Release notes

Pandora FMS NG 781 RRR

This is a minor update with new functionality and features. The latest version with maximum stability is Pandora FMS 777 Andromeda LTS (Long Term Support).

Regular releases (RRR) are monthly releases that bring together many changes and new functionalities. They are ideal for those users who need to be up to date and are not afraid of finding unpolished details. The LTS versions are oriented to consolidate all the changes of the RRR versions and offer maximum stability.

LTS versions are released once a year. Regular releases (RRR) are released approximately every 2 months.

Notice: In the web console, the cache data must be cleared to properly display tooltip messages over elements (module values, custom interval icons, etc.).

New features and improvements
Improvements and small changes
Known Changes and Limitations

Fixed vulnerabilities
Feature Extinction
Bug fixes

New Features and Improvements

SIEM Monitoring

This version introduces a SIEM monitoring alert system, allowing users to receive notifications through email or other channels when specific security events occur.

Additionally, the appearance and filtering options for event views in SIEM have been improved, enhancing usability and providing a more intuitive experience. New features include: SIEM event validation, filter saving, exclusion filters (allowing criteria to be excluded), and other options.

Network Scanning in Discovery

The network discovery feature and interface in Pandora FMS Server have been enhanced, making it smarter and providing more default information.

It is now possible to create discovery tasks without the need to specify multiple parameters, as well as configure more complex tasks, allowing users to automatically discover all possible networks or define specific scan configurations.

Additionally, the scanning process now includes different stages, which will be visually tracked and updated in Pandora FMS console.

A provisional network map will also be displayed as the scan progresses, providing a real-time overview of discovered devices. The final result will be available in the same interface. This network map may also be automatically generated from the task within the Topological Maps section of the Web Console.

Network Maps

Following the improvements in network discovery, several enhancements, fixes, and modifications have been introduced to network map generation and rendering.

One of the key improvements is the visual representation of network maps, which now feature two defined viewable areas that will represent the visible area within the mini-map viewport and a larger bounded area, preventing navigation beyond its predefined limits (useful for larger maps requiring extended space).

Regarding network map generation, two new options have been added to the context menu, one to load newly discovered nodes into the network map and another to redraw existing elements within the network map without deleting or modifying any user-created elements or relationships, ensuring that any custom configurations remain intact.

Group View

The group status view has been redesigned to match the overall appearance and style of the Web Console.

WUX Monitoring View

The WUX monitoring view has also been updated, aligning its look with the rest of the Web Console.

Event Creation via API

APIv2 now supports a bulk event creation function, allowing events to be generated in a single call, instead of requiring multiple separate requests. This significantly improves performance for high-event-volume environments.

Microsoft SQL Server® Discovery Plugin

This plugin now supports multi-threaded execution, optimizing its performance. Additionally, it now includes the ability to monitor at both the database and instance levels, along with new default monitoring modules.

Microsoft Exchange® Plugin

The Microsoft Exchange® monitoring plugin has been improved to support versions later than Microsoft Exchange 2010®.

MS Windows® Event Monitoring

Starting from this version, module_logevent modules for MS Windows® Software Agents are considered deprecated. Instead, module_logchannel modules should now be used for event monitoring.

Although module_logevent modules will continue working, their use is no longer recommended.

Improvements and small changes

Case#	GitLab#	Description
7747 and 17758	3767	Updated plugin for monitoring Microsoft Exchange® for versions Windows Server 2012®, 2016 and 2019
N/A	8477 Related: 8274	Added group and ACL management to the audit log.
15131	12903	Added periodic monitoring of available and occupied IP addresses to IPAM.
N/A	14348	Included Pandora RMM server in server list remote configuration (menu Management→Servers→Manage servers→Remote configuration).
N/A	14538 Related: MR 81	Discovery PFMS plugin for MS SQL server® version 1.2 allows creating agents by each database and their manual selection.
18771	14722	New agent detail view available in the Command Center (Monitoring→Agent detail menu).
18771	14726 Related: 15397	Added an option to search exclusively by nodes in agent filtering for monitoring policy application through the Command Center.
N/A	14998	Added icon to the web console header for direct and quick access to the Metasetup (Command Center).
N/A	13999	API 2.0 PFMS now supports event block insertion.
N/A	15019	Added “Any” option to the agent filtering feature to encompass all event types.
N/A	15024	The Warp update offline feature now supports applying custom special patches.
N/A	15050 Related: 15488	SIEM events now feature the ability to save and load custom filters.
N/A	15069 Related: 15398, 15411, 15558, 15559.	Completely rewrote the NetScan network scanning feature in PFMS Discovery.
N/A	15088 Related: 13907.	SIEM Events and SIEM Dashboards ow support auto-refresh for data visualization, configurable by users in their profile settings.
N/A	15094	Added agent auto-completion and search capabilities right away from graphs in Pandora FMS SIEM, (Operations→SIEM→Dashboard menu).
N/A	15102 Related: 15488, 15476, 15477.	SIEM alert feature now supports event-based alerts and filter-based rules.
N/A	15110 Related: 14692.	Changed SIEM text label.
N/A	15360	Added French language support to the web console help system.
N/A	15371 Related: 15488, MR 781.	Added a new plugin feature for SIEM, with the first plugin being a log parser for JSON format.
N/A	15171	SIEM feature may now be managed graphically in the Management→Servers→ Manage servers menu (including server activation and event activation options).
N/A	15456 Related: 15488.	Added event validation has been added to the SIEM event view, including multi-selection and filtering based on this new state.
N/A	15475 Related: 15488.	Added an exclusion filter option to the SIEM event view.
N/A	15556 Related: 15488.	Added sidebar filters to Dashboards, Events, Alerts, Decoders, Rules, and Search sections in SIEM.
N/A	15666	Added FTS (First Time Seen) decoder functionality in SIEM.

Known Changes and Limitations

Case#	GitLab#	Description
N/A	11647	Added button to forcefully resynchronize HA environments when needed.
N/A	11678	In list views where each item has specific actions (edit, delete, etc.), these actions are now always visible without needing to hover over them.
19298	12582	Once a module parent is set, it can now be edited.
N/A	13350 Related: MR 781	For new PFMS installations, the plugin pandora_snmp_bandwidth plugin is now distributed only in compiled form.
N/A	13366	In bulk module copying, the exact number of copies performed is now displayed.
N/A	13635	Added exception handling mechanisms for PFMS database synchronization in HA-installed environments.
N/A	13884	Added two new optional parameters to script pandora_ha_resync_slave script.
18078	13967	Removed buttons from the Real time graphs view.
N/A	13978	In the alerts view, the default action is now only displayed if it is the only existing action.
N/A	13979	Revamped the WUX view for agents configured with this feature.
N/A	13980	Changed expiration time in software agents to 30 seconds (autodiscovery plugin).
N/A	14029	Added informational messages regarding the results of adding custom identifiers to events.
N/A	14068	Adjusted the QR code size for agents in the agent editing section.
18289	14117	Restored the item importing feature in the monitoring policy view.
N/A	14161 Related: 12905, 13900.	Reinstated the AWS view to the corresponding menu (Operation→Monitoring→AWS view).
N/A	14390 Related: 15420.	Visually revamped the monitoring groups view, considering accessibility options.
19034	14717 Related: 14351.	Added a special notification to the web console to inform users when the Chromium-based report generator lacks write permissions.
19069	14824	Added support for OAuth 2.0 in Microsoft 365 Exchange®.
N/A	14929	Time interval list is now sorted chronologically in Network scan Discovery PFMS.
N/A	14938	The Tarball installer for PFMS Software Agent on Rocky Linux 8 and 9 now includes a warning message regarding the libnsl dependency.
N/A	14969	Improved Warp update online interface, providing a more intuitive display.
N/A	15007	Users may now customize the agent name in MongoDB® database monitoring (including the database name).
N/A	15104	Changed the log message in incorrect and/or outdated SIEM templates, when running the server with verbosity 3 and the producer with verbosity 5.
19449	15106	Renamed token name "Check connection interval" by "Check connection interval".

Fixed Vulnerabilities

Case#	GitLab#	Description
N/A	15308	Fixed the Chromium installation path check, ensuring proper validation for generating PDF graphs. Additionally, added a notification to the web console to alert users if the installation path is misconfigured.

Feature Extinction

Case#	GitLab#	Description
N/A	15700	For the command module_eventtype now the command module_logchannel is used, leaving module_logevent outdated in software Agent configuration.

Bug Fixes

Case#	GitLab#	Description
N/A	3960	Fixed the agent search order in PFMS server: ID, name, alias, and IP address.
N/A	11286	Fixed the display of blank results in History Data reports. Now, the last check performed within the requested time period is shown.
N/A	12641	Fixed Visual Console template display for those without entities.
N/A	13667	Fixed network mask representation in Supernets (IPAM feature).
N/A	13672 Related: 13475	Fixed log monitoring process for users in different time zones to ensure that queries are now based on UTC time.
17655	13734	Fixed informational messages (modal pop-ups and auto-closing messages) in the Credential Store.
N/A	13764	Fixed Pandora FMS SAP plugin (version 1.1) to properly monitor IDOC modules.
17731	13815	Fixed the calendar language settings in the user profile in the console's new task creation section.
17673	13820	Fixed command locate_agent in PFMS 1.0 API for its operation in the Command Center.
17822	13864	Updated and fixed menu elements in the Enterprise ACL setup.
17980	13935	Fixed help documentation in PostgreSQL monitoring plugin (version 1.1), to specify the correct separator (slash) for IP address and port.
N/A	13964	Fixed the regex-based free search in the event view filter.
18320, 18169, 18540	13976	Fixed PFMS Alert server auto-monitoring.
17129	13988	Fixed the auto-monitoring feature of PFMS Alert Server.
18070	13994	Added an exception-handling message In the SNMP Interfaces Wizard, for cases where no module is selected by the user.
N/A	14023	Fixed visual issues in the SNMP Browser feature.
N/A	14032	Removed the false positive warning regarding MADE PFMS versioning in the web console.
18107	14033 Related: MR 781	Fixed the vulnerability scanning task in Discovery PFMS (pandora_vulnscan).
N/A	14034	Fixed the issue causing BADXML errors (directory listing) in the Advanced LogParser plugin.
N/A	14101	Added a warning message when selecting time periods greater than 30 days in custom reports with projection graphs.
N/A	14107 Related: 11902	Fixed the agent view in monitoring policies in the Command Center, (group visualization issue).
N/A	14123	Fixed the Update users call in PFMS API v2 has been corrected (read-only fields, enumerated values, new value validation).
18324	14167	Fixed the event view search button (Search in secondary groups) for users with access to secondary agent groups.
18435	14239	Fixed PDF report generation for cases where PFMS server and the web console have different IP addresses.
18567	14241	Fixed the name request, agent group, and group with alert rights in inventory alert creation.
N/A	14252	Fixed agent data display in the Tree view with dark theme in the Web Console.
N/A	14253	Fixed public web links in groups for the Group status map (Dashboards) widget.
18714	14321	Restored the graph visualization button in the SNMP module interface (agent view).
N/A	14336	Fixed the Output and Error columns in the Pandora RMM view to correctly display full data in a pop-up window when clicking the magnifying glass icon.
N/A	14382	Enlarged the agent selection box in Visual Consoles, when selecting all elements.
N/A	14525	Fixed the history database configuration to only disable the feature if a remote connection error takes place when connecting to the future history database.
N/A	14535	Fixed the display of open tickets with a zero date in Pandora ITSM ticket view within the web console.
18958	14646	Inventory alerts require a name when created. An editing button was also added for each one in the list of registered alerts.
N/A	14658	Fixed the macro displaying help messages during module creation through server plugins.
18950	14659	Fixed the display of the user who validated the event in validated events.
18985	14660	Recovered the option to customize intervals in the event detail view comment filter (available only for superadmin users).
18979	14661 Related: 15351	Fixed the module links in the Monitor view (Monitor detail).
N/A	14694	Fixed the Agent Graph view in the Web Console when dark theme is enabled.
18960	14702	Removed the network map visualization button upon completing IPAM tasks.
N/A	14709	Fixed pagination in the agent list in agent management (agent deletion event issue).
N/A	14720	Fixed the background color in interface views and custom graph reports for compatibility with dark themes.
N/A	14736	Fixed pop-up information windows in the alert list and group monitoring view for dark theme.
N/A	14738 Related: 14233	Fixed the connection to monitored devices in Discovery PFMS task editing (VMware monitoring), by ensuring credentials are reloaded and read directly from the database.
19101	14740	Fixed the assignments for critical and warning state fields in bulk editing of async_string modules.
N/A	14741	Fixed result detection in NCM operations.
19149	14767	Fixed the Audit log feature to correctly display timestamps in UTC and in the date format configured by the user.
N/A	14774	Fixed child service creation on nodes in the Command Center
19159	14785 and 15001	Fixed the screen refresh timer in the event view to retain filter values when changing the data refresh period.
N/A	14835	Fixed the event filter (Agent search field) in the Command Center for cases where two or more agents on nodes have the same identifier.
19225	14858	Fixed token denominado Maximum historical traps age (days) to correctly retain its value when customized.
19232	14869	Names of items to be created or edited are required in agent autoconfiguration and target export features.
N/A	14931	Restricted agent visibility in custom fields view (Web Console) to only those within the user's assigned agent groups.
N/A	14932	Fixed Custom field view for its display with dark theme.
N/A	14933	Fixed exception access message display for users that have dark theme enabled in the Web Console.
19255	14936 Related: 10673	Fixed the reading process in the Web Console (Diagnostic info section) for the auto-monitoring agent name on PFMS server.
N/A	14948	Fixed pop-up messages throughout the Web Console when hovering over certain elements (modules, custom intervals, etc.) have been fixed.
N/A	14973 and 14974	Fixed the creation and modification of private event filters so that only the user who created them may use them.
N/A	14995	Restored the remote configuration option in the server list (Command Center).
N/A	14999	Fixed the feature in the event view (comments column), to ensure messages are displayed in all possible cases (grouped by event, ungrouped by event, grouped by users, etc.).
N/A	15009	Fixed failures in the Warp Update both offline (it allows to install equal or superior versions to the currently released one) as well as online (it differentiates RRR versions from LTS ones).
18830	15017	Fixed the PFMS Provisioning Server for cases where agents arrive with missing data.
N/A	15038	Fixed custom SQL reports (queries with nodes) in the Command Center.
19405	15075	Fixed the temporary directory access path in PDF generation through the Web Console.
N/A	15119 Related: 15087	Fixed data encoding conversion from UTF-16 to UTF-8 in SIEM event collection.
N/A	15144 Related: 15145	Fixed the alert view of an Agent when no alerts are configured.
N/A	15165 Related: 14692	Fixed erratum in Metasetup (Command Center).
N/A	15168 Related: 14291, MR 781	Fixed time intervals in monitoring policies to be used in modules assigned to the PFMS Plugin server).
19523	15182	Fixed public links in Graph Analytics.
N/A	15252	Added exceptions for missing MIBs in SNMP walk and monitoring policy implementation with SNMP in Ubuntu 22.
N/A	15229	Fixed translations in the Web Console.
N/A	15259	Fixed RPM-based updates (versions in ascending order).
19556	15264	Fixed module group selection in Monitoring Policies.
N/A	15268	Fixed filtering process in the alert details view, both in Command Center and on nodes.
N/A	15275	Fixed service SLA graphic display both on nodes and in the Command Center for superadmin users.
N/A	15288	Corrected username display in event comments.
N/A	15292	Added missing image in the login lockout form in Command Center.
N/A	15294	Fixed password visibility toggle button on the login screen in the Command Center.
N/A	15295	Corrected the prohibited password list in the password policy settings in Metasetup.
N/A	15298	Modules whose names include quotation marks can now be added in the scheduled downtime filtering.
N/A	15299	Fixed timezone selection for the PFMS server in Metasetup.
N/A	15305	Corrected QuickShell configuration to ensure the port number only accepts numeric values.
19603	15306	If two-factor authentication is set as optional in the general settings, all users may enable this feature for Web Console login.
N/A	15309	Fixed access to the notification tray in the Command Center Web Console.
N/A	15317	Removed incorrect interval option in bulk agent operations.
N/A	15341	Fixed message display when creating or editing Visual Consoles.
N/A	15349	Corrected module filtering in hierarchy for any agent.
N/A	15350	Fixed the list of options for the font size token in charts within Metasetup.
19624	15376	Corrected typos in campaign notifications.
19688	15386	Fixed Grafana query execution in PFMS integrated extension.
N/A	15392	Corrected links in the Web Console directing to the official PFMS documentation.
N/A	15402	Fixed the agent module update process in the Data server.
N/A	15459 Related: 15422, 15406	For Linux Software Agents, the “module_regexp” function has been fixed to work properly with log rotation.
N/A	15468	Fixed special day calendar for its use with the dark theme.
N/A	15585 Related: 15397	Corrected node and agent filtering process for selection and addition in monitoring policies.
N/A	15680	Corregido el estilo visual de la vista Acerca de tanto en tema oscuro como tema claro
N/A	15705	Fixed Linux kernel logs decoding.
N/A	15751	The display of comments added by Web Console in event view has been corrected.
N/A	15752	PFMS Satellite server was updated in its MS Windows® version to avoid unexpected service restarts. In its Linux® version, the network scanning and the creation of corresponding agents were corrected.

These release notes describe new features, enhancements and fixed issues as well as some workarounds for known problems. For more information about previous versions, visit the release notes section of our website.

For information on minimum system requirements, please visit the installation section in the official documentation.

How to update Pandora FMS

Automatic update: Use the Update Manager in Pandora FMS console (requires internet connection).
Manual update: Upload OUM update files in Pandora FMS console.
Package installation: Download and install packages (rpm, deb...) and update the console from the web.

To update the server, use RPM packages or tarball manually. The latest version includes MR 79, which should be applied according to the indications of the official documentation.

More information about downloads:

See our Wiki for detailed instructions on each upgrade process.

Other resources of interest

Official documentation

Plugin library

Technical support

Legal information

This document cannot in any case be reproduced or modified, decompiled, disassembled, published or distributed in whole or in part, or translated to any electronic or other means without the prior written consent of Pandora FMS. All rights, titles and interests in and towards the software, services and documentation will be the exclusive property of Pandora FMS, its affiliates, and/or respective licensees.

PANDORA FMS DISCLAIMS ALL LIABILITY FOR WARRANTIES, CONDITIONS, OR OTHER TERMS, EXPRESS OR IMPLIED, LEGAL OR NOT, OVER THE DOCUMENTATION, INCLUDING WITHOUT LIMITATION THE NON-INFRINGEMENT, ACCURACY, COMPLETENESS, OR CONTENT OF ANY INFORMATION ON ANY CONTENT. IN NO EVENT SHALL PANDORA FMS, ITS SUPPLIERS OR LICENSORS BE LIABLE FOR ANY DAMAGES, WHETHER ARISING FROM CONTRACT, INJURY OR BASED ON ANY OTHER LEGAL THEORY, EVEN IF PANDORA FMS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

All registered trademarks of Pandora FMS are the exclusive property of Pandora FMS SLU or its affiliates, registered with the United States Patent and Trademark Office (U.S. Patent and Trademark Office), as well as with the European Patent and Trademark Office. They may be registered or pending registration in other countries. All other brands mentioned herein are used for identification purposes only and are trademarks of (and may be registered trademarks) of their respective companies.