openHistorian 2.7

Official stable release of version 2.7 of the openHistorian (v2.7.195).

NOTE: If you are upgrading from a prior version of the openHistorian, you must migrate your existing configuration to use the latest database schema when the Configuration Setup Utility is run after the installation completes - this version includes schema updates.

Security Fixes

Security scans of older releases of the openHistorian have identified two JavaScript library vulnerabilities included from the Grid Solutions Framework, specifically jQuery and knockout. Installation of version 2.7 of the openHistorian resolves these reported issues through library updates.

For jQuery the vulnerability was CVE-2019-11358:

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype.

Because of the way GPA uses jQuery within the openHistorian, GPA deems the risk of this vulnerability to be low.

For knockout the vulnerability was WS-2019-0015:

Knockout, before 3.5.0-beta, has an XSS injection point in “attr” name binding for browser IE7 and older.

Exploitation of the knockout vulnerability required the use of IE7. Since the openHistorian requires IE11 or better to function, GPA deems the risk of this vulnerability to be low. However, GPA does suggest updating to a newer, more secure browser regardless.

New Updates and Improvements

• Includes latest updates to STTP, including reverse connections
• Added signal-to-noise ratio (SNR) calculation adapter with option to save SNR statistics separately to speed up reporting
• Added unbalanced calculation adapter
• Added Grafana openHistorian alarm panel
• Added Grafana GPA phasor map panel
• Added initial screen for adding device groups, e.g., a "region" or "best values group"
• Added IPv6 support for SnapServer and ability for primary historian adapter (LocalOutputAdapter) to bind to a specific IP address.
• Added NGEN based pre-compile at install time to boost overall performance and improve application start times.
• Improved functionality of point tag naming convention.
• Updated point tag naming convention to include phasor type and phase information.
• Added ability to disable self-web hosting
• Disabled checking for CAS publisher policy for all application config files to speed start time.
• Updated to Grafana v6.6.2
• Simplified GrafanaController target search functionality since base class now include SQL SELECT functionality.
• Updated GrafanaController to allow template queries based on FILTER expressions that include the field name to return, e.g.: FILTER (Acronym) InputStreamDevices WHERE Name LIKE '%DFR%'
• Updated GrafanaController template queries to use SELECT syntax, e.g.: SELECT Acronym FROM InputStreamDevices WHERE Name LIKE '%DFR%'
• Improved GrafanaController template queries SELECT RegEx
• Allow scripts in local Grafana panels for custom Home page.
• Changed Grafana default directory to relative path
• Added Grafana data download panel
• Updated Grafana Scadavis Panel to newest version
• Improved UI operations for "viewer" roles.
• Updated default data operation for open historian outputs to automatically add a custom input reader to properly support data gap recovery operations through STTP and GEP.
• Added option to download data at less than 1 frame per second resolution
• Fixed time stamp alignment when exporting to csv
• Fixed bug with frames per minute and frames per hour being changed to frames per second if they don't fit exactly within 1 day
• Fixed data export with timestamp to make timestamp buckets optional
• Fixed various issues with web-based synchrophasor wizard
• Updated synchrophasor wizard to allow for either disabled or deleted phasors with better visual feedback on selected options.
• Updated synchrophasor device wizard to update baseKV for simple phasor updates.
• Improved phase guess operation in device wizard.
• Updated delete device operations in DataHub to also remove children devices before parent device.
• Updated dev wizard screen to allow export of config regardless of editor rights.
• Added desired remaining disk space as a configuration parameter of LocalOutputAdapter.
• Improved on-second window adapter sample operation
• Updated multi action adapter collection base implementation to allow for customized derived class connection string parsing.
• Updated independent adapter managers to support input, output and action adapter collection types.
• Updated to independent adapter manager samples to accommodate and end-user API.
• Updates to independent adapter manager classes to handle multiple inputs per adapter from collection manager base classes.
• Updated independent adapter managers to support grouped multiple inputs.
• Updated independent adapter manager collections functionality.
• Improved eDNA Grafana meta-data derivation, especially for cases when a GSF host is the publishing source.
• Added configuration settings to control if eDNA and OSI-PI Grafana controllers are automatically loaded.
• Fixed dataset schema for eDNA Grafana Controller metadata
• Added error handling to SQL Server role migration in Configuration Setup Utility.
• Added configured desired remaining space to LocalOutputAdapter status details.
• Added Grafana function to get Location Data for Map
• Fixed issue with Grafana GetLocation when trying to get multiple locations at once
• Updated imported labels in device page to remove underscores with imported phasor labels
• Updated long/lat layout / operation on device wizard (dev page)
• Added initial options for connection string building with synchrophasor wizard screen
• Added serialized configuration section to device wizard
• Added ability to import and export config
• Updated location meta-data function signatures
• Updated GrafanaController to use common LocationData class.
• Cleared Sonar warnings and general code of newly added code.
• Added GSF.Geo assembly to the installer
• Fixed access keys to be unique in custom installer dialogs
• Applied custom action to installer to load previous company information.
• Added flag for enabling web hosting to systemSettings when missing
• Condensed PhasorHub initialization to web Startup.
• Updated GrafanaAuthProxyController to simplify referrer null check.
• Fixed Grafana Datasource Error in TS production build
• Added example adapters for managing self-configuration and on-second data windows.
• Updated sample adapters to include additional parameters for automated output measurement creation.
• Fixed Hostname Setting in Grafana configuration file
• Fixed race condition for unauthorized Grafana users to properly initiate user synchronizations.
• Updated MAS adapter example code to use GSF.TimeSeries base classes for independent adapter management.
• Updated bulk MAS example adapters to override default point tag and signal reference tag templates.
• Updated link on default device status page in Grafana to properly navigate back to openHistorian home page.
• Synced synchrophasor dev page to GSF updates.
• Updated knockout bindings in COMTRADE importer to target first body element.
• Updated GrafanAuthProxy to better handle initial startup user synchronization,
• Added sub-title feature to primary Layout.cshtml
• Cleaned up code for trend measurements and export data handler
• Updated buttons on select group devices page to read "export/import" instead of "save/load" to better serve context.
• Updated synchrophasor screen to accommodate application of calculation tags against devices setup with Gateway style connections.
• Added Grafana EndPoint to get all device alarm statuses
• Added Grafana Endpoint to get Device Groups
• Fixed naming of QueryAlarms issue in GrafanaController
• Updated device queries to only filter out device groups when both protocol is virtual and access ID is set
• Updated service host to inject DeviceGroupMeasurements selection table into data source updates
• Added extra safety checks for database to runtime ID conversion in data source propagation override in ServiceHost implementation.
• Updated metadata propagation handler for injection of DeviceGroupMeasurements table to better handle child devices of concentrator connections and to log error, but not fail, if there is an exception.
• Added check to ignore disabled group devices when creating DeviceGroupMeasurements metadata
• Improved comments and readability for propagation of DeviceGroupMeasurements
• Updated DeviceGroup model to default Enabled field to true
• Removed historian from device group setup, since it is not used.
• Added dynamic acronym database uniqueness validation to device and device group editing screens.
• Added code to dynamic selection tables to scroll to bottom after row is added.
• Added name as well as acronym to device group selection list
• Updated data operation for openHistorian adapters to automatically add metadata exclusions for device group records for all defined data publisher instances. This way device groups remain local.
• Updated default point tag name expression to always include base kV level when provided.
• Updated default point tag name expression in openHistorian manager application.
• Updated openHistorian manager to auto-elevate when using SQLite for cases when database is stored into program files folder.
• Fixed point tag name default expressions
• Updated SQLite database selection to not auto-select sample data script.
• Added update tag names and GEP data extractor tools to setup folder
• Added Installers folder with PMU Connection Tester and Stream Splitter Setup to be included as optional install tools
• Updated "UpdateDependecies.bat" build script to auto-update new tools
• Added bulk-calculation state tool
• Updated configuration setup utility to allow for option installs of connection tester and stream splitter.
• Fixed file name suffixes for optional installers.
• Updated CSU to launch WPF UI manager over web manager if service is not selected to start at last step - plus general code clean-up.
• Updated device dev wizard to ignore connection string values that contain a literal "null" string value.
• Updated web manager shortcut registry location to target SOFTWARE\Grid Protection Alliance instead of SOFTWARE\GPA to match other registry entries.
• Added additional config file for load file viewer application.
• Fixed service description in WiX setup file.
• Added code to shell out NoInetFixUtil with --checkall flag from CSU (allows for faster startups in environments with no Internet)

See full release notes since last release.