Eon Aethis
What is Eon Aethis?
Eon Aethis is a monitoring platform that combines the Icinga 2 monitoring engine with an AI configuration layer and passive network visibility. Instead of hand-writing Icinga host/service objects, an operator can type a prompt like “monitor CPU and memory on server-A and put it in hostgroup-web” and Eon Aethis translates it into the corresponding Icinga 2 API calls and executes them immediately, returning the results in the same response.
Alongside active checks (ping, HTTP, CPU, disk, and other Icinga 2 checks), Eon Aethis passively observes network traffic: Zeek extracts protocol-level logs from a monitored interface, and the Aethis Probe parses live packets and NetFlow/IPFIX/sFlow exports to classify devices and flows without needing an agent on every host. A separate Aethis Agent can be installed on individual hosts for local metrics and Nagios-plugin-compatible checks, and a multi-tenant Perimeter Probe performs external reconnaissance scans against a tenant’s public-facing infrastructure.
The platform is delivered as a set of Docker Compose services (a Go API backend, React frontend, Icinga 2, PostgreSQL, VictoriaMetrics, ClickHouse, Redis, Zeek, and a Caddy reverse proxy) plus standalone binaries for the Agent, Probe, and Perimeter Probe that are installed separately on the hosts and networks they observe.
Key properties
- AI-assisted configuration. A chat-style interface turns natural-language prompts into Icinga 2 host, service, and hostgroup changes. Proposed actions execute immediately in the same request — there is currently no dry-run, conflict check, or operator-confirmation gate before changes are applied.
- Active and passive monitoring together. Icinga 2 active checks sit alongside Zeek protocol logs and NetFlow/IPFIX/sFlow flow data in the same dashboards.
- Automatic discovery. Network scans (Nmap-style port scanning), SNMP, cloud provider APIs (Azure, AWS), and passive traffic analysis feed an approval inbox that proposes hosts, services, and dependencies instead of requiring them to be entered by hand.
- Custom dashboards. A drag-and-drop dashboard builder with its own Apache ECharts-based graph engine (no Grafana dependency), plus templates for common host types.
- Distributed collection. The Aethis Agent, Aethis Probe, and Perimeter Probe are independent binaries that pair with the central platform over a token or certificate-based flow, so collection can run close to the hosts and networks being observed.
- Hybrid and multi-cloud. Cloud connections for AWS and Azure import resources as monitored hosts alongside on-premise infrastructure.
Explore the docs
- Architecture — the backend, Icinga 2, storage, and collection components and how they interact
- Installation — deploy the central platform with Docker Compose
- Agents & Probes — install the Aethis Agent, Aethis Probe, and Perimeter Probe
- Configuration — environment variables and config file reference