Pandora: FAQ

Many of following questions has been asked in our public forums [1] or in our development mail list [2], if you don't find here an answer for your problem, try to check out there.

1.1 How can I install?

1.1.1 How can I upgrade from version 3.x.y to 3.x.z ? (Same major version upgrade)

If you already have the "official" released version of Pandora FMS installed, and you know there are updates in your same major version, they will be always updated on the Subversion Pandora code repository. To update your version, just install a Subversion client, and execute following command:

svn co https://pandora.svn.sourceforge.net/svnroot/pandora/trunk


That will download the latest development version (Trunk), which as of now is 3.1 (soon to be be 3.2), if you want to download the latest updates for a specific stable version, for example 3.0, execute:

svn co https://pandora.svn.sourceforge.net/svnroot/pandora/branches/pandora_3.0


To update, just follow the procedure described in the documentation, to upgrade within the same version, make sure to look at what's written on https://wiki.pandorafms.com/index.php?title=Pandora:Documentation_en:Anexo_Upgrade

1.1.2 My old AIX (4.3, 5.1) doesn't have Perl 5.8, I cannot run agents

A: You can install part of the IBM toolbox, containing Perl 5.8 packages. Download them from ftp://ftp.software.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/perl/

Note that some AIX versions are previously bundled with Perl v5.6: This version is able to run Pandora FMS agents, so you won't need to install Perl 5.8.

1.1.4 How can I install Jpgraph?

A: You should unzip the downloaded Jpgraph files in the ./reporting/jgraph directory on the Web console

1.1.5 How can I install the GD libraries on Windows?

A: PHP for Windows includes a GD library by default, but maybe they are not activated. Edit your php.ini file (usually in c:\winnt\php.ini or c:\windows\php.ini) and add the following line to the file:

extension=php_gd2.dll


Restart your server to make the changes take effect.

1.1.6 How can I install PEAR on Windows?

A: The PHP version for Windows already comes with PEAR. All you need to make it work is to uncomment the line that has "include_path" in it, deleting the «;» character

     ;include_path = ".;c:\php\includes"


in your php.ini file and adding the path to PEAR, which is at the PHP directory. When finished, you should have something like:

     include_path = ".;c:\php\includes;C:\php\PEAR"


Remember to restart Apache.

For GNU/Linux you should install the php-pear packages, php-image-canvas and php-image-graph. You can find more information for systems based on Debian GNU/Linux at https://wiki.pandorafms.com/index.php?title=Pandora:Documentation_en:Installing.

1.1.7 I cannot access the Pandora Console installation web page in CentOS.

A: It's possible that, even having the pandora_console folder properly located (/var/www/html/pandora_console) and with the proper rights, (usr: apache - grp: apache - mod: 644) we cannot access the Pandora FMS Console installation web page. This could be a problem related to having SELinux active with a strict policy, which prevents us from executing the Pandora's PHP code.

In order to confirm it, we can check the apache error log and search for lines regarding the application of a SELinux policy in apache.

In this case, a workaround is to deactivate SELinux. This is done by editing the file /etc/selinux/config, changing SELINUX=enforcing by disabled:

# cat /etc/selinux/config
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#       enforcing - SELinux security policy is enforced.
#       permissive - SELinux prints warnings instead of enforcing.
#       disabled - SELinux is fully disabled.
SELINUX=disabled
# SELINUXTYPE= type of policy in use. Possible values are:
#       targeted - Only targeted network daemons are protected.
#       strict - Full SELinux protection.
SELINUXTYPE=targeted

# SETLOCALDEFS= Check local definition changes
SETLOCALDEFS=0


As is marked in the comments, after editing the file, it's needed to restart and deactivate SELinux or you can also use setenforce:

# setenforce 0


Remember to restart the Apache service.

1.1.8 perl-SNMP dependency on RHEL / CentOS / Fedora cannot be found.

A: For versions prior to RHEL6 or its equivalents, perl-SNMP doesn't exist, so the dependency net-snmp-perl would need to be installed.

Once this is done, please start your Pandora Server if you had forced the installation before, or install it and force the installation if it keeps asking for perl-SNMP.

1.1.9 For the CENTOS distribution: how can I see the flash charts in Firefox?

In addition to installing the rpm from the Adobe site, install the package repositories for the flash-plugin to work on firefox graphs: "yum install flash-plugin".

1.1.10 Nmap doesn't work properly on Windows ( Satellite Server o Pandora Server )

For the proper operation of the binary nmap.exe on Windows installations the MSVCP100.DLL. library is necessary

The definitive solution to this problem is to download the msvcp100.dll library from the Microsoft official website. Installed with "Microsoft Visual C++ 2010 SP1 Redistributable Package".

1.2 How Can I...?

1.2.1 How can I configure the email server for email alert types?

This is configured in the server,specifically on the file pandora_server.conf, you should restart the server after modifying the file so the changes are applied.

1.2.2 How can I use PERL 5.8 in my old Solaris 8 ?

The best way to manage this is to install the BlashWave packages. There are many OpenSource packages in Lastware's latest package system that work for example:

apt-get / yum / zypper system, records the data repository and installs them on demand and solving dependencies. See more info at: http://www.blastwave.org/howto.html

1.2.3 How can I improve a fixed version with updates?

For the last fixed version (2.x) the code is public and is available at the following directory of our code repository: 'branches/pandora_2.x' . You can download it through the Subversion client using the following command:

svn co https://pandora.svn.sourceforge.net/svnroot/pandora/branches/pandora_2.x


You will only need to copy the new files onto the old ones. PLEASE MAKE SURE to create a backup of everything (including the database), just to be sure.

While you're at it, consider the convenience of using the Pandora Enterprise version [3] to update your system automatically.

1.2.4 How can I Start/Close a Windows service upon request from Linux (to execute with an alert from Pandora FMS)?

You need an updated version of Samba (3.x) and admin credentials in order to access a Windows server remotely (RPC call). In this example we will use '192.168.50.121' as a target server with "Administrator" as the user and "pepe" as the password. We want to work with a service called "PandoraFMSAgent" and see the complete list of services:

Obtaining a process list:

net rpc service list -U administrador%pepe -I 192.168.50.121

.
. full list


To see the status of a single process:

 net rpc service status  PandoraFMSAgent -U administrador%pepe -I 192.168.50.121

PandoraFMSAgent service is running.
Configuration details:

Controls Accepted    = 0x5
Service Type         = 0x10
Start Type           = 0x2
Error Control        = 0x1
Tag ID               = 0x0
Executable Path      = C:\Archivos de programa\pandora_agent\PandoraAgent.exe
Dependencies         = /
Start Name           = LocalSystem
Display Name         = Pandora FMS agent


To stop a process:

net rpc service stop  PandoraFMSAgent -U administrador%pepe -I 192.168.50.121 .

PandoraFMSAgent service is stopped.


To start a process:

net rpc service start  PandoraFMSAgent -U administrador%pepe -I 192.168.50.121

Successfully started service: PandoraFMSAgent


1.2.5 I want to change the Ip of several modules at the same time, How can I do it?

I have a switch with 240 checks and my IP has changed. How can I change the IP of all the remote checks in a simultaneous way, without having to do it one by one?.

Use the Pandora SQL manager, introducing the sentence similar to SQL (change the IPs 10.0.0.2 is the old one and the 10.0.0.1 is the new one):

UPDATE tagente_modulo SET ip_target = "10.0.0.1" WHERE id_target = "10.0.0.2";


1.2.6 How can I add MIBS to Pandora FMS ?

Question: Does anyone knows how to load MIBS in pandora for the SNMP Walk feature? Answer: Pandora FMS does not manage SNMP directly. It is based on GNU/Linux Net-SNMP libraries that are managed by systems,so edit /etc/snmp/snmp.conf to define MIB loading.You should configure the Linux system which runs PandoraFMS and add the MIBS file to the /etc/snmp/snmp.conf file(and restart apache) These are the directives /etc/snmp/snmp.conf for the MIB management:

mibdirs DIRLIST

This command specifies a list of directories to search for MIB files. This operates in the same way as the -M option - see snmpcmd(1) for further details. Note that this value can be overridden by the MIBDIRS environment variable, and the -M option.

mibs MIBLIST

specifies a list of MIB modules (not files) that should be loaded. This operates in the same way as the -m option - see snmpcmd(1) for details. Note that this list can be overridden by the MIBS environment variable, and the -m option.

mibfile FILE

specifies a (single) MIB file to load, in addition to the list read from the MIBS token (or equivalent configuration). Note that this value can be overridden by the MIBFILES environment variable.

1.2.7 How can I add sources to use them in the graphs and reports?

To add sources to Pandora it's enough with copying them into the folder include/fonts.

1.2.8 How to run the PandoraFMS agent in the Start system

Q: I have installed the pandora_agent in my Linux system and I want it to run every time that I start the system. How can I do it automatically? A: The first thing you should do is to copy the pandora_agent_daemon at/etc/init.d

After, if you want that the pandora_agent_daemon to start when running your system, you'll only need this:

ln -s /etc/init.d/pandora_agent_daemon /etc/rcX.d/S99pandora_agent_daemon


Where 'X' is the run level that you are starting at

After, be sure that your pandora_agent_daemon is correctly off when you switch off.

ln -s /etc/init.d/pandora_agent_daemon /etc/rc0.d/K99pandora_agent_daemon
ln -s /etc/init.d/pandora_agent_daemon /etc/rc6.d/K99pandora_agent_daemon


1.2.9 How delete all traps from the trap console

Q: I want to delete all the traps from my traps console without going sheet by sheet.Is it possible to do it also from a specific date?. A: To delete all traps that are in the traps console, you should execute, from the DB Interface extension, the following SQL sentence

DELETE FROM ttrap;


To delete all the traps previous to July 10 2010 that are in the traps console, you should execute, from the DB Interface extension, the following SQL sentence:

DELETE FROM ttrap WHERE timestamp < '2010-07-10 00:00:00';


You will need to create another admin user to change the password for other users. In order to do that, open a shell in your Pandora FMS server and execute following command:

/usr/share/pandora_server/util/pandora_manage.pl /etc/pandora/pandora_server.conf --create_user admin2 none 1


1.2.11 How can I execute powershell scripts as a module

If you have your powershell located at C:\RutaDeScript\Script\script.ps1 you first need to call to your powershell interpreter like this:

module_exec C:\WINDOWS\system32\WindowsPowerShell\v1.0\powershell.exe -Command "C:\RutaDeScript\Script\script.ps1"


1.2.12 My /var/spool/pandora/data_in directory has million of .data files, how can I delete them?

Deleting millions of files in a directory is not possible with the 'rm' command, and find . -delete or find . | xargs rm can be slow. The best way to do it is with this command:

perl -e 'for(<*>){((stat)[9]<(unlink))}'


1.3 Compatibility with Standards

1.3.1 Does Pandora FMS fulfills PCI/DSS ?

The PCI DSS rule implies several requirements:

1. Safe traffic through coding and certificates. 2. Double access authentication systems 3. Security policies applied to user management. 4. Possibility of audits in all fields and actions made on the monitored elements 5. Audit data transfer to external log managers.

1. Pandora FMS, at all levels (user operation, communication between components) supports SSL encode and certificates on both ends:

2. Double authentication. It's possible to deploy a double authentication system. The first one, at an access level (HTTP) integrated with any OpenSource or commercial token system. The second authentication, at an application level is managed by Pandora, it can be authenticated against LDAP or AD in the same way, or you may do it locally.

3. User management is limited by policies both at the user profile level and the operation visibility profile level defined as the Extended ACL system in the Enterprise version.

4. Pandora FMS, in its Enterprise version audits all of the user's actions, including the information about changed or deleted fields. It also includes a validation system with a signature on these registries.

5. These audit logs are available for their exportation through SQL and they allow integration from a third source for higher security, in almost real time.

1.4 Terminology

1.4.1 What's a Timestamp?

A timestamp is a character sequence that informs about the date and hour at which a specific event took place, for example when data is retrieved from an agent.

1.4.2 What does SVN mean?

It means Subversion, which is the system version control software that is used in Pandora FMS's development.SVN is the name of the command line tool.

1.5.1 I Want to change the IP of a lot of modules at once, how can I do this?

You have a switch with 230 checks and for some reason you change the switch IP, and thus you need to change the IP in the Main Agent view. It's very likely you are going to want to change the IP on all the remote checks.

Change the IP address of the agent manually and alter the module configuration at once using the SQL Manager and the following SQL sentence:

UPDATE tagente_modulo SET ip_target = "10.0.0.1" WHERE id_target = "10.0.0.2";


1.6 Database

1.6.1 I get the following error: "Can't connect to local MySQL server through socket '/tmp/mysql.sock'"

Check that you have a /tmp/mysql.sock file, you may have the sock file in another place, like /var/lib/mysql/mysql.sock if that's the case, link to the requested file:

ln -s /var/lib/mysql/mysql.sock  /tmp/mysql.sock


1.6.2 I lost my Mysql root password, how can I recover it ?

Do like so:

service mysql stop

wait until MySQL shuts down. Then run

mysqld_safe --skip-grant-tables &

after that you will be able to login as root without a password.

mysql -uroot mysql

In the MySQL command line prompt issue the following command:

Stop the running MySQL instance

       kill ps aux | grep -e "--skip-grant" | grep -v grep  | awk '{ print $2 }'  Restart the MySQL service normally  service mysql start  At this time your root password is reset to "none" and MySQL will now know the privileges and you'll be able to login with your new password: mysql -uroot -pnone mysql 1.6.3 Using the 'mysql' and 'mysqldump' commands correctly from the command line Q: I attempted to use several references from the documentation, but there is an error in the documents. In several locations you indicate a "root" username, but the default SQL user name in your configuration files is "pandora". A: Always check your current credentials in /etc/pandora/pandora_server.conf. In some environments credentials could have changed. You should always be able to access MySQL Pandora FMS databases with your Pandora user. By default, the database should be called "pandora", and the user should be "pandora", the password will be a random string. This means that commands should look like this: In the MySQL console: mysql -u pandora -D pandora -p <enter pass in console>  and to perform a SQL dump (for backups): mysqldump -u pandora -p pandora > file <enter pass in console>  1.6.4 Repeated data is not inserted into the database I am having some issues with Pandora's data server. I get data that has similar value as previous data, my XML data got ingested by the data server, but not inserted into the DB. I wonder if this is a normal behavior in Pandora's Data Server. How can I change that? Is there any config file to configure that ?. This is indeed Pandora FMS's "normal" behaviour. Check for more details in the chapter called "Pandora Engineering" from the documentation, about how Pandora FMS collects information and stores it in the database. You can "avoid" the automatic compression using ASYNC modules (but only from Pandora FMS version 3.2 or higher, previous versions do the same for async and for standard modules). 1.6.5 How delete all traps in the traps console Q: I want delete all traps in the traps console. Is possible to do it from a specific date onward?. A: To delete all traps in the traps console, you must run, on the DB interface extension, the following SQL sentence: DELETE FROM ttrap; To delete all traps prior to July 10, 2010 in the traps console, you must run, in the DB interface extension the following, the following sql sentence: DELETE FROM ttrap WHERE timestamp < '2010-07-10 00:00:00'; 1.6.6 Broken table This error displays some SQL error messages such as: Table './pandora/tserver' is marked as crashed and should be repaired, for example: SQL error: Table './pandora/tserver' is marked as crashed and should be repaired ('SELECT COUNT(id_server) FROM tserver WHERE 1 = 1 LIMIT 1') in /srv/www/htdocs/pandora_console/include/db/mysql.php on line 81 SQL error: Table './pandora/tserver' is marked as crashed and should be repaired ('SELECT COUNT(id_server) FROM tserver WHERE status = 1 AND keepalive > NOW() - INTERVAL 15 MINUTE') in /srv/www/htdocs/pandora_console/include/db/mysql.php on line 81  This problem occurs when the MySQL server is not switched off properly. To solve it enter the MySQL prompt and type: repair table tserver  1.6.7 The Pandora Console installation has MySQL errors such as "BLOB/TEXT column '<column>' can't have a default value From version 5.6 of MySQL onward we have configured by default "STRICT_TRANS_TABLES" and this MySQL configuration token created these kinds of problems. To avoid this problem you must follow these steps: • edit the my.cnf file (configuration mysql file), it is in /etc/my.cnf or /usr/my.cnf or /usr/local/mysql/my.cnf • set the token sql_mode=NO_ENGINE_SUBSTITUTION,STRICT_TRANS_TABLES as sql_mode=NO_ENGINE_SUBSTITUTION • restart the mysql server /etc/init.d/mysql restart 1.6.8 Database error when starting the service pandora_server It is possible that when attempting to start the service pandora_server will find this error in the log With verbosity 10 you can get this: DBI connect('pandora:localhost:3306','pandora',...) failed: Can't connect to local MySQL server through socket '/tmp/mysql.sock' (2) at /</usr/local/bin/pandora_server>PandoraFMS/DB.pm line 108.  With verbosity 1 or 0 you get this other error: DBI connect('pandora:localhost:3306','pandora',...) failed: Access denied for user 'pandora'@'localhost' (using password: YES) at /</usr/bin/pandora_server>PandoraFMS/DB.pm line 113.  In both cases you first need to check if the password is correct. If that is correct it should work. If not, check the mysql .sock that exists on this path ( /tmp/mysql.sock ). If that succeeds, link the current MySQL .sock to /tmp/mysql.sock, using: ln -s /var/lib/mysql/mysql.sock /tmp/mysql.sock  Try again. Also, it can help to change in pandora_server.conf the dbhost parameter using the ip 127.0.0.1 instead of localhost. If the path is correct, we must review the login credentials again and see if the MySQL service is running. 1.7 Networking 1.7.1 Recon doesnt detect my network topology correctly If you're executing Pandora FMS under a virtual enviroment and you're using a "shared network" (some times called NAT or Host network), the network is not "real" and therefore cannot be calculated. This is easily tested by doing a simple traceroute from the command line, for example: traceroute -n google.com  You should see 7-15 steps until it reaches the final endpoint. In a shared network you will only see one step. If you execute Pandora FMS in "network bridge" mode or on a real host, this will function correctly. 1.7.2 Problems with SNMP and Debian / Ubuntu In recent Debian / Ubuntu versions (this is written as of April 2011) the SNMP agent comes with a non-enabled MIB tree, that means, SNMP agents will not translate or understand any "word" of the MIB address,they will only understand numeric OIDs, thats a problem for most SNMP software, so you will need to re-configure it. This can be done in two steps: 1. Install package mibs-downloader 2. Edit /etc/snmp/snmp.conf afterwards remove all the uncommented lines (or comment them). 1.7.3 SNMP Trap console doesnt work and log says: "couldn't open udp:162" This happens because the system 'SNMPtrapd' daemon has booted before the Pandora FMS 'SNMPtrapd' daemon, and has the port blocked (in use). This fix is intended for OpenSUSE systems Stop the system daemon: /etc/init.d/snmpd stop  (This could yield different results in systems that are not on OpenSUSE). Restart the PandoraFMS server /etc/init.d/pandora_server restart  This is very useful to delay the system's SNMP startup after the Pandora FMS server has started in order to avoid this conflict in the future. 1.7.4 Kernel message "possible SYN flooding on port 41121. Sending cookies" This problem is related with having a lot of TIME_WAIT connections (netstat -an | grep TIME_WAIT | wc -l > 20000) A solution is to tune your kernel up inputting the following parameters echo 32000 > /proc/sys/net/ipv4/tcp_max_syn_backlog echo 30 > /proc/sys/net/ipv4/tcp_fin_timeout  This is not meant to be used with load balancing/clustering environments: echo 1 > /proc/sys/net/ipv4/tcp_tw_recycle  1.7.5 Boolean ICMP Network module shows critical status although connectivity with the agent is correct This problem appears when the first package from the ping execution doesn't reach the recipient. If the icmp_checks parameter is set as 1 inside the Server Configuration File (Default path: /etc/pandora/pandora_server.conf) it will show critical value because it only considers the first try at sending the ping command. Module status would be also critical if the icmp_checks value is higher than 1,the reason for this is that this parameter only executes "independent" pings so check results would always be wrong. A solution would be to use a script which executes a ping sending as many packages as we want upon its execution. So that, if a machine doesn't answer to the first package we could fix it by modifying the script with a number of packages higher than 1, that way the result will be successful. Using the pingcheck.sh script would provide us with a simple solution. It would deliver 1 if the machine answers or 0 if it doesn't. Script code: #!/bin/bash if [ -z "$1" ]
then
echo "Syntax:"
echo " "
echo " "
exit
fi

COUNT=$1 TIMEOUT=$2
IP=$3 ping -c$COUNT -W $TIMEOUT$IP 2> /dev/null > /dev/null
$snmpwalk -v 3 -a MD5 -A authsample -X encsample -l authPriv -u paco sample_target system  The tests shown above are to a target called 'sample_target' for the MIB-2 system tree. Note: Different implementations of net-snmp on different Operating Systems may work slightly different. For example, OpenSUSE does not need the net-snmp-devel package and the rwuser is created in a separate snmpd.conf under /usr/share/snmp (which is created automatically if it doesn't exist). 1.8 Agents 1.8.1 There's a memory leak in Pandora FMS Agent 4.x process under RHEL/CentOS/Fedora If you are using a RHEL/CentOS 5.x/Fedora platform, you might notice a memory leak in the Pandora Agent process for versions 4.x. The problem resides in a bug inside the Perl Threads library in those versions packaged by default (5.8.8 i.e) which affects these distros and has not been definitely fixed until versions 5.13.9 or newer. There are multiple choices to solve this problem: a) Either upgrade your OS/Perl version... b) Or comment the following lines inside /usr/bin/pandora_agent: eval { local$SIG{__DIE__};
};
if ([email protected]) {
$Sem = Thread::Semaphore->new; threads::shared::share (\$Xml);

1.8.5 Spaces in Agents / Brokers names on Windows

For a Windows agent to be generated on Pandora FMS with a full name, if it contains any spaces, the agent's name configuration must be enclosed in quotes. For example: agent_name "Windows 2003"

1.9.1 I try to configure an alert but I get "N/A" value on macro _data_

This is because you're forcing the alerts manually. Try to wait and get real data. Any forced alert will mark "N/A" as the data value.

1.10 Module / Plugin execution

1.10.1 (Windows) How can I execute commands with a different user than SYSTEM?

You need an external way to execute commands using privileges from another user. Windows command 'RunAS' will allow that, BUT, you'll need to input the password for that user "interactively", so this not useful for automating anything. Therefore, you'll need to use another tool able to execute something passing as user and password parameters in the command line. CPAU, a freeware tool, does exactly that. You can get it from here:

Basic use:

CPAU -u user [-p password] -ex "WhatToRun" [switches]

  user       User to log on as. Ex: user or domain\user
WhatToRun  What to execute


There's another tool with more options to encrypt the password, and with more security options, for people who may be very worried about putting a password on the .conf file. This tool is called RunAsSSPC, and you can get it from here:

http://robotronic.de/runasspcEn.html


1.10.2 Using 'module_interval' with plugins

When we decide to use 'module_interval' with plugins, we should configure the plugin to create the XML files with the same 'module_interval' set in the agent configuration. This way, we'll avoid the Pandora console generating false Unknown statuses in the plugin modules.

1.10.3 Error: "A problem occurred when adding the module. Processing error"

This processing error could appear when creating a module, but in this case it's possible that it will also appear trying to perform some other actions, such as editing local components. We might find this error message as well: could not be created, processing error. This is due to a MySQL configuration parameter, sql_mode. It has to be set in non strict mode, by adding to the my.cnf file:

  [mysqld]
sql_mode=""


Now, restart the MySQL service, /etc/init.d/mysql restart, and verify that the mode has been properly set:

  mysql -u root -p
select @@GLOBAL.sql_mode;


This should have solved any previous issues, and the parameter will remain properly configured in order to avoid future problems.

1.11.1 After the update to 5.1 from 5.0, the "update manager" fails

Please delete the file <pandora_console>/extensions/update_manager.php and the directory <pandora_console>/extensiones/update_manager/.

1.11.2 After a server upgrade / migration all network modules are unknown

That could be because of a server name change, and because the old server is not present on the server table. You need to manually "setup" your agents in order to use the new server. To avoid editing them one by one, you can use the SQL manager to configure all the agents with a quick SQL command. For example, if your new server is called "linux-ppby" the SQL sentence will be:

update tagente set server_name = "linux-ppby"


You won't need to restart the server, just wait a few seconds and all modules will be processed again.

Another choice is to change the "Server" parameter in the 'massive agent edition' option of the Massive Operation section, by selecting all migrated agents.

1.11.3 After upgrading to Pandora FMS 4.0 the Pandora Server cannot start

After performing a migration to Pandora FMS 4.0, the following event could take place:

DBD::mysql::db do failed: Failed to read auto-increment value from storage engine at /usr/lib/perl5/PandoraFMS/DB.pm line 556.

Should you encounter this error after starting your Pandora Server, the following line should be inserted into your Pandora DB:

ALTER TABLE tsesion AUTO_INCREMENT = 1;


1.11.4 Error while executing the migration script from version 3.2 to 4.0

It could occur that we encounter the following error while executing the migration script on the open source version:

Error 1089 at line 184: incorrect sub part key; the used key part isn´t a string, the used length is longer then the ky part, or the storage engine doesn´t support unique subkeys


This line matches inside the script with:

ALTER TABLE 'tagente_modulo' ADD INDEX nombre ('nombre' (255));


It could happen that while migrating a database which has been migrated more times from older versions, some columns aren't the expected type for the current migration process, resulting in an error.

In this case, we can check for this with:

describe tagente_modulo;


If the column we're trying to change has the right type, the response should be:

text NOT NULL DEFAULT


Otherwise, if the column has a 'varchar(100)' type and the 'varchar' limit is lower than the index limit (255), it generates a MySQL error.

The solution for this event is to insert the following line into the database:

ALTER TABLE 'tagente_modulo' MODIFY 'nombre' text NOT NULL DEFAULT ;


Once done, keep executing the script from the line you had the error in.

If the following line (185) drops a SQL syntax error:

CREATE INDEX module_group on tagente_modulo (id_module_group) using btree;


This could happen due to your MySQL version, since in other machines with newer versions, this syntax is accepted.

However, the solution is as simple as changing the line to:

CREATE INDEX module_group using btree on tagente_modulo (id_module_group);


And once done, execute the script from this line.

Anyway, this line has already been modified and in future versions or fixes, this syntax will appear corrected already.

1.11.5 Will be the Database affected in future versions?

Yes, but it will keep compatibility in an order in which the older agents will continue working without problems. It won't be necessary to reinstall the agents again when updating the server or the database. All database changes are managed using the provided migration scripts. See more about this in the chapter about 'upgrades' found in our documentation.

1.11.6 Problems with upgrading to the 5.0 version running the migration script

It is possible that after running the migration script from 4.1 to 5 an error occurs regarding a table 'treport_content'

ERROR 1452 (23000) at line 266: Cannot add or update a child row: a foreign key constraint fails (pandora.<result 2 when explaining filename '#sql-867_1ba'>, CONSTRAINT ?sql?867_1ba_ibfk_1 FOREIGN KEY (id_report_content) REFERENCES treport_content (id_rc) ON DELETE CASCADE ON UPD)


If this occurs, you will have to execute this query in MySQL:

DELETE from treport_content_item WHERE id_report_content NOT IN (select id_rc from treport_content);


After this you have two options: to comment all lines to 265 and re-run the migration script, or to restore the database using the backup that we should have done before, run the previous query and then execute the full migration script again.

1.11.7 Migrate from 4.1 to 5.0 pandora_server not start

In some cases there may be a problem when migrating from 4.1 to version 5 and the server won't start due to this error:

DBD::mysql::db do failed: Unknown column 'last_error' in 'field list' at /usr/lib/perl5/PandoraFMS/DB.pm line 811.


The solution is to manually add this query onto Pandora's database.

ALTER TABLE tagente_estado ADD COLUMN last_error tinyint(4) NOT NULL DEFAULT 0;


It is possible that after upgrading to version 5.0 from an earlier version, the Update Manager configuration points to URL version 4, instead of version 5.

To solve this problem you need to configure Administration > Extensions > Update Manager Settings > Update server path

/pandoraupdate5/server.php


1.11.9 After the update from 5.x to 6 some actions on the Dashboard are erratic

An element may not be deleted during the database migration. If this occurs, you will have to execute this statement in MySQL:

set @var=if((SELECT true
FROM information_schema.TABLE_CONSTRAINTS
WHERE CONSTRAINT_SCHEMA = DATABASE()
AND TABLE_NAME = 'twidget_dashboard'
AND CONSTRAINT_NAME = 'twidget_dashboard_ibfk_2'
AND CONSTRAINT_TYPE = 'FOREIGN KEY') = true,
'ALTER TABLE twidget_dashboard DROP FOREIGN KEY twidget_dashboard_ibfk_2',
'SELECT 0');
prepare stmt from @var;
execute stmt;
deallocate prepare stmt;


1.12 Problems with VMware images

1.12.1 Problems with the VMWare Image, eth0 doesn't work

Q: The problem is, the 'eth0' interface cannot be found. So, when I try to change the ip address it just doesn't work (sending me 'eth0: error while getting interface flags: no such device').

A: Cleaning the cache will fix the 'eth0' issue. It is caused by MAC cacheing, when you copy a VMWare image.

  rm /etc/udev/rules.d/*.*


Sometimes Sourceforge.net mirrors fail, try with a different download location link (Mirror) on sourceforge.net. All files have been tested and work fine. Several thousands of people already have it running.

1.12.3 Failure in runnning VMware virtual machine

There is an error detected with Pandora FMS' VMware image on VMware 4.1 systems. The error detected is the following:

Module DevicePowerOn power on failed. Unable to create virtual SCSI device for scsi0:0, '/vmfs/volumes/5113db7a-9a00a928-45ad-001a646a1c38/Pandora 4.0.3/Pandora_4.0.3_OpenSource_Appliance.i686-0.0.22.vmdk' Failed to open disk scsi0:0: Unsupported or invalid disk type 7. Make sure that the disk has been imported.

To solve this error just change the virtual disk format. To do this clone the disk using the following command

vmkfstools -d thin -i "Pandora_4.0.3_OpenSource_Appliance.i686-0.0.22-s001.vmdk" "Pandora_4.0.3_new.vmdk"


Now you can assign this new one called Pandora_4.0.3_new.vmdk to the virtual machine and it should start without problems.

User: root

Mysql User:root

1.13 Not Classified

1.13.1 problems with stability

If the Pandora FMS installation falls from time to time, or some remote checks (network, plugins, WMI, Web monitors) sometimes return incorrect values ​​(for example, an ICMP check should give 1 and returns 0) or you obtain a remote check that inexplicably remains in unknown mode, it may be due to the following causes:

1. Insufficient memory. To use Pandora FMS on a production system, it should have at least 2GB. It can be used on systems with less memory, but you have to "tune" all the components finely, and even so, you'll be limited to a very small environment, with very few threads / sub networks and a MySQL that consumes very little memory.

2. Virtual environments. In some misconfigured virtual environments there exist instability problems that occur when a there's a lot of load on the real physical system. This can be seen on the system log (dmesg) as 'pandora_server coredumps' or through MySQL.

1.13.2 Problems with virtualization (Virtuozzo)

Some agent drops that occur without any apparent reason, can be explained because something is happening in the way Pandora works, specifically at /etc/init.d/pandora_agent_daemon.

In this case, the problem has been detected in systems with a virtualization infrastructure based on Virtuozzo, where both the hardware nodes and the virtual machines that run above are monitored. As Virtuozzo does Software virtualization,the processes than run on virtual machines could perfectly be seen doing one 'ps' on the hardware node.

[[email protected] ~]# ps -Af | grep pandora_agent
root     20643 17147  0 Aug25 ?        00:00:08 /usr/bin/perl /usr/bin/pandora_agent /etc/pandora
root     22665 20918  0 Aug25 ?        00:00:08 /usr/bin/perl /usr/bin/pandora_agent /etc/pandora
root     22862 21033  0 13:13 pts/5    00:00:00 grep pandora_agent
root     23518     1  0 Aug25 ?        00:00:12 /usr/bin/perl /usr/bin/pandora_agent /etc/pandora
root     24839 31440  0 Aug25 ?        00:00:08 /usr/bin/perl /usr/bin/pandora_agent /etc/pandora
root     26703 24727  0 Aug25 ?        00:00:07 /usr/bin/perl /usr/bin/pandora_agent /etc/pandora
root     28677 16959  0 Aug25 ?        00:00:08 /usr/bin/perl /usr/bin/pandora_agent /etc/pandora
root     29524   301  0 Aug25 ?        00:00:08 /usr/bin/perl /usr/bin/pandora_agent /etc/pandora


When extracting the 'pid' of the /etc/init.d/pandora_agent_daemon. hrough one 'ps' for executing a kill -for example- what happens is that we obtain the identifier from the first agent listed between all those that are running. In statistics it's hardly ever the one that we want-the one corresponding to the hardware node

When executing stops or restarts on agents in the hardware nodes, in fact, we've been applying this order to an unspecified agent on one of the virtual machines that runs above. When the 'command stop' is fired on one machine, there is no problems, because the 'ps' can only see their own processes.

The solution is simply to rename the directory /etc/pandora for /etc/pandora_virt and to edit the file /etc/init.d/pandora_agent_daemon and replace the following line:

PANDORA_PATH=/etc/pandora


with

PANDORA_PATH=/etc/pandora_virt


With this, when you start and stop the process on the "real" machine, this will not affect the virtual machine

1.13.3 How can I auto-refresh any section of the console ?

&refr=60


To the URL, and it will autorefresh the page each 60 seconds.

1.13.4 I want to generate my own XML, simulating data from an agent, why doesnt my XML work?

The best option here, is just looking at a real XML and trying to imitate it. The most basic items are showed here:

A basic XML could be, for example something like this:

<agent_data agent_name="testxml" timestamp="2010-09-06 22:10:00" version="1.0" os="Other"
os_version="1.0" interval="300">
<module>
<name>5min</name>
<type>generic_data</type>
<data>73.3</data>
</module>
</agent_data>


A more advanced XML, with multi-data series, should look like this one:

<agent_data agent_name="testxml" timestamp="2010-09-06 21:10:00" version="1.0" os="Other"
os_version="1.0" interval="300">
<module>
<name>Multi Data Sample</name>
<type>generic_data</type>
<datalist>
<data>
<value>73.3</value>
<timestamp>2010-09-06 21:00:00</timestamp>
</data>
<data>
<value>13.3</value>
<timestamp>2010-09-06 21:05:00</timestamp>
</data>
</datalist>
</module>
</agent_data>


Just put a file called xxxxxxx.data in Pandora FMS's incoming section directly and it will be processed by the data server.

1.13.5 I get the following error: "Fatal error: Call to undefined function imagerotate()"

This is a problem with PHP-GD implementation in Ubuntu/Debian systems, you need to recompile the PHP files yourself and fix the patches applied by Ubuntu/Debian to the original PHP-GD package. All steps are described here:

1.13.6 Linux agent inventory doesnt get hardware (CPU, RAM, etc) information

You need to have the lshw command installed. You can obtain this on RPM from:

http://rpm.pbone.net/index.php3?stat=3&search=lshw&srodzaj=3


On a Debian/Ubuntu system, just install it with:

apt-get install lshw


1.13.7 Forcing timezone on the console

By default, if it's not reconfigured, Pandora FMS console uses the default timezone on PHP, if that is not set-up (not default), it's forced to be in the European Time zone. To change this, edit the file include/config_process.php, and input your own timezone, for this example Mexico City:

if (ini_get('date.timezone') == ""){
date_default_timezone_set("America/Mexico_City");
#       date_default_timezone_set("Europe/Berlin");
}


1.13.8 Timezone issues

This is usually a problem with the system's timezone configuration, but we have summarized a test group that allows to see which point of the entire Pandora system could have the time difference. To solve it, you need to execute it while being able to view the results that it shows:

- for the system (in the terminal)

date +"%z"
date


- For database (in mysql)

select now();
mysql> SELECT @@global.time_zone, @@session.time_zone;


- For perl

perl -e 'my $t = localtime(); print "$t";'


- For PHP, create a new file called test_timezone.php at the 'WWW' Apache directory (usually /var/www or /srv/www/htdocs/) that will include:

 <?php
echo date("Y/m/d H:i:s O e");
?>


At this point we should have detected which component is at a disagreement. We need to "force" that component to use a specific timezone, or if you're not sure, you can also force all components to respond to the same timezone.

- For the system (in debian) :

dpkg-reconfigure tzdata


- For DB (mysql), open the file /etc/mysql/my.cnf and add the following line after the section "[mysqld_safe]"

timezone = <time_zone>


- For PHP:

- For all the system, at the file /etc/php5/apache2/php.ini (or equivalent in your distro) and change/add the line:

date.timezone = <time_zone>


- Only for pandora_console, edit in file <pandora_console>/include/config.php. Add the line:

putenv("TZ=<time_zone>");


1.13.9 My pandora_db script programmed in /etc/cron.daily never executes, why?

If you're running a Debian or Ubuntu server, there is a problem reported with the '/etc/cron.daily/apt' script which stops the 'runparts' execution and avoids the execution of other scripts on /etc/cron.daily.

One solution is to delete that script at /etc/cron.daily/apt, and another solution is to set the execution of pandora_db.pl directly in /etc/crontab.

1.13.10 Does Pandora FMS support SNMP timeticks ?

Yes, a SNMP timetick is 0.001 seconds, or 100 timeticks = 1 second. So to get this data in days, for example, you need to use the post-process module feature, and multiply the values obtained by 0,000000116. This is the result of the value obtained divided by 8640000. Remember that postprocessing only allows you to specify values to multiply not to divide, so 0,000000116 = 1 / 8640000. You can use the same method to get the value in hours, for example, this will be 100x60x60 = 360000, and 1/360000 = 0,000002778.

This is an example SMTP setup on the /etc/pandora/pandora_server.conf file:

mta_adress smtp.domain.com
mta_port 25
mta_user [email protected]
mta_pass 123456
mta_from [email protected]


Be careful with the mta_auth configuration token, it's meant to set the "type" of authentication mechanism, not a password ('mta_pass' is for that). If you have a special MTA mechanism, use for example:

mta_auth LOGIN


Also make sure you have a proper DNS configuration on your system, that allows you to send mails outside your desired domains.

Before trying anything check this:

ping destinationmail.domain.com


You should receive a response before trying to configure the Pandora Server.

1.13.12 Sending an alert when an agent doesn't send any information

Q: How can I send a alert to an email address when a windows agent doesn't send any information? In the console there will be an "Out of Limits" sign and the last contact will be in red. How to activate an alert when this happens?

A: You need to use the "keepalive" module, check the docs for further information. Basically it's a special module that changes its status when you don't receive information from the agent (remote or by software agent) in a 2 second interval.

1.13.13 I get the error "Lock wait timeout exceeded"

This is a problem with your MySQL Server, it gets stuck and therefore cannot process operations. It's usually because of a problem due to an incomplete "frozen" transaction. Connect to your MySQL server and execute:

show innodb status \G


Search for something similar to:

------------
TRANSACTIONS
------------
Trx id counter 0 2005868535
Purge done for trx's n:o < 0 2005868523 undo n:o < 0 0
History list length 4
Total number of lock structs in row lock hash table 12990
LIST OF TRANSACTIONS FOR EACH SESSION:
---TRANSACTION 0 2005868508, not started, process no 6801, OS thread id 1150482768
MySQL thread id 67, query id 5223 localhost root
show innodb status
---TRANSACTION 0 2005868518, ACTIVE 833 sec, process no 6801, OS thread id 1150617936 rollback
mysql tables in use 2, locked 2
ROLLING BACK 12992 lock struct(s), heap size 1685488, undo log entries 1557131
MySQL thread id 70, query id 5111 localhost pandora end
DELETE FROM tagente_datos WHERE id_agente_modulo IN (SELECT id_agente_modulo FROM tagente_modulo WHERE
delete_pending = 1)


Another easy way to list current operations is the command:

SHOW FULL PROCESSLIST


In this example, transaction ID 70 , has been active for 833, and seems to be DEAD that's why it's blocking the access to some data, and probably it's the explanation for those "lock wait" errors.

Kill the transaction with:

KILL 70;


Sometimes a KILL could take some time, so be patient. Killing (kill -9) a MySQL daemon IS NOT A GOOD IDEA, and you will get a corrupted database with a 99% chance, so you'll need to wait to finish.



1.13.51 Can I run any Pandora agent on Cisco?

A: No, you can't. But you can run a satellite agent that's already running on a nearby host (a host that has access to Cisco SNMP interface). Then run a SNMP remote agent on a Pandora-compatible system. With Pandora 1.2 you could run a remote network agent to monitor ICMP, TCP, UDP, and SNMP parameters on Cisco equipment. You also could set up a custom Pandora FMS agent that uses expectancy to retrieve data and report to the Pandora FMS Data server in the provided XML interface.

1.13.52 What is the load capacity on Pandora FMS?

It depends on your architecture. If you have a single-server (MySQL, Pandora Server and Pandora Console) machine, about 1000 agents (in v3.0), with a total of 25-30 individual data items (modules) per agent. The hardware needed for that would be a "cheap" Server, with just a dual core CPU (at a minimum of 2.4Ghz frequency), 4GB of RAM and a 7500rpm Harddisk.

1.13.53 For more powerful setups (1000+ agents), could I use multiple servers, using a high availability solution?

Yes. There is a HA solution and multiple high-load solutions. Please read the entire documentation in depth, all the information is given there.

1.13.54 Could I use Crystal Reports with Pandora?

A: Yes, you could, since the database scheme is open. Check our documentation for an explanation about database scheme or directly, read the code in our development repository.

1.13.55 After a problem with the MySQL Server (shutdown or restart) my Pandora Server stops. Is there any data loss?

A: Pandora Server automatically shuts down if it can't connect with the MySQL Server. If the Pandora Server isn't running, data packages are being stored in the Pandora Server's incoming directory. When the Pandora Server restarts again, it will process those packages and no data will be lost.

A: Microsoft has released these files into the Resource Kit for Windows 2000, Windows XP and Windows 2003. You can download it freely from Microsoft, but Only for XP and 2003. This file was used for older versions of Pandora FMS (1.1) but it could be used to program a Perl Unix agent running on windows with the Active State Perl as a service. That's a nice hack :-)

1.13.57 How do I convert the Pandora Windows agent 1.1 keys into Pandora Windows agent 1.2 keys?

A: Disclaimer: Your old keys must be in DSA format. If they're not in this format, or you aren't sure, generate a new pair of SSH keys.

In order to convert your ppk keys into OpenSSH DSA format (id_dsa and id_dsa.pub files) you will need Puttygen utility.

Open Puttygen, go to the "File" menu and click "Load", then open your PPK private key. Open the "Conversions" menu and select "Export OpenSSH key". Save it as "id_dsa".

To export the public key, in the main window of Puttygen you can see a textbox on top whose title is "Public key for pasting into OpenSSH authorized_keys file". Select the entire text from the box and copy it onto the clipboard. Create a text file with the notepad and paste the text onto the file. Save the file and close the notepad. Rename this file to "id_dsa.pub" and that should fix the issue.

1.13.58 How to generate a pair of SSH keys for Pandora Windows agent? (SSH Transfer only)

A: Open Puttygen and select SSH2-DSA at the bottom of the main window. Then click "Generate". The program will ask you to move the mouse over the blank area to generate randomness. Once the key has been generated, export it by opening the "Conversions" menu and selecting "Export OpenSSH key". Don't use any passphrase when exporting it, so click "No" if a warning dialog appears. This will export the private key, which you must save as "id_dsa".

To export the public key, on the main window of Puttygen you can see a textbox on the top titled "Public key for pasting into OpenSSH authorized_keys file". Select all the text in the box and copy it onto the clipboard. Create a text file with the notepad and paste the text onto the file. Save the file and close notepad. Rename this file to "id_dsa.pub" and that should solve the problem.

1.13.59 How to configure the Pandora server to accept the keys from a Pandora FMS Windows agent (SSH Transfer)?

A: Connect to your server and go to '/home/pandora/.ssh' . If this directory doesn't exist you must create it. Open the "authorized_keys" file using your favorite editor (you must create it also if it doesn't exist) and paste the public key on a new line of the file. This should work now, so run a Pandora Windows agent SSH test again with:

c:\path\to\pandora> PandoraAgent --test-ssh


1.13.60 I have Net::SNMP installed but Pandora still asks me for SNMP.pm

A: net-snmp-perl and Net::SNMP are two different things.

net-snmp-perl is the perl bindings for the snmp library at http://net-snmp.sourceforge.net/, which provides an SNMP.pm without the Net:: prefix.

Net::SNMP is a perl module from http://search.cpan.org/dist/Net-SNMP/ which provides Net::SNMP (i.e. it would be /usr/lib/perl5/vendor_perl/5.8.5/Net/SNMP.pm). You can find RPMs for this package in Dag's repo: http://dag.wieers.com/packages/perl-Net-SNMP/

UPDATE: With Pandora FMS 3.0 this library is not needed anymore.

1.13.61 Error: Call to undefined function imageantialias() in the Pandora Console

A: The problem resides in the jpgraph.php file: Line 5791 and 5792.

  If you take a look on that lines you'll find this:
 $this->use_anti_aliasing =$aFlg;
imageantialias($this->img,$aFlg); 



To solve the bug just change those lines to these:

    $this->use_anti_aliasing = false; //imageantialias($this->img,$aFlg);   1.13.62 Problem starting the first time Pandora Agent for Unix (SSH Transfer mode) Q: When I enter [[email protected] root]# /opt/pandora_agent/pandora_agent_daemon start Pandora Agent is now running with PID 14786  Then it will display [[email protected] root]# The authenticity of host '192.168.182.157 (192.168.182.157)' can't be established. RSA key fingerprint is 9c:11:1b:ac:44:2e:10:98:16:75:00:58:34:18:5b:2d. Are you sure you want to continue connecting (yes/no)?  when I press yes it still shows those messages. What's the problem? A: It's a normal issue. Stop the agent. Make the first connection to the server manually. This means 'ssh [email protected]_server_ip', then press yes. That will also make you sure that you set up the SSH public key configuration successfully. After doing this, launch the agent again and everything should work out OK for you. 1.13.63 How to run PandoraFMS agent with the system startup Q: I've installed the pandora_agent on my Linux system and I want it to run every time the computer starts up, how can I automate the process? A: First of all, copy pandora_agent_daemon to /etc/init.d Then if you want pandora_agent_daemon to start with your system boot, just execute: ln -s /etc/init.d/pandora_agent_daemon /etc/rcX.d/S99pandora_agent_daemon  Where the X is the run level you're booting into. Then, to make sure your pandora_agent_daemon is being correctly switched off when you make a shutdown, or power off... ln -s /etc/init.d/pandora_agent_daemon /etc/rc0.d/K99pandora_agent_daemon ln -s /etc/init.d/pandora_agent_daemon /etc/rc6.d/K99pandora_agent_daemon  1.13.64 Problems with PHP-PEAR RPM Q: I installed the php-pear rpm package but the graphics don't work A: By default, php-pear is installed in /usr/share/pear To solve that just execute:  cp /usr/share/pear/PEAR.php /var/www/html/pandora_console/reporting/  (Check out your pandora_console PATH) Then, just make Apache able to read that file with the following command line:  chown apache PEAR.php  (Check out which user is running the Apache server, could be either apache or www-data) 1.13.65 Problems with "Unknown agent" in the WebConsole" Q: I created an agent in the webconsole but it has no data. Looking at the logs I found this error:  2007/07/11 14:13:45 ulises_Data [V1] ERROR: Received data from an unknown agent  But the agent is created in the webconsole A: You need to install: libxml-simple-perl  apt-get install libxml-simple-perl  1.13.66 I need more decimals in the definitions of SLA's, how can I get it ? A: Altering the database with following SQL sentence (MySQL): ALTER TABLE treport_content_sla_combined MODIFY sla_limit double(18,3) default NULL; ALTER TABLE treport_content_sla_combined MODIFY sla_min double(18,3) default NULL; ALTER TABLE treport_content_sla_combined MODIFY sla_max double(18,3) default NULL;  This will give you three decimals, if you need more, just alter the table again. This is for SLA's only. 1.13.67 I need more precision for the post-processing field A: Altering database with the following SQL sentence (MySQL) should provide a fix: ALTER TABLE tagente_modulo MODIFY post_process double(18,13) default NULL;  1.13.68 Can't locate PandoraFMS/DB.pm on Debian after installing Pandora FMS 3.0 A: There seems to be a problem detecting the PERL version. To solve this just copy, for example: # cp /usr/local/share/perl/5.10.0 /usr/local/share/perl/5.10.1 -R  1.13.69 PDF Reports without graphs On a report with graphs, it'll show the graphs in the html view, but when the same report is made in PDF format the graphs won't show. This bug is caused by the PHP configuration (normally this file is found in /etc/php5/apache2/php.ini), with this configuration you have to disable the flag to make the session pass by as a parameter. Well, for setting it on the flag, you can change the line "session.use_only_cookies = 0". The goal is to create the PDF, making the server auto-fetch the image graph and use the user session as a parameter. 1.13.70 PDF Reports don't show graphs and / or are slow to process One relatively common issue with the PDF reports is when the external URL monitoring cannot be resolved from Pandora FMS Console. We must verify that the URL to customer access, can be solved and accessed from the server where Pandora is installed, for example:  https://monitoring.mydomain.com/pandora  It could be that the server is behind a NAT address and the address which resolves the domain from the local machine is not accessible from the console. To access it you would have to edit the /etc/hosts file as follows:  127.0.0.1 monitoring.mydomain.com  1.13.71 A Map's background is black On the Dashboard, when creating a visual map Widget, if the map's background is completely black, it is due to the Apache configuration. If the Pandora console is installed in the default Apache location (/var/www en Ubuntu) this problem won't happen, but if we've installed the Pandora console in another location, for example at /home/Usuario/public_html, then, it'll be possible that you encounter issues finding the map's background image. 1.13.72 Massive SNMP operations doesn't work When you do a SNMP Walk in the massive operations section, a form should appear after a few seconds with the detected interfaces. If you select an interface, the possible values detected will be shown. If you don't get anything back, that means your system has problems translating OID. Please refer to "SNMP OID read problems" 1.13.73 SNMP OID Read problems OID's are usually translated using a "dictionary" or MIBs, that should be properly installed. In the latest versions of Ubuntu/Debian those MIBs aren't pre-installed on the system, and you need to install/download them explicitly. To do this, you can download a package called snmp-mibs-downloader and install it. After installation, just by editing the file /etc/snmp/snmp.conf and commenting the "mibs:" line, it should work. After that, restart your Apache server. For example on Ubuntu: sudo /etc/init.d/apache2 restart  1.13.74 I have upgraded to version 3.2 and policy modules are marked as unlinked Starting on version 3.2, policy modules can be unlinked from a policy to allow customization, but existing policy modules are not marked as linked during the upgrade. This can be fixed with the following SQL query: UPDATE pandora.tagente_modulo SET policy_linked=1 WHERE id_policy_module!=0;  1.13.75 How can I add fonts in order to use them in the graphs and reports? To add fonts to Pandora, you only need to copy them in the include/fonts directory. For fonts to work in PDF reports, the name of the font file must match the font family name in lowercase without spaces. For example, for the font family name Honoka Mincho the correct file name would be honokamincho.ttf. On Linux you can use ttfdump to find out the right font family under the section Name table 1. For example: $ ttfdump font_1_honokamin.ttf | grep -A10 "Name table   1"
Name table   1.  PlatformID:     1
EncodingID:     0
LanguageID:     0
NameID:         1
Length:         13
Offset:         256
48 6f 6e 6f 6b 61 20 4d 69 6e  >  Honoka Min
63 68 6f                       > cho
Name table   2.  PlatformID:     1
EncodingID:     0
LanguageID:     0


1.13.76 Problems with SNMP v1 and Pandora web console

The error can be checked. When you execute a function which performs a SNMP Walk using SNMP v1 the following string will appear on your web server log file:

snmprealwalk(): This name does not exist:


https://bugs.php.net/bug.php?id=51336&edit=1


To fix it you must upgrade your PHP installation to a higher version.

If you see your Pandora FMS server is down, and when you check the log file '/var/log/pandora/pandora_server.error' you find an error like this:

/lib64/libc.so.6[0x399ea748f4]
/lib64/libc.so.6(realloc+0x102)[0x399ea753e2]
/lib64/libcrypto.so.6(CRYPTO_realloc+0x60)[0x39a22dae50]
/lib64/libcrypto.so.6(lh_insert+0xf9)[0x39a227e9f9]
...


To solve the problem you must decrease the number of threads for web server to 1 with the following configuration:

web_threads 1


If your Pandora FMS web server must withstand a high load then, you must update the package to a newer version.

1.13.78 Using Incremental Type Modules

Incremental modules get "Rate" values, that is, items per second (Bytes per sec) in case of traffic.

This kind of module is created this way because in SNMP all counters are useful to measure a value rate per second. To do this with absolute values will be tricky, because the intervals, if they aren't exactly the same, will give values that shouldn't be comparative.This way peaks would be shown on the graph, which would be incorrect because the average interval would be slightly higher to the previous ones making all of them false. But one rate (X/sec) could be perfectly comparable to another rate (X/items/sec).

1.13.79 Table data overflows

If you are trying to store numbers bigger than what tagente_datos.datos can hold, you can increase its precision by connecting to Pandora FMS's database and issuing the following command:

ALTER TABLE tagente_datos MODIFY datos double(precision, 2) default NULL;


For example, if you need to store 128bit integers (which go up to 3.4e38) you need 39 digits for the integer part. Since Pandora FMS uses 2 digits for the fractional part, the resulting command would be:

ALTER TABLE tagente_datos MODIFY datos double(41, 2) default NULL;


1.13.80 Problems receiving SNMP alarm traps with string in parentheses

If you have configured an SNMP alert, which is set to an alert that uses _data_ macro upon execution, receiving an SNMP trap can fail when it receives a string SNMP trap containing parentheses.

Example: .1.3.6.1.4.1.4174.0.4.7 = STRING: "SQL Server 2012 (Monitoring)"

To solve this problem, you must call:

macro _data_ in single quotes: '_data_'.


1.13.81 Pandora FMS's database is too big and pandora_db.pl freezes

If pandora_db.pl is having trouble cleaning up Pandora FMS's database edit it, increase $BIG_OPERATION_STEP (to 1000-10000, for example) and decrease$SMALL_OPERATION_STEP (to 100-200).

$BIG_OPERATION_STEP is the number of blocks that a time interval is split into. A bigger value means bigger blocks, which is faster but heavier on the database.$SMALL_OPERATION_STEP is the number of rows that are processed in a single query. A smaller value means lighter queries.

1.13.82 Delete agents to solve problems with agent excess on the Enterprise version

The Enterprise version is limited by a number of agents. In case the number of licensed agents is exceeded, an error message will appear.

To delete remaining agents, the only thing to do is to disable the Enterprise version and delete the leftover agents using Open version. We can do this by renaming the folder to 'Enterprise', in case it's a Centos Appliance we would execute:

mv /var/www/html/pandora_console/enterprise /var/www/html/pandora_console/enterprise.bk


1.13.83 Required agents nomenclature - agents on version 5

Starting from Pandora v.5 we must keep in mind when creating fictional Agents, that the nomenclature has to follow the .data files that arrive at the Tentacle directory. They should follow this pattern:

Example. pandora_agent.3123278534.data

Any other format that follows can suppose that the data_server doesn't capture the information and could leave XMLs stored in the directory.

1.13.84 Alerts and events are not launched

Points to consider for the alerts and events from one module to work correctly:

- Having Event storm protection disabled.
- Check for any settings that have the agent in quiet or silent mode.
- Check for any settings that have the module in quiet or silent mode.
- Check for any settings that have the group disabled.

1.13.85 Issue with name resolution when sending emails

It may happen that sending emails with Cron Jobs isn't running properly and an error like this will appear on the console log:

PHP Warning: fsockopen(): php_network_getaddresses: getaddrinfo failed: Temporary failure in name resolution in /var/www/html/pandora_console/include/swiftmailer/classes/Swift/Transport/StreamBuffer.php on line 233


It seems to be a PHP error. The solution is to stop the Apache service for a few minutes to completely remove all Apache threads and restart Apache ( /etc/init.d/httpd stop ---- /etc/init.d/httpd start )

1.13.86 I have enabled the double authentication and I've lost the code generator

You should contact with the Pandora FMS administrator to disable this feature for you. This can be done through: like this.

1.13.87 I receive invalid results introducing valid codes for double authentication

This feature is highly related with time, especifically the time difference between the server's time and the code generator app's time, which may be affecting the validation.

1.13.88 Segmentation failure when running tentacle_server with SSL

Executing tentacle_server with SSL may lead to this error:

tentacle_server: segfault at [...] error 4 in libperl.so


This happens due to perl versions 5.10.1 and 5.11.0, so to solve it's necessary to update PERL. All stable releases between and including 5.6.2 and 5.10.0 x86_64, and 5.12 and above should run the code without crashing. Also, we have a compiled tentacle_server that fits this feature, the binary files can be found here: http://sourceforge.net/projects/pandora/files/Pandora%20FMS%205.1/SP2Final/Linux/

The pandora agent crashes when configuring several execution threads with the parameter "agent_threads" on the pandora_agent.conf. We have a binary version of the agent that fixes this issue, they can be downloaded here: http://sourceforge.net/projects/pandora/files/Pandora%20FMS%205.1/SP2Final/Linux/

1.13.90 Widgets are not deleted correctly in dashboards v6.0

The solution at this problem is add the next query to Pandora database:

set @var=if((SELECT true
FROM information_schema.TABLE_CONSTRAINTS
WHERE CONSTRAINT_SCHEMA = DATABASE()
AND TABLE_NAME = 'twidget_dashboard'
AND CONSTRAINT_NAME = 'twidget_dashboard_ibfk_2'
AND CONSTRAINT_TYPE = 'FOREIGN KEY') = true,
'ALTER TABLE twidget_dashboard DROP FOREIGN KEY twidget_dashboard_ibfk_2',
'SELECT 0');
prepare stmt from @var;
execute stmt;
deallocate prepare stmt;


For its execution we could create a sql file with the contain added. Supposing that is called query.sql this will be its execution into the command line:

cat query.sql | mysql -u root -p -D pandora


Once applied it, edit and delete of widgets will work correctly.

2 Frequently Asked Questions Pandora FMS 7 "New Generation" (FAQs)

2.1 Which are the default passwords and those of the vmWare/ISO image installation

The users/password of a system installed by default through the VMware image are:

• User without privileges "pandora" with "pandora" password
• User "root" with password "pandora"

In both cases (Vmware/ISO):

• MySQL user is "root" with password "pandora".
• The admin user to access Pandora FMS web console is "admin" and the password is "pandora".

In the case of an installation through the ISO image, it will establish the password of the root user and the creation of an account without privileges defined in a personalized way.

2.2 Database won't start after performing a system upgrade with yum/apt-get

Upgrading processes with yum/apt-get can cause some file permissions to be modified. To fix this issue you just have to modify the owner of the mysqld.log file to mysql:mysql, running the following command:

 chown mysql:mysql /var/log/mysqld.log


2.3 Satellite server and corrupted SNMP checks

Satellite Server uses braa binary to execute SNMP checks. Braa performs SNMP check in blocks which makes it faster in its executions. It has the lack that when one of the checks of the block fails, the whole block fails. To solve this problem in the satellite server, the following parameter must be configured in the satellite conf:

snmp_verify 1

In this way if one of these blocks fails, re-perform all the checks unified.

2.4 Disabling "pandora" user account on Linux/Unix systems with software agent installed

When you disable the pandora account on a Linux/Unix system (set /bin/false instead of /bin/bash in the /etc/passwd file), the script /etc/init.d/pandora_agent_daemon may stop working when the agent is installed to be executed with limited privileges (e.g. pandora user).

The changes needed to make this work require the sudo command in the system.

from:
90: su $PANDORA_USER -c "PATH=$PATH nohup $DAEMON$PANDORA_PATH >/dev/null 2>$LOGFILE &" 111: su$PANDORA_USER -c "kill $PANDORA_PID >/dev/null 2>&1" to: 90: sudo -u$PANDORA_USER PATH=$PATH nohup$DAEMON $PANDORA_PATH >/dev/null 2>$LOGFILE &
111: sudo -u $PANDORA_USER kill$PANDORA_PID >/dev/null 2>&1


2.5 PDF Graphs are missing after upgrade to OUM724

You require to install PhantomJS tool in order to include new graphs in PDF reports. Take a look on this chapter of configuration to do it [9]