, you will need this enhancement, that makes it easy to understand the User Experience as you are watching that user use your application.

​

Example with salesforce.com:

​

Monitoring & Analytics - Zookeeper

​

Description

Germain can now monitor Zookeeper:

• Cluster monitoring
• Node availability
• Log parsing
  Cloudgateway.log
  Cloudgateway.log
  Catalina log
  Gateway/siebel.log

​

Configuration

Wizard and Rule are available starting in Germain 8.6.17 More details: Zookeeper Observability

​

Monitoring & Analytics - Siebel IP2020 Gtwy server

​

Description

Siebel IP2020 Gtwy server log parsing

​

Configuration

Wizard and Rule available in Germain 8.6.17

​

Automation - Selenide vs Selenium

​

Description

We were asked to integrate Selenide (in addition to Selenium which we already support) and found out that we don’t need to integrate Selenide as all the following features are already available in/supported by Selenium:

​

Maintenance - Security Threat: ActiveMQ version 5.15.12

​

Description

One of our clients has detected a vulnerability on Active MQ. Vulnerability details below. Apache ActiveMQ JMX Remote Code Execution Active
Category: CGI
Vendor Reference: Apache ActiveMQ JMX
THREAT:
Apache ActiveMQ is an open source message broker written in Java together with a full Java Message Service (JMS) client.
A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnectorServer, instead of
the map that contains the authentication credentials, it leaves ActiveMQ open to the following attack: https://docs.oracle.com/javase/8/docs/
technotes/guides/management/agent.html “A remote client could create a javax.management.loading.MLet MBean and use it to create new MBeans
from arbitrary URLs, at least if there is no security manager. In other words, a rogue remote client could make your Java application execute arbitrary
code.”
Affected Versions: Apache ActiveMQ 5.15.12
QID Detection Logic (Unauthenticated):
This qid checks for a vulnerable version of ActiveMQ from /admin/index.jsp file.
QID Detection Logic (Authenticated):
This qid checks for a vulnerable version of ActiveMQ from running process and querying activemq —version command.
IMPACT: Successful exploitation could allow an attacker to execute arbitrary code on a Java application SOLUTION: Upgrade to Apache ActiveMQ 5.15.13 or later (ActiveMQ Download) to resolve this.

​

Maintenance - Other enhancements and bugs (08/31/21)

Below is the list of minor Enhancements and Bugs we have resolved this month. More details available upon request: support@germainux.com Note that this list does not include the configuration work, or data science help we provide to clients which is tracked on our support site: https://germainux.atlassian.net/servicedesk/customer/portal/1 bugs and enh for release notes 083121.xlsx

​

Get Help

The content of this document is proprietary to GERMAIN SOFTWARE.