20. Basic Architecture

Pandora FMS servers

The Servers are integrated into a single application, generically called Pandora Server, which is a multithreaded application that concurrently executes different instances or specialized Pandora FMS servers. These are the elements in charge of performing the existing checks, as they verify and change their status according to the results obtained. They are also in charge of triggering the alerts that are established to control the data status.

Pandora FMS automatically manages the status of each server, its load level and other parameters. The user can monitor the status of each server through the server status section of the Web Console.

The basic servers are the following ones:

Open

Data server: It is in charge of processing the information sent by the software agents (in XML format), the server processes it and stores the result in the database. It is also in charge of generating alerts and events according to this data. To enable the server it is necessary to configure the dataserver 1 line in the /etc/pandora/pandora_server.conf file.

Network server: This server executes remote monitoring tasks through the network, it could be ICMP checks, TCP requests and SNMP requests. The server and the remote machines must have communication to execute these checks. To enable the server it is necessary to configure the networkserver 1 line in the /etc/pandora/pandora_server.conf file.

Discovery server: It allows to explore networks to detect equipments and apply monitoring templates to them quickly. It also allows the rapid deployment of specific monitoring of databases, cloud systems and virtual environments. It includes the necessary tools to discover or import devices and equipment in the network. To enable the server it is necessary to configure the discoveryserver 1 line in the /etc/pandora/pandora_server.conf file.

Plugin server: It allows complex remote monitoring, since it executes complex checks from Pandora FMS server by means of customized scripts. It is a centralized process, integrated into Pandora FMS interface. This server allows advanced users to define their own checks, developed by themselves, and integrate them into the application so that they can be used easily from Pandora FMS. To enable the server it is necessary to configure the pluginserver 1 line in the file /etc/pandora/pandora_server.conf.

Prediction server: This server predicts numerical values using statistics and modules with real data as source, allows to detect anomalies out of the usual trends and creates new values from prediction statistics, which can be used as baselines. It also allows to create new values by arithmetic operations with the values of existing modules (synthetic modules). To enable the server it is necessary to configure the predictionserver 1 line in the /etc/pandora/pandora_server.conf file.

WMI server: This server allows remote monitoring of Windows systems using the WMI protocol. This is done through the execution of WMI sentences, remote sentences compatible with any Windows system with WMI enabled that allow to obtain Hardware and Software information. To enable the server it is necessary to configure the wmiserver 1 line in the file /etc/pandora/pandora_server.conf.

 
Inventory server: The inventory server obtains and displays inventory information of the systems: installed software, model of hardware elements, hard disks, services running on the system, etc. This information can be obtained both remotely (from the Pandora server) and locally (through the software agents). It does it by using the same monitoring agents or remotely, with extensions developed by the user, both for Windows and Unix. To enable the server it is necessary to configure the inventoryserver 1 line in the /etc/pandora/pandora_server.conf file.

Web server: It is used to perform complete web checks, from the user identification process, to parameter transfer through a form, content checking, menu navigation, etc. It allows performing availability checks (working or not working) and obtaining latency times (in seconds) of the complete browsing experience, including resources associated to the page (images, full texts, etc). It is based on Goliath (Web audit server), which is OpenSource. To enable the server it is necessary to configure the webserver 1 line in the /etc/pandora/pandora_server.conf file.

SNMP Traps Console: This server uses the standard trap collection system daemon, snmptrapd. This daemon receives SNMP traps and Pandora FMS SNMP console processes and stores them in the database. It is also in charge of launching the alerts associated to SNMP traps were defined. To enable the server configure the snmpconsole 1 line in the /etc/pandora/pandora_server.conf file.

Enterprise

Enterprise ICMP server:  This server multiplies the efficiency of ICMP checks. It uses the nmap binary installed with Pandora FMS Enterprise version. It uses nmap version 5.5. or higher. To enable the server it is necessary to configure the inventoryserver 1 line in the /etc/pandora/pandora_server.conf file.

 
Enterprise SNMP server: This server increases the efficiency of SNMP checks. It uses the braa binary that is installed with the Enterprise version of Pandora FMS. The braa binary, used by the enterprise SNMP server is located at /usr/bin/braa by default. It is compatible with SNMP V1 and v2. SNMP v3 checks will be done by the network server. It requires for the network server to operate simultaneously, to translate the OIDs. To enable the server it is necessary to configure the snmpserver 1 line in the /etc/pandora/pandora_server.conf file.

Syslog server: This component allows Pandora FMS to analyze the syslog of the machine where it is located, analyzing its content and storing the references in the corresponding ElasticSearch server. The main advantage of the syslog server is to complement log merging. With the support of the exporting features of the syslog server of Linux® and Unix® environments, it allows log consultation regardless of the source, searching in a single common point (Pandora FMS console log viewer). To enable the server it is necessary to configure the syslogserver 1 line in the /etc/pandora/pandora_server.conf file.

You may establish for each server the number of threads that the processes will use in the instance where Pandora FMS is installed.

Pandora FMS web console

It is the user interface of Pandora FMS, it allows to control the status of the Agents, see statistical information, generate graphs and data tables. It is also able to generate reports and centrally define new agents, modules, alerts and create other users and profiles.

Pandora FMS database

Pandora FMS uses a MySQL database in which all the information received in real time is stored, normalizing all the data from the different sources (server, agents...).

Currently Pandora FMS only supports MySQL, MariaDB and Percona.

Agents

EnIn Pandora FMS existenthere dosare tipostwo detypes agentesof yagents puedenand ejecutarthey móduloscan deexecute tiporemote remoto y de tipoand local modules:

• AgenteRemote Remoto:Agent: EsteThis tipotype deof agenteagent esis unan elementoorganizational organizativoelement creadocreated en la Consola web dein Pandora FMS,FMS habitualmenteWeb contieneConsole, módulosit deusually tipocontains remotosremote quetype sonmodules ejecutadosthat porare aquellosexecuted servidoresby quethose obtienenservers informaciónthat deobtain formainformation remota,remotely, comosuch puedeas ser elthe network server.

• AgenteSoftware Software:Agent: EsIt unis a software instaladoinstalled enon losthe equiposequipment queto sebe vanmonitored alocally, monitorizarretrieving deinformation manerafrom local,the extrayendocomputer informaciónitself, desdeit elallows propiomonitoring equipo,machine permite monitorizar los recursos de la máquinaresources (CPU, RAM, discos.disks...) yand lasthe aplicacionesinstalled instaladasapplications (MySQL, Apache, JBoss). TodaAll lathe informacióninformation recogidacollected por los agentesby software esagents enviadais alsent servidorto enthe formatoserver in XML aformat travésthrough del protocolothe Tentacle protocol (se permite el uso de SSH oor FTP)FTP enis unallowed) intervaloat predeterminadoa depredetermined interval of 5 minutosminutes (300 segundos)seconds).

Generalmente,Generally, laserver monitorizaciónand decomputer servidoresmonitoring ywill equiposbe secarried llevaráout a cabo con Agenteswith Software mientrasAgents quewhile lanetwork monitorizaciónequipment demonitoring equiposwill debe reddone seremotely haráwithout deinstalling forma remota sin la instalación de ningúnany software.

Topologías,Topologies, esquemasoverviews yand modelosmonitoring de monitorizaciónmodules

LoThe ideal esis quefor todosall losmonitored equiposcomputers monitorizadosto tenganhave comunicacióncommunication conwith elPandora servidorFMS deserver, PandoraFMS,but perosometimes enyou ocasioneswill nosfind encontraremoscases conin casoswhich enyou losdo quenot no tengamoshave total comunicacióncommunication entrebetween losthe distintosdifferent elementoselements we quewant queramosto monitorizar,monitor, vamoswe aare mencionargoing distintasto situacionesmention adifferent lassituations quewe podemoscan enfrentarnosface yand comohow subsanarlas.to solve them.

RedesAccessible accesiblesnetworks

• RedAccessible accesiblenetwork parafor lacentralized monitorizaciónremote remota centralizada:monitoring: El servidor de Pandora FMS tieneserver comunicaciónhas concommunication todaswith lasall máquinasnetwork de la red.machines.
• RedAccessible accesiblenetwork parafor laAgent-based monitorizaciónmonitoring: basadaIt enis Agentes: Son los agentesthe software losagents quethat tienenhave comunicacióncommunication con el servidor dewith Pandora FMS.FMS server.

RedesHard-to-access con dificultad de accesonetworks

• RedRemote remotanetwork nonot alcanzablereachable por los chequeos remotos deby Pandora FMS:FMS remote checks:Utiliza laIt modalidaduses the broker agent.agent mode.

• AgentesSoftware Agents that do not have access to Pandora FMS server: In this case it uses the proxy feature of the Software queAgents noor tienen acceso al servidor de Pandora FMS: En este caso utiliza la característica de proxy de los Agentes Software o una Satellite server comoas a proxy deof agentessoftware software.agents.
  

  

• RedesDifferent diferentesnetworks parato monitorizarmonitor remotamenteremotely conwith elthe servidor:server: SeYou puedemay utilizaruse the Satellite Server oor variosseveral servidores diferentes dedifferent Pandora FMS conectadosservers aconnected lato mismathe basesame dedatabase.

  datos.

 

¿NoAre seyou estánnot lograndoachieving losthe resultadosexpected explicadosresults? enGo el capítulo? Acceda a la sección deto ayudahelp oor soportesupport sections