Console Configuration

The main and densest section is divided into seven subsections:

1. Basic: Languages, date and time, etc.
2. Security: Points related to securing the Web Console and API.
3. Behavior: Behaviors of the report console, agents, and modules, events, and miscellaneous items like mass operations, collections, and NCM.
4. Features: Enabling or disabling important PFMS functionalities.
5. Network: Critical for accessing the Web Console.
6. Directories: The most important and essential absolute paths for PFMS functionalities (attachments, RMM, etc.).
7. Alerts configuration: Email is still a valid tool for keeping people connected, here are instructions to configure PFMS as a one-way email client.

• Language code: By default, English (English (UK)) is used and sets the language for users who have the default language set. Each user can choose their own language and this general value will be ignored for that user.
• Time source: A list where you can choose the source of the date and time to use. It can be the local system (System by default) or the database (Database). The first is typically used when the database is on a different system with a different timezone than the Web Console.
• Server timezone setup: Defines the timezone for the Web Console. Unlike country codes and abbreviations (ISO 3166 standard), the list of time zones follows complex rules (IANA Time Zone Database), so an initial list with continents and countries is included, and selecting an option updates the second list where you can choose a specific country, city, or region. From version 785, the Change timezone button has no effect; you will only need to use both lists and save the changes.
• Enable update manager: Enables or disables the option for the Warp Update Manager.
• Automatically check for updates: Enable or disable automatic checking for updates in the Warp Update. This causes the Web Console to contact Pandora FMS’s update provider every time you log in, sending anonymous information about Pandora FMS usage (number of agents).
• Enable console log: Due to the large amount of debugging data generated, it is recommended to keep this log disabled as it is by default. If enabled, the Console event logs will be stored in the following file:

/var/log/php-fpm/error.log

/etc/php-fpm.d/www.conf

;php_admin_value[error_log] = /var/log/php-fpm/www-error.log

• Tutorial mode: By default, in full assistance mode, it allows displaying messages and help links in different sections and/or functionalities of the Web Console.
• Enable Feedback: Active by default, it allows direct access in the header of the Web Console to notify the Pandora FMS team of an error, including installation data in a PDF file.
• SSH server port for reverse SSH tunnels: Port where the SSH server listens on the PFMS Server, used for reverse SSH tunnels.

• Enable audit log: When enabled, the file …/pandora_console/log/audit.log will also be used to log auditing activities.
• Use SSL certificate: Allows specifying a digital certificate to encrypt communication between the Web Console and users. Each PFMS Server must use a unique certificate, and the default path suggests the directory where to store it, with the filename being merely a suggestion.
• Enforce https: Forces the redirection to HTTPS. If enabled, Pandora FMS will be required to use HTTPS on the web server.

UPDATE tconfig  SET `value` = 0 WHERE `token` = 'https';

• Referer security: When enabled, for security reasons, it verifies that the user comes from a Pandora FMS URL and that the link is not external, thus preventing suspicious links. By default, this is disabled. Verified sites include:

1. DB manager extension.
2. User configuration.
3. Configuration of Recon Server scripts.

• API password: Authentication method to access the Pandora FMS API 1.0.
• IP list with API access: List of IP addresses that will have access to Pandora FMS's web service API (by default, 127.0.0.1, local access only). The asterisk can be used as a wildcard, so * will grant access to all IP addresses, or for example, 125.56.24.* will grant access to the entire 125.56.24 subnet.

This section controls behaviors related to the report console and connectivity, details of agents and modules (including API and SNMP traps), PFMS events, and miscellaneous items like mass operations, collections, and NCM.

• Enable console dedicated to report generation: The dedicated reporting console has the critical mission of preparing, converting into useful information, generating, saving, and sending reports for hundreds of agents and EndPoints. For this, it has special configurations for both software and hardware:

1. The memory (RAM, virtual or real) for PHP must be able to use, if necessary, the maximum amount available on the system. If not, a warning will be triggered. Refer to installation for configuration details.
2. Only administrator users can log in to the dedicated reporting console.
3. Menu options are limited to essential functions, especially for PFMS software updates. All other settings should be configured through another web console connected to the same databases. See the section for email configuration.
4. To use the dedicated reporting console, the respective config.php file must include the following parameter:

$config["reporting_console_node"] = true;

• Check connection interval: Time interval (in seconds) to check the connection with the database server. Default is 180, minimum is 60.

• Set alias as name by default in agent creation: Enabling this option for agent creation via Web Console automatically enables Use alias as name, allowing the agent's name and alias to be the same value. Disabled by default.
• Unique IP: Enabling this option automatically activates the Unique IP button during agent creation and editing to detect if the IP addresses assigned to an agent are available or if they are being used by the same or another agent. Disabled by default.
• Forward SNMP traps to an agent (if it exists): Configuration that allows associating SNMP traps with agents. Enabling this option will create a module for an agent named SNMPTrap and type async_string when a trap is received with the same IP address as an agent. The module value will be the last received OID, updated as new traps arrive. If Yes, and change status is selected, the module status will change to CRITICAL upon receiving a trap. To return to NORMAL status, all traps associated with the agent must be validated or deleted from the SNMP console. If Yes, but do not change status is selected, only the module value changes. By default, SNMP traps are not forwarded (button No, do not forward).
• Include manually disabled agents: Allows enabling or disabling the display of manually disabled agents in certain views of the Web Console.
• Enable module custom ID read-only: Enabling this option locks the editing of an agent's module custom ID from the Console but allows editing from CLI and the API. Useful for third-party automated integrations without allowing the user to modify this value.
• Command line snapshot: Chain modules that return multiple lines will display their content as formatted text in command line style.
• Change remote config encoding: Enabling this option changes the character encoding (encoding) of module writes in remote configuration files from the default UTF-8 to the encoding configured in the configuration files.
• Number of modules in queue: Sets the maximum number of modules in queue (default 500). If this value is exceeded, a warning icon will be shown for each item in the server management.
• API interval for module (seconds): Default value is 300 seconds, minimum 60.

• Event storm protection: If enabled, data will continue to be received without generating events or alerts.
• Keep in process status for new events with extra ID: If enabled and there is an “In process” event (In process) with a specific extra identifier (ID Extra), and a new event with that ID Extra is received, it will be created as In process. New events will also inherit the ID Extra from the event.
• Max. hours old events comments: When events are shown grouped, the comments of identical grouped events will be limited to the last specified number of hours.
• Inventory change blacklist: Inventory modules in the deny list will not generate events when changed. By default, for both Linux® and MS Windows®, the following are included: CPU,Process,Security.

• Allow create scheduled downtimes in the past: Enables or disables the ability to create scheduled downtimes in the past. The purpose is to modify information for SLA reports.
• Limit for bulk operations: Limit of items that can be modified via bulk operations at once, default is 500 (minimum 100), to prevent memory bottlenecks.
• Log size limit in system logs viewer extension: Sets a maximum size, in kilobytes, for log files.
• Collection size (Bytes): This is the maximum size, in bytes, for Collections.
• IPAM critical threshold for occupied addresses: Threshold for the IPAM supernetwork map extension, indicating a critical range for occupied addresses.
• IPAM warning threshold for occupied addresses: Threshold for the IPAM supernetwork map extension indicating a warning range for occupied addresses.
• NCM configuration FTP server IP: FTP server IP address for Network Equipment Templates. This value will be used by the macro TFTP_SERVER_IP in NCM scripts.

Upon PFMS installation, these features are disabled by default (except for vulnerability scanning):

• Show experimental features: The Pandora FMS team is working on continuous development and may place new improvements here, which users can get an initial preview of.
• Use Advanced ACL System: This will enable the Advanced ACL System which is more flexible than the standard ACL system.
• Enable GIS features: Enable or disable the GIS features for the Pandora FMS Web Console.
• Enable NetFlow: Enable or disable NetFlow monitoring®.
• Enable IOT Server: The Pandora IOT integration is designed to monitor messages received from an MQTT broker server.
• Enable agent vulnerability scanning: The Pandora FMS EndPoints and the remote discovery engine will look for information about the installed software on the system to detect potential vulnerabilities. This applies only to agents that have vulnerability scanning configured with the Use global settings option selected.

• Public URL: A public URL can be stored here. It is useful to fill this field when you have an reverse proxy or, for example, with the mod_proxy mode in the Apache web server.

The following two tokens will only be taken into account if a URL has been set in the previous field.

• Force use Public URL: Only the Public URL will be used to navigate to the web console (all links and references will be built based on the public URL).

UPDATE tconfig  SET `value` = 0 WHERE `token` = 'force_public_url';

• Public URL host exclusions: The IP addresses added here will use their own IP address to build their links and references, even if the token Force use Public URL is enabled. They can be separated by commas and/or on different lines. To add comments in a line, it should start with the symbol #.

• Attachment directory: Pandora FMS Console file directory. Used to host collections, incident attachments and other series of files. It must have write permissions for the web server and is located by default at:
  

  /var/www/html/pandora_console/attachment

  If the default path is changed to another custom location, you must contact the operating system administrator (root) where the PFMS Server is running since no hosted directory or file will be moved automatically. It is recommended, after backing up data and downloading the stored elements (collections, incident attachments, and file repository), to delete said contents via the web Console, change the path, save the changes, and upload everything again to the new location.

  
  

• Remote configuration directory: Field where the directory storing the remote configuration for the RMM feature is identified, by default located at:
  

  /var/spool/pandora/data_in

• RMM remote config directory: Field where the directory storing the remote configuration for the agents is identified, by default located at:
  

  /var/spool/pandora/rmm_server

• General network path: Directory where the netflow and sflow directories for the corresponding data will also be stored. Default value:
  

  /var/spool/pandora/data_in/

• Chromium path: Chromium is a special component used to generate dynamic graphs in PDF format. You must enter the path or PATH where this component is installed, by default:
  

  /usr/bin/chromium-browser

• Server log directory: Directory where the server log files are stored.

This section allows you to configure the sending of alerts via email and Telegram® instant messaging:

The default values when installing Pandora FMS are merely illustrative and should be changed based on the email provider used. Pandora FMS uses Postfix for routing and sending email, as it is included in many GNU/Linux®, macOS®, and BSD® distributions.

Pandora FMS supports OAuth 2.0 for both Microsoft® and Google®.

In the fields From address and From name, you must configure the sender's email account and the sender's name that will be displayed to the recipient.

Today, to avoid spam attacks on third parties, email servers generally require a user (which may differ from From address) and the respective password, which should be specified in the E-mail user and E-mail password fields.

It is recommended to encrypt the traffic when sending email to avoid man-in-the-middle (MITM) attacks. To do this, use the Encryption field with the protocol used by the email server. A summary of available encryption methods in PFMS:

• STARTTLS (Start Transport Layer Security): (recommended option) This protocol starts with an unencrypted SMTP connection on the standard port and then requests an upgrade to a secure connection using TLS. Port 587 is the most commonly used by most email providers. Port 25 is the standard SMTP port and is often blocked by many ISPs to prevent spam and is usually used only for private traffic between servers.
• SMTPS (SMTP Secure): The connection starts directly using SSL/TLS. No unencrypted connection is allowed. Port 465 is used for secure SMTP connections using SSL/TLS from the start. Although it was deprecated at some point, it is still supported by many email providers and remains a valid option for encrypted connections.

SMTP Server and SMTP Port: These store the domain (or IP address) and port number of the email server.

Configuration for some email hosting providers:

• Aruba (aruba.it)®.
• Amazon Simple Email Service (AWS SES)®.
• easyDNS (outbound mail)®.
• Gmail®.
• Mailgun®.
• Postmark®.
• Proton Mail®.
• Microsoft 365 Exchange® (OAuth 2.0).
• Google (OAuth 2.0).

Once the email configuration is saved, and after clicking the Email test option, you can check if the configuration is correct by sending an email generated by Pandora FMS to the specified email address. Only if the selected configuration is correct, you will see the message in the inbox of the specified email address.

• SMTP Server: smtps.aruba.it.
• SMTP Port: 465.
• Encryption: SSL.

• SMTP Server: email-smtp.< region >.amazonaws.com where < region > should be replaced with the server's location (in Spain, it is email-smtp.eu-south-2.amazonaws.com; AWS may change these values at any time).
• SMTP Port: 587.
• Encryption: STARTTLS.

• SMTP Server: mailout.easydns.com.
• SMTP Port: 587.
• Encryption: STARTTLS.

• SMTP Server: smtp.gmail.com.
• SMTP Port: 587.
• Encryption: STARTTLS.

If authentication errors are encountered, check that:

• Less secure apps are allowed to access the account.
• Or try enabling two-step verification and using an app password.

• SMTP Server: smtp.mailgun.org.
• SMTP Port: 587.
• Encryption: STARTTLS.

• SMTP Server: smtp.postmarkapp.com.
• SMTP Port: 587.
• Encryption: STARTTLS.

• SMTP Server: smtp.protonmail.ch.
• SMTP Port: 587.
• Encryption: STARTTLS.

• In Microsoft Azure® the application to be used must be registered:

• After registering the application, take note of the Client ID and Tenant ID:

• Create a Client secret and properly note the value:

• Grant API permissions to obtain users and send emails:

• Verify that the Office 365 Exchange application is registered:

• Then, activate the Office 365 Exchange application:

• Finally, configure OAuth2 in Pandora FMS with the obtained data:

Menu Management → Settings → System settings → General Setup → Alerts configuration and activate OAuth2 to make the fields appear for configuration.

Once the email settings have been saved, clicking the Test Email button will allow you to verify that the settings are correct by sending a message generated by Pandora FMS to the specified email address. The message will only appear in the inbox of the specified email address if the selected settings are correct.

nmap -p443 login.microsoftonline.com -Pn

nmap -p443 graph.microsoft.com -Pn

The result must always be open for the connection attempt to be successful:

When activating the OAuth 2.0 option, select Google as the OAuth 2.0 Mail server and obtain the necessary data from Google Cloud®. To do this, create a new project:

Once created, go to the Gmail® library, API Library, select Gmail API:

Activate this option:

In the Data Access section, grant permissions for sending emails:

Under Service accounts, create a new item to obtain the CLIENT ID:

Once everything above is activated and configured, the next step is to configure OAuth2 credentials with the domain administrator to obtain the various keys for configuration.

With the superadmin account having the CLIENT ID copied, the following steps must be performed:

• Go to the Google® Admin Console: admin.google.com.
• Go to Security → Access and data control → API controls.
• Click on Manage Domain-Wide Delegation.
• Click on Add new.
• Create the record with the Service account ID and its scope:

https://www.googleapis.com/auth/gmail.send

• Finally, configure OAuth2 in Pandora FMS with the obtained data:

Menu Management → Settings → System settings → General Setup → Alerts configuration and activate OAuth2 to make the fields appear for configuration.

Once the email settings have been saved, clicking the Email test option will allow you to verify that the settings are correct by sending a message generated by Pandora FMS to the specified email address. The message will only appear in the inbox of the specified email address if the selected settings are correct.

nmap -p443 googleapis.com -Pn

The result must always be open for the connection attempt to succeed:

This section allows integrating a standalone PFMS Server into a Command center and making it one of its nodes. The different fields include the location, type of database (MySQL always by default), database name, etc., including the necessary communication encryption options (token Enable SSL).

In Command center link status, you can always know the status of this connection, including help messages for each case.

To activate the password policy, you must have an administrator profile (Pandora administrator) or be a superadmin.

This feature allows you to store data older than a configured threshold in a different database from the main one to speed up the operation of the latter.

In the connection configuration (Configure connection target), you need to configure the basic data (address and port, database name, and credentials). Starting from version 782, MySQL can connect securely (SSL) by setting the following parameters:

• Enable SSL: Enables or disables the use of SSL for the database connection.
• SSL server key: Path or location of the file, in PEM format, that contains the MySQL server key.
• SSL server cert: Path or location of the file, in PEM format, that contains the MySQL server certificate of the SSL key.
• SSL CA cert: Path or location of the file, in PEM format, that contains a list of SSL certificates issued by a Certification Authority.
• SSL CA path: Path or location of the directory or folder that holds SSL certificates issued by a Certification Authority. Certificates must be in PEM format.
• SSL verify server cert: If enabled, it verifies the connection to MySQL (CN of the SSL certificate), if they do not match, the connection will not be made.

After successfully connecting to the historical database, you can configure the custom parameters (Customize settings):

Configurations for active to historical data:

• Advanced options: Enables advanced options:

1. String data days old to keep in active database: The age of string data to keep in the active database. String data will remain in the active database for the specified time and days. Older data will be sent to the historical database. Data will be purged from the active database after 0 days (default value).

• Data days old to keep in active database: After how many days data will be transferred to the historical database. Default value: fifteen 15 days.
• Transference block size (Step): Mechanism for transferring data (similar to a buffer) to the historical database. The lower the number of records, the less impact it will have on the performance of the main database. Default value is one thousand five hundred 1500 records, recommended value is one thousand. See the next point for configuring the time period.
• Delay between transferences (seconds): Waiting time -in seconds- between data transfers from the main database to the historical database. Default value: one 1, recommended value: two 2.

Configurations for historical data:

• Maximum historical data age (days): Maximum number of days to retain numeric data. Default value: one hundred eighty 180.
• Maximum historical string data age (days): Maximum number of days to retain string data. Default value: one hundred eighty 180.
• Automatic partition of big tables: To automatically create monthly partitions in IDB files of specific databases (tagente_datos, tagente_datos_string, ttrap).

Configurations for historical events:

• By clicking Enable historical events, the following tokens are activated:

1. Events days old to keep in active database: Number of days to keep events in the historical database. Default value: ninety 90 days. Note that events are deleted (purged) from the main database after seven days.
2. Maximum historical events age (days): Number of days to keep events in the historical database before deletion. Default value: one hundred eighty 180 days.

Configurations for historical SNMP traps:

• When enabling the Enable historical traps option, it allows storing SNMP traps in the historical database:

1. Days old to keep in active database: Number of days to retain traps in the active database. Default value: six 6 days.
2. Maximum historical traps age (days): Number of days to retain traps in the historical database. Default value: one hundred eighty 180 days.

It should be configured as explained in “Log collection and monitoring”.

Once that server is set up, its IP address or URL (HTTPS is recommended) and the port number (default 9200) will be entered here, and the connection will be tested, displaying its success or failure in the SIEM status section:

For the values of Index configuration, see the topic “Log collection and monitoring”.

• Double authentication: Users can choose whether to enable two-step authentication for their accounts. This feature requires that both the server and mobile devices have synchronized and as accurate a date and time as possible.
• Session timeout based on: By default, this is enabled and checks if there has been no activity from the user (or based on the date and time of the last login) within the time period set in Session timeout (mins) to log out. Values for this last token:

1. The default value is 90 minutes.
2. When this value is set to 0 for a user, Pandora FMS will use the value saved in the General Configuration, authentication section.
3. To keep the session from expiring, set it to -1. A user logged into the Web Console with an active screen will auto-refresh and will not be considered idle.

Database maintenance status

Shows the status of database maintenance:

• Pandora_db running in active database: If pandora_db runs for over 12 hours without executing, it will mark a critical status.
• Pandora_db running in historical database: This appears only if a historical database is configured; similarly, if pandora_db runs for over 12 hours without executing on the historical database, it will mark a critical status.

Database maintenance options

• Max. days before events are deleted: Maximum number of days before deleting events, default is seven.
• Max. days before traps are deleted: Maximum number of days before deleting SNMP traps, default is seven.
• Max. days before audited events are deleted: Maximum number of days before deleting audit events, default value is fifteen.
• Max. days before string data is deleted: Maximum number of days before deleting string data, default is seven.
• Max. days before GIS data is deleted: Maximum number of days before deleting GIS data, default is seven.
• Max. days before purge: Maximum number of days before deleting data, default is 45. This also specifies the maximum number of days to keep inventory historical data.
• Compact data before moving it to history: Data can be compressed by sampling per hour (Compaction samples per hour) before moving them to the historical database.
• Max. days before unknown modules are deleted: Maximum number of days before deleting unknown modules unless they are in a policy.
• Max. days before delete not initialized modules: Maximum number of days before deleting uninitialized modules.
• Max. days before autodisabled agents are deleted: Number of days (default 30) after which auto-disabled agents will be deleted.
• Retention period of past special days: Number of days after which past special days will be deleted.
• Max. macro data fields: Number of fields that can be used for alert commands.
• Max. days before delete old messages: Number of days after which received messages will be deleted.
• Max. days before inventory data is deleted: Number of days after which inventory data will be deleted.
• Max. days before disabled agents are deleted: Number of days after which disabled agents will be deleted (default 0, never).
• Max. days before policy queue is purged: Applies to the monitoring policy queue already applied, which will be deleted after the specified number of days.

Historical database maintenance options

• Max. days before purge: Maximum number of days (180 by default) before deleting historical data.
• Max. days before events are deleted: Maximum number of days (180 by default) before deleting historical events.
• Max. days before string data is deleted: Maximum number of days (180 by default) before deleting historical string data.

Others

• Item limit for real-time reports: Field where the maximum number of data items to be represented in the real-time graph is defined, default value: 100.
• Limit of events per query: To set a maximum limit on the number of events returned in a query, default value: 5000.
• Default hours for event view: Field where the default hour field of the filter is defined in the event view. This field also affects the display, count, and graphs of events in the tactical view, with a default value of eight hours.
• Use real-time statistics: Enable or disable the use of real-time statistics. If real-time statistics are disabled, the refresh time for statistics will be set in Batch statistics period (secs) (default 60 seconds).
• Disable unknown status control on software agents modules by default: By default, modules created by PFMS Endpoints are disabled for detecting unknown states in unknown.
• Max. recommended number of files in attachment directory: Maximum number of files stored in the attachment directory (attachment).
• Delete not initialized modules: Enable or disable the deletion of uninitialized modules.
• Big Operation Step to purge old data: Number of blocks in which the script pandora_manage divides a time interval. A higher value means larger time blocks, which implies more operations, but lighter ones. In overloaded systems and very large databases, increasing this value may be recommended even if data purging takes longer.
  • Small Operation Step to purge old data: Number of rows that pandora_manage.pl processes in a single SQL query. This means that for each time block defined by the Big Operation Step to purge old data parameter, a maximum of 1000 records will be purged with each query (using the default value). A higher value implies larger queries, which means fewer but heavier operations. In overloaded systems, it may be advisable to reduce this value, even if data purging takes longer. The default and recommended value is 1000.
• Graph container - Max. Items: Field where the maximum number of items in the graph container view is defined.
• Events response max. execution: Field where the maximum number of events that can execute the mass operation of Event Responses is defined.
• Row limit in csv log: Row limit for the log in CSV format.
• SNMP walk binary and SNMP walk binary (fallback): When SNMP bulk walk is unable to request V1 SNMP, this option will be used instead (default snmpwalk, slower).
• WMI binary: Executable file to be used for WMI queries, default is pandorawmic.
• Rows limit for SQL report item PDF: Limits by default to a maximum of five thousand lines to avoid overloading hardware capabilities where the PFMS server is executed. If zero is set, no limit is applied, use with caution. In the case of the Command Center, the sum of the value configured on each node will be displayed.

Agent SNMP Interface Wizard defaults

To complete the SNMP configuration from the previous section, the default values to use for the different modules in the SNMP interface wizard can be set.

Important notes:

• Style template: To add new themes, a CSS file must be added to the directory:

  …/pandora_console/include/styles

• Edit custom css: Pandora FMS is installed without the custom.css file, which (if it exists) is the last to load among all the CSS files. To change the CSS classes (default in the PFMS Web Console), this file, if it doesn't exist, will be automatically created by an admin user (by clicking the button) and will remain unchanged during each PFMS version update. A practical use is to redefine each CSS class:

.message-welcome {
     font-size: 40px;
     font-weight: bold;
     color: #4CAF50;
     text-transform: uppercase;
     font-family: Arial, sans-serif;
}

This will produce the following change in the welcome message:

• Status icon set: In the case of users with color blindness, these can be replaced with other conceptual icons that allow distinguishing the states differently.
• Custom favicon: It must be in .ico format and its dimensions must be 16 by 16 pixels for it to work correctly. Icons can be added for selection in the folder:

  …/pandora_console/images/custom_favicon

• Custom documentation logo and Custom support logo: Icon for the link to documentation and support on the login screen. If left blank, no icon will be displayed. The path to upload more icons is:

  …/pandora_console/enterprise/images/custom_general_logos/

• Product name and Copyright notice: By default, the product name is Pandora FMS, however, the user is given the option to perform a rebranding and change it to another string of text to have a personalized version.
• Background opacity % (login): Allows specifying an opacity percentage (default 30%) on the login screen.
• Disable helps: Disables the help icons (links to this documentation). Tips (quick help) are always maintained.
• Automatically hide submenu: When this option is activated, the sidebar menu is minimized.
• Random background (login): If no wallpaper is configured for the login screen (see Custom background logo), when this option is activated, it will randomly display one of several graphic files stored in:

  …/pandora_console/images/backgrounds/random_backgrounds

The following tokens for alternative configuration for rebranding are stored as comments (commented) in the config.php file
to retain configuration in case of database failure:

//
 ----------Rebranding--------------------
// Uncomment this lines and add your customs text and paths.
// $config["custom_logo_login_alt"] ="login_logo.png";
// $config["custom_splash_login_alt"] = "splash_image_default.png";
// $config["custom_title1_login_alt"] = "WELCOME TO Pandora FMS";
// $config["custom_title2_login_alt"] = "NEXT GENERATION";
// $config["rb_product_name_alt"] = "Pandora FMS";
// $config["custom_docs_url_alt"] = "http://pandorafms.com/manual/";
// $config["custom_support_url_alt"] = "https://support.pandorafms.com";

• Block size for pagination: Field where the size of the pagination of items (events, alerts, etc.) is chosen. Default value: 20.
• Click to display lateral menus: This parameter will configure if the sidebar menu is displayed when clicked (left mouse button) or when the mouse is hovered over it.
• Paginated module view: Enable pagination in the module listing.
• Display data of proc modules in other format: proc type data represent binary states of a module. They are recorded as numbers in the database, but could also be represented descriptively with an identifier for each of the two states. Activating this option uses this second representation method.

1. Display text when proc modules are in OK status: When the Display data of proc modules in other format option is activated, this text appears in place of the number when the module is in an OK state.
2. Display text when proc modules are in critical status: When the Display data of proc modules in other format option is activated, this text appears in place of the number when the module is in a critical state.

• Service label font size: Default font size for services.
• Space between items in Service maps: Distance (in pixels) between two items in service maps. To avoid overlaps, this value should be greater than 80 pixels.
• Tabs menu: By default, shows icons and a contextual menu for the main agent view in the Web Console. The other two options (icons only or contextual menu only) combine both options if there is not enough screen space.
• Keyboard shortcut filter menu: Allows changing the keyboard shortcut for the sidebar filters in views, if applicable. Works only with lowercase letters.

• GIS Labels: Enable labels with the agent name on GIS maps. It is advisable to disable this option when there are many agents on a map, as this makes it more readable.
• Default icon in GIS: Set of default icons for agents on GIS maps.

Important notes:

• Value to interface graphics: Name of the units for the interface charts, default is Bytes.
• Data precision: Number of decimals to show in reports and visual consoles. It must be between 0 and 5.
• Data precision in graphs: Number of decimals to show in the charts. It must be between 0 and 20.
• Number of elements in custom graph: To limit the number of legends in combined graphs. Consider also reducing the width of the legends, making them concise and as short as possible. The combined charts that respond to this token are of the type:

1. Line.
2. Area.
3. Vertical bars.
4. Horizontal bars.
5. Stacked.

• Chart fit to content: There are charts whose values are percentages and the chart's top exceeds the maximum value of one hundred. You can configure the charts to stop adding a proportional upper margin by enabling this option.
• Percentile: Displays a line with the indicated percentile in the charts. The default value is 95.
• The Graph TIP view parameter indicates if TIP charts will be displayed:

1. None: The TIP option for the chart setup will be disabled (default option).
2. All: The TIP option for the chart menu will be enabled.
3. On Boolean graphs: The TIP option will only be activated in the menu for true/false type graphs.

• Graphs font size: Field where the font size used by PFMS for the graphs is selected.
• Show unit along with value in reports: Displays units alongside the module value in reports.
• Truncate agent text at end and Truncate module text at end: When enabled, truncates the agent and module names at the end and adds an ellipsis (default behavior is to truncate in the middle) for the section Operation → Monitoring → Views.
• Agent text size: When the agent's name is too long, it is truncated in some sections of Pandora FMS to show only the first characters (default values: 18 characters for small font size and 50 characters for normal size).
• Module text size: When the module's name is too long, it is truncated in some sections of Pandora FMS to show only the first characters (default values: 25 characters for small font size and 50 characters for normal size).
• Description text size: When the description is too long, it is truncated in some sections of Pandora FMS to show only the first characters (default value: 60 characters).
• Item title text size: When the title is too long, it is truncated in some sections of Pandora FMS to show only the first characters (default value: 45 characters).

• Default cache expiration: This section defines how often the cache of the element's status is cleared, and therefore, how often the status of each is recalculated individually.
• Default interval for Visual Console to refresh: This interval will only affect the visual console pages, setting how often they will automatically refresh.
• Type of view of visual consoles: Dropdown to indicate whether to show the favorite visual consoles in the menu.
• Number of favourite visual consoles to show in the menu: To avoid overlap and help with web console performance, this token limits the number of favorite consoles displayed in the sidebar menu.
• Default line width for the Visual Console: Line width in the visual consoles. Although this option can be changed individually for each line in the visual console, the default value here is 2.
• Visual console default text margin (em): Default is 1 em, allows you to increase or decrease the label margin for text elements in Visual Consoles that use it (Static image, etc.).
• Lock screen orientation when viewing on mobile devices: In the mobile console, prevents the screen from being rotated according to the motion sensor.
• Display item frame on alert triggered: Allows hiding an orange frame when elements Static image, Simple value, Icon, Group in the Visual Consoles have an alert triggered. Enabled by default.

• Show report info with description: Description of custom report information. Applied to all reports and default templates.
• Front page for custom reports: Front page for custom reports. Applied to all reports and default templates.
• PDF font size (px): Font size, in pixels, for PDF files.
• HTML font size for SLA (em): Font size for SLA reports (only HTML). It is a relative measure called em which equals the number of times the chosen font size in pixels.
• Graph image height for HTML reports: Height in pixels of module or custom graphs in reports (only HTML).
• Interval description: Shows the time interval description in short or long form. A long description (Long) is, for example, “10 hours, 20 minutes, 33 seconds”; a short description (Short) is “10h 20m 33s”.

The other fields allow you to choose a custom logo and modify the header, footer, and cover page (macros can be included).

• Number of favorite services to show in the menu: Maximum number (between 1 and 25) of favorite services that can be shown in the respective submenu.

• Show only the name of the group: Will show the group's name instead of its icon.
• Date format string: Field where the date and time format as defined by PHP is set; to add the timezone T must be used.
• Show empty groups in group view: Allows displaying empty groups in the group view.
• Visible time of successful notifications: Time to pass in seconds to display the notifications.
• Decimal separator: Decimal separator to use in reports.
• Interval values: Customizes the time values (seconds, minutes, etc.) that the Interval field will take in Pandora FMS forms (except for the event comment view).
• Timestamp, time comparison, or compact mode: Defines which date and time is used, the system timestamp (Timestamp in rollover), a comparison with the database (Rollover comparison), or in compact mode (Compact mode). This is useful when the database is on a system different from where the web console is located.
• Custom value post processing: Custom conversion values for post-processing. Updates a database table for custom unit conversions. If you mistakenly add an incorrect numeric value, select it in the Delete custom values list and delete it with the Delete button below, then re-add the custom conversion value.
• Module units: This option allows you to define the unit of data that modules will collect.
• CSV divider: Character or set of characters used to separate data when exporting to CSV.
• CSV decimal separator: Symbol to use as the decimal separator when exporting to CSV.
• Data multiplier to use in graphs/data: Value by which the displayed data will be multiplied to represent them in the graphs. This is useful if the value unit is bytes; for other conversions, use Custom value post processing.
• Hide general stats for non admin users in tactical view: In Tactical View, all available information is displayed by default. By enabling this option, only users with superadmin access will continue to have access to all information, while non-admin users will see it filtered.

Both the incoming connection for Pandora ITSM and the incoming connection for Pandora FMS must be configured to ensure bidirectional communication.

• URL to Pandora ITSM setup: Web address or IP address to connect to the Pandora ITSM API, in a format similar to:

  http://192.168.1.20/XXX/api/v2

• URL connect to API Pandora FMS: URL to connect to the Pandora FMS API, by default it takes the one set in the token Public URL, and if not set, it will use the one in config.php.
• Test buttons: Each one will check the connection from Pandora FMS to Pandora ITSM and vice versa.
• If the connection tests are successful, Pandora ITSM will take the PFMS agents and convert them into inventory objects, and the incident management in PITSM will be available from PFMS.

This functionality is installed by default, and the only additional configuration required is to allow the connection in the installed firewall and add the port number 8080.

The IP address or just the URL (without http) of the PFMS Web Console and the port number to be used, 8080 by default (connection must be allowed in the corresponding firewall), should be specified.

You can enable the connection via SSH (Enable SSH method) and/or Telnet (Enable telnet method). You can then test and check the connection with the corresponding Test buttons.

When saving the values with the Update button, QuickShell will be executed.

If SSL certificates are available, it is recommended to encrypt the transmission of connections to strengthen security.

First, you must have configured the basic values and checked normal connections, without any encryption.

Then, to encrypt the communications (Use SSL for SSH and/or Telnet), the following configurations must first be made:

• SSL certificates must be available in the Pandora FMS Web Console.
• These certificates must have read permissions for the Apache web server.
• Add the following TLS/SSL options to the file /etc/pandora_gotty/pandora_gotty.conf (replace the path and filename for each parameter with the values to be used):

/etc/pandora_gotty/pandora_gotty.conf

//Pandora GoTTY config file

(…)

// [bool] Enable TLS/SSL
enable_tls = true

// [string] Default TLS certificate file path
tls_crt_file = "/path/.cert.crt"

// [string] Default TLS key file path
tls_key_file = "/path/key.key"

// [bool] Enable cliente certificate authentication
enable_tls_client_auth = false

// [string] Certificate file of CA for client certificates
tls_ca_crt_file = "/path/ca_cert.ca.crt"

(…)

With all this ready, finally enable Use SSL in SSH and/or Telnet, save with the Update button, and check again with the respective Test buttons.

• Graphviz.
• Snmpget.
• Traceroute.
• Ping.
• Nmap.
• Dig.

These utilities are generally already installed with the operating systems; if necessary, they should be installed additionally (Dig can be installed with apt install dnsutils on Ubuntu and dnf install bind-utils on RHEL and Rocky Linux environments). By default, the system uses the default paths on the operating system used (although they may not be displayed), and these can be changed in this section of the PFMS general configuration.

Additionally, custom commands can be defined using macros to interact with Pandora FMS agents. When adding the macro _address_, the agent's IP address will be used when executing the command.

Each user can set their own user settings with the token Show usage tips at startup.

Through the Profile classification established in PFMS, welcome tips in the list in Profile can be configured, and depending on the profile allowed for each user, they may or may not be able to see them.

Then, in this section, you can check the status of the license, request validation (button Validate) in case of reinstalling a Pandora FMS instance, or request a new license (button Request new license).

By clicking the Show agent usage detail button, you can view the total number of agents (with the option to filter by enabled agents) as well as subtotals categorized into three main categories.

By clicking on advanced options (Advanced options), you can adjust the following parameters:

• Agents interval: Five minutes, default value.
• Generate historical data for all agents: When enabled, historical data will be generated for the agents to be created, with the number of days specified in the Days of historical data to insert in the agent data field (15 days by default).
• Create services: Allows creating services.
• Create network maps: Allows creating network maps.
• Create GIS maps: Allows creating geographical location maps.
• Create custom graphs: Allows creating custom graphs.
• Create reports: Allows creating reports.
• Create visual consoles: Allows creating visual consoles.
• Create dashboards: Allows creating dashboards.
• Traps target IP: IP address for the SNMP traps (127.0.0.1 by default). All demo SNMP traps are generated with version 1.
• Traps community: Community for SNMP traps (public by default).
• Tentacle target IP: IP address for sending data via Tentacle protocol (127.0.0.1 by default).
• Tentacle port: Port number for the Tentacle protocol (41121 by default).
• Tentacle extra options: Tentacle protocol parameters.

By clicking the Create demo data button, all selected options will be introduced. While the demo environment is being generated, you will see a progress bar and the status of the creation of each type of element once completed. Depending on the number of agents selected, this may take more or less time.

When PFMS is installed, the following options will be available:

• Documentation: To access these documents (https://pandorafms.com/manual).
• Get support: To report and get help on any topic related to Pandora FMS (https://support.pandorafms.com/itsm). Suggestions are welcome.
• Module library: Essential link to keep Discovery PFMS items up-to-date and the plugins (https://marketplace.pandorafms.com/).

• In the initial view, a News Board section will be added with all the current messages, as you can set an expiration date for each of them.
• The other way, intended only for very important messages, is a modal window that will appear when the user logs in to the Web Console and will close when the OK button is clicked. Use with discretion because it will be shown every time the user logs in.

To create a news item, click Add, write the subject or title in Subject, select the group that will receive the announcement, and set the expiration date. If you select Modal window, the news will appear in a pop-up window that the user must read and close.

• Download the files you want by clicking on the name of each one.
• Navigate through the directories, these are identified with the icon . You can also create subdirectories in them.
• Upload files by clicking on the icon , these image files will be identified with the icon (only SVG, GIF, PNG, and JPG formats are allowed).
• You can also delete some files that have the icon , as the rest are system files used by the PFMS Console.
• A directory can only be deleted if it is empty.
• If you want to customize the images in the Visual Consoles, four different images are required, one for each state, using a special naming convention for those images:

Where each state can be:

• <image_name>_bad.png critical.
• <image_name>_ok.png normal.
• <image_name>_warning.png warning.
• <image_name>.png unknown.

Once its usage has reached the maximum, almost all its components can be exported and added to Pandora FMS in a file with the JSON format and the .mini extension.

In this summary of imported agents and modules, you can click on each one, and it will open in a new browser window. If there is an issue during this process, it will be notified with the icon , and by clicking there, you can get more details.

• In the Filters section, you can choose from the dropdown list in Path backups the location of available backups. Press the Search button to refresh the list of backups.
• You can download backups to your local machine using the corresponding button.
• You can delete backups using the corresponding button.
• To restore a backup, press the corresponding button.

Note: Managing visible extensions adds or removes items from the left sidebar menu of the Web Console.

For each listed extension, it can be disabled by clicking the icon corresponding to each extension. Once disabled, it will be moved to the end of the list.
You can also delete an extension with the corresponding button .

If the extension uses the ''gpolicies'' component, the option Upload Enterprise extension must be selected. Once the file is chosen, click the Upload button to complete the process. The new extension will be shown in the Extension manager view.

/var/www/html/pandora_console/log/console.log
/var/log/pandora/pandora_server.log
/var/log/pandora/pandora_server.error

If you have a new operating system, you can add it to the default list that comes with the PFMS installation. To do this, click on the Create OS button, enter the appropriate name, and choose an icon from the list. If you have a new icon in JPG, JPEG, PNG, or SVG format, use the Upload icon button, store it in PFMS, and then search for it by name.

Finish the process of creating an OS by clicking the Create button.

From version 774, PFMS has enabled the obsolescence functionality, which works with inventory to generate reports with filters for monitored devices.

By default, the time period is the last 24 hours, and the available export formats are:

• Data Table: A special PHP language format that displays the agent name, module name, data value, and data collection date and time on the screen.
• Average per hour/day: If the data is numerical and can be averaged, it will be displayed on the screen in a manner similar to the Data table option.
• CSV: Comma-delimited fields file format.
• MS Excel: Spreadsheet file format for Microsoft Excel®.

In the Management view, select the group or groups that will download this resource and browse your local storage to upload the file. If you need this resource to be public (only for those who know the link), check the Public link box. A maximum of 200 characters can be added in the description.

Click the Add button and wait for the upload process to complete. In the Operation view tab, for each listed item:

• To share the public link of each file, click the icon to copy the web link.
• If another operator of the same PFMS Console is on a different machine, they can download a resource by clicking the button.
• If the file is no longer needed, it can be deleted with the corresponding button.

←Back to Pandora FMS documentation index