Pandora:FAQ

From Pandora FMS Wiki

Jump to: navigation, search

Many of following questions has been asked in our public forums [1] or in our development mail list [2], if you don't find here an answer for your problem, try to check out there.


Contents

Frequently Asked Questions (FAQs)

How can I install?

How can I upgrade from version 3.x.y to 3.x.z ? (Same major version upgrade)

If you are installed, the "official" released version, and you know there are updates in your same major version, they will be always updated in the Subersion Pandora code repository. To update your version, just install a subversion client software, and execute following command:

svn co https://pandora.svn.sourceforge.net/svnroot/pandora/trunk

That will download the last development version (Trunk), today is 3.1 (tomorrow, will be 3.2), if you want to download latest updates from a specific stable version, for example 3.0, execute:

svn co https://pandora.svn.sourceforge.net/svnroot/pandora/branches/pandora_3.0

To update, just follow the procedure described in documentation, to upgrade from the same version, as written in http://openideas.info/wiki/index.php?title=Pandora_3.0:Documentation_en:Anexo_Upgrade

You have more information about development version and upgrades from the code repository in http://pandorafms.org/index.php?sec=community&sec2=development&lng=en

My old AIX (4.3, 5.1) don't have Perl 5.8, I cannot run agents

A: You can install part of the IBM toolbox, containing the Perl 5.8 packages. Download them from ftp://ftp.software.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/perl/

Note that some AIX are bundled with Perl v5.6: This version is able to run Pandora FMS agents, so you don't need to install Perl 5.8

My old HP-UX (11.0, 11.11) don't have Perl 5.8, I cannot run agents

A: You can install the official cpan packages for Perl 5.8 in HPUX. Download them from http://mirrors.develooper.com/hpux/downloads.html

How can I install Jpgraph?

R: You should unzip dthe Jpgraph downloaded files in directory ./reporting/jgraph of the Web console

How can I install the GD libraries in Windows?

A: PHP for Windows includes the GD library by default but maybe they are not activated. Edit your php.ini file (usually in c:\winnt\php.ini or c:\windows\php.ini) and add the next line to the file:

extension=php_gd2.dll

Restart your server to make the changes to take effect.

How can I install PEAR at Windows?

R: The PHP version for Windows comes already with PEAR. Yo only need to make it work uncommenting the line that has include_path, deleting the «;» character

     ;include_path = ".;c:\php\includes"

in your php.ini and adding the path to PEAR, which is at the PHP directory. At the end, you will have something as:

     include_path = ".;c:\php\includes;C:\php\PEAR"

Remember to restart Apache.

For GNU/Linux you should install the php-pear packages, php-image-canvas and php-image-graph. You can find more information for systems based on Debian GNU/Linux in the Openideas.info.

I cannot access the Pandora Console installation web page in CentOS.

R: It is possible that even having the pandora_console folder properly located (/var/www/html/pandora_console) with the adequate rights (usr: apache - grp: apache - mod: 644) we cannot access the Pandora FMS Console installation web page. This could be a problem regarding having SELinux active with a strict policy, which prevents us from executing the php code of our Pandora.

In order to confirm it, we can check the apache error log and search for lines regarding the application of a SELinux policy in apache.

In this case, a workaround is to deactivate SELinux. This is done by editing the file /etc/selinux/config, changing SELINUX=enforcing by disabled:

# cat /etc/selinux/config
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#       enforcing - SELinux security policy is enforced.
#       permissive - SELinux prints warnings instead of enforcing.
#       disabled - SELinux is fully disabled.
SELINUX=disabled
# SELINUXTYPE= type of policy in use. Possible values are:
#       targeted - Only targeted network daemons are protected.
#       strict - Full SELinux protection.
SELINUXTYPE=targeted

# SETLOCALDEFS= Check local definition changes
SETLOCALDEFS=0

As it is marked in the comments, after editing the file, it is needed to restart to deactivate SELinux or use setenforce:

# setenforce 0

Remember to restart the Apache service.

perl-SNMP dependency in RHEL / CentOS / Fedora cannot be found.

R: For versions prior to RHEL6 or equivalents, perl-SNMP doesn't exist, so it would be needed to install the dependency net-snmp-perl.

Once this is done, please start your Pandora Server if you had forced the installation before, or install it and force the installation if it keeps asking for perl-SNMP.

For the CENTOS distribution How can I see the flash charts in Firefox

In addition to installing the rpm from the Adobe site, install the package repositories flash-plugin to work on firefox graphs: yum install flash-plugin.

How Can I do ?

How can I configure the email server for the alers kind email?

This is configured in the server,specifically in the file pandora_server.conf, you should restart the server after modifying the file to it gets the changes

How can I use PERL 5.8 in my old Solaris 8 ?

The best way is to install the BlashWave package s.There are many OpenSource packages in the Lastware last package system that works as for example

apt-get / yum / zypper system, recording the data repository and installing them on demand and solving dependencies. See more info at: http://www.blastwave.org/howto.html

How can I improve a fixed version with updates ?

For the last fixed version (2.x) the code is public and is available in the directory branches/pandora_2.x of our code repository. You can get it with the Subversion client using the following command:

svn co https://pandora.svn.sourceforge.net/svnroot/pandora/branches/pandora_2.x

You will only need to copy new files on the old ones. BUT please, make sure to do a backup of all (including the database) to be sure.

Same way, consider the convenience of using the Pandora Enterprise version [3] to update your system in an automatic way


How can I Start/Close a Windows service upon request from Linux (to execute with an alert from Pandora FMS)

You need an updated version of Samba (3.x) and a admin credentials to could access remotely (RPC call) to a Windows server. In this example we will use 192.168.50.121 as taget server, , "Administrator" como user y "pepe" as password. We want to work with a service called "PandoraFMSAgent" and see the complete list of services:

Get a process list:


net rpc service list -U administrador%pepe -I 192.168.50.121 
.
. full list


To see the status of one process:

 net rpc service status  PandoraFMSAgent -U administrador%pepe -I 192.168.50.121 

 PandoraFMSAgent service is running.
 Configuration details:

	Controls Accepted    = 0x5
	Service Type         = 0x10
	Start Type           = 0x2
	Error Control        = 0x1
	Tag ID               = 0x0
	Executable Path      = C:\Archivos de programa\pandora_agent\PandoraAgent.exe
	Load Order Group     = 
	Dependencies         = /
	Start Name           = LocalSystem
	Display Name         = Pandora FMS agent

To stop a process:

net rpc service stop  PandoraFMSAgent -U administrador%pepe -I 192.168.50.121 .
PandoraFMSAgent service is stopped.

To start a process:

net rpc service start  PandoraFMSAgent -U administrador%pepe -I 192.168.50.121 
Successfully started service: PandoraFMSAgent


I want to change the Ip of several modules at the same time, How can I do it?

I have a switch with 240 checks and my IP has changed. How can I change the IP of all the remote checks in a simultaneous way, without having to do it one by one?.

Use the Pandora SQL manager, introducing the SQL similar sentence (change the IPs 10.0.0.2 is the old one and the 10.0.0.1 is the new one:

UPDATE tagente_modulo SET ip_target = "10.0.0.1" WHERE id_target = "10.0.0.2";

How can I add mibs to Pandora FMS ?

Question: Does anyone knows how to load MIBS in pandora for the SNMP Walk feature? Answer: Pandora FMS does not manage SNMP directly. It is based on GNU/Linux Net-SNMP libraries that are managed by systems,so edit /etc/snmp/snmp.conf to define MIB loading.You should configure the Linux system which runs the PandoraFMS and add the MIBS file to the /etc/snmp/snmp.conf file(and restart apache) These are the directives /etc/snmp/snmp.conf for the MIB management:

mibdirs DIRLIST

specifies a list of directories to search for MIB files. This operates in the same way as the -M option - see snmpcmd(1) for details. Note that this value can be overridden by the MIBDIRS environment variable, and the -M option.

mibs MIBLIST

specifies a list of MIB modules (not files) that should be loaded. This operates in the same way as the -m option - see snmpcmd(1) for details. Note that this list can be overridden by the MIBS environment variable, and the -m option.

mibfile FILE

specifies a (single) MIB file to load, in addition to the list read from the mibs token (or equivalent configuration). Note that this value can be overridden by the MIBFILES environment variable.

How can I add sources to use them in the graphs and reports?

To add sources to Pandora it will be enough with copying them into the folder include/fonts.

More information at: http://www.openideas.info/wiki/index.php?title=Pandora_3.0:Documentation_es:Presentacion_datos#Typograf.C3.ADa_e_idiomas

How to run the PandoraFMS agent in the Start system

Q: I have installed the pandora_agent in my Linux system and I want that it runs every time that I start the system. How can I do it automatically? A: The first thing you should do is to copy the pandora_agent_daemon at/etc/init.d

After, if you want that the pandora_agent_daemon starts when running your system, you only need that:

ln -s /etc/init.d/pandora_agent_daemon /etc/rcX.d/S99pandora_agent_daemon

Where the X es el run level that you are starting

After, be sure that your pandora_agent_daemon is correctly off when you switch off.

ln -s /etc/init.d/pandora_agent_daemon /etc/rc0.d/K99pandora_agent_daemon
ln -s /etc/init.d/pandora_agent_daemon /etc/rc6.d/K99pandora_agent_daemon

How delete all traps from the trap console

Q: I want to delete all the traps from my traps console without going sheet by sheet.Is it possible to do it also from an specific date?. A: To delete all traps that are in the traps console, you should execute, from the DB Interface extension, the following sql sentence

DELETE FROM ttrap;

To delete all the previous traps previous to10 July 2010 that there are in the traps conseole, you should execute, from the DB Interface extension, the following sql sentence:

DELETE FROM ttrap WHERE timestamp < '2010-07-10 00:00:00';


How can I recover access to console if I forgot the password for my admin user ?

You will need to create another admin user to change the password for other users. In order to do that, open a shell in your Pandora FMS server and execute following command:

/usr/share/pandora_server/util/pandora_manage.pl /etc/pandora/pandora_server.conf --create_user admin2 none 1

This will create a new administrator user called "admin2" with password "none"

Compatibility with Standards

Does Pandora FMS fulfills PCI/DSS ?

The PCI DSS rule implies several requisites:

1. Safe traffic through coding and certificates. 2. Systems of Double access authentication 3. Security policies in the user management. 4. Possibility of audits in all fields and actions on the monitored elements 5. Audit data transfer to external logs managers.

1. Pandora FMS, at all levels(user operatin, communication between components) supports SSL encode and certificates in both extremes:

2. Double authentication. It is possible to deploy a double authentication system. The first one, at access level (HTTP) integrated with any OPensource or commercial token system. The second authentication. The second authentication, at an application level is managed by Pandora, that can be authenticate against LDAP or AD same way, or do it locally.

3. The user management is delimited by policies both at user profile level as operation visibility profile level defined as the Extended ACL system of the Enterprise version.

4. Pandora FMS, in its Enterprise version audits all the user action, including the information about the changed or deleted fields. It also includes a validation system with signature of these registers.

5. These audit logs are availables for their export through SQL and they allow to integrate in a third source for higher security, in time near to real one.

Terminology

What is a Timestamp?

A timestamp is a character sequence that informs about the date and hour in which an specific event toke place, for example when getting a data from an agent.

What means SVN?

It means Subversion, which is the control system software of versions that is used in the Pandora FMS development.SVN is the name of the command line tool.

Global changes / Administration

I Want to change the IP of a lot of modules at once, how can I do ?

I've a switch with 230 checks...for some reason you change the switch IP, and thus you need to change the IP in the Main Agent view...and it's very likely you are going to want to change the IP of all the remote checks.

Change the IP address of the agent manually and alter the module configuration at once using the SQL Manager and the following SQL sentence:

UPDATE tagente_modulo SET ip_target = "10.0.0.1" WHERE id_target = "10.0.0.2";

Database

I lost my Mysql root password, how can I recover it ?

Do so:

service mysql stop

wait until MySQL shuts down. Then run

mysqld_safe --skip-grant-tables &

then you will be able to login as root with no password.

mysql -uroot mysql

In MySQL command line prompt issue the following command:

UPDATE user SET password=PASSWORD("none") WHERE user="root"; FLUSH PRIVILEGES;

Stop the instance of running mysqld

       kill `ps aux | grep -e "--skip-grant" | grep -v grep  | awk '{ print $2 }'`

Restart the mysql service normally

       service mysql start

At this time your root password is reset to "none" and MySQL will now know the privileges and you'll be able to login with your new password:

mysql -uroot -pnone mysql


Using properly the mysql and mysqldump from command line

Q: I attempted to use several references from documentation, but there is an error in the document. In several locations you indicate a user name of "root, but the default sql user name in your configuration file is "pandora".

A: Always check your current credentials en /etc/pandora/pandora_server.conf. In some enviroments credentials could have changed. You should be able to access MySQL Pandora FMS database always with your Pandora user.

By default, database should be called "pandora", and user "pandora", password will be a random string. This means that commands should be like this:

To enter in mysql console:

mysql -u pandora -D pandora -p
<enter pass in console>

and to do a SQL dump (backup):

mysqldump -u pandora -p pandora > file
<enter pass in console>

Repeated data is not inserted in the database

I am having some problem with Pandora's data server. For data that has similar value as previous data, my XML data got ingested by the data server but not inserted into the DB. I wonder this is a normal behavior of Pandora's Data Server. How can I change that? Is there any config file to configure that ?.

This is the "normal" behaviour of Pandora FMS. See more details in the documentation chapter called "Pandora Engineering" about how Pandora FMS collect information and stores in the database. You can "avoid" the automatic compression using ASYNC modules (but only from Pandora FMS 3.2 or higher, prev. versions do the same for async and for standard modules).

How delete all traps in the traps console

Q: I want delete all traps in the traps console. Is posible to do it from a certain date?.

A: To delete all traps in the traps console, you must run, in the DB interface extension the following, the following sql sentence:

DELETE FROM ttrap;

To delete all traps prior to July 10, 2010 in the traps console, you must run, in the DB interface extension the following, the following sql sentence:

DELETE FROM ttrap WHERE timestamp < '2010-07-10 00:00:00';

Broken table

This error display some SQL error messages like this Table './pandora/tserver' is marked as crashed and should be repaired, for example:

SQL error:  Table './pandora/tserver' is marked as crashed and should be repaired  ('SELECT COUNT(id_server) FROM tserver WHERE 1 = 1 LIMIT 1') in /srv/www/htdocs/pandora_console/include/db/mysql.php on line 81

SQL error: Table './pandora/tserver' is marked as  crashed and should be repaired ('SELECT COUNT(id_server) FROM tserver  WHERE status = 1 AND keepalive > NOW() - INTERVAL 15 MINUTE') in /srv/www/htdocs/pandora_console/include/db/mysql.php on line 81

This problem happens when MySQL server is not switched off properly.

To solve it enter in MySQL prompt and type:

repair table tserver

The Pandora Console installation has mysql errors as "BLOB/TEXT column '<column>' can't have a default value

From the 5.6 version of MySQL have configured by default "STRICT_TRANS_TABLES" and this mysql conf token made this kinds of problems.

For to avoid this problem you must follow this steps:

  • edit the my.cnf file (configuration mysql file), it is in /etc/my.cnf or /usr/my.cnf or /usr/local/mysql/my.cnf
  • set the token
sql_mode=NO_ENGINE_SUBSTITUTION,STRICT_TRANS_TABLES
as
sql_mode=NO_ENGINE_SUBSTITUTION
  • restart the mysql server
/etc/init.d/mysql restart

Networking

Recon doesnt detect my network topology correctly

If you're executing Pandora FMS under a virtual enviroment and you're using a "shared network" (some times called NAT or Host network), the network is not "real" and cannot be calculated. This is easily tested by doing a simple traceroute from commandline, for example:

traceroute -n google.com

You should see 7-15 steps until reach the final endpoint in a shared network you will only see one step.

Use a bridged/real network and that will work.

Si ejecuta Pandora FMS en modo "network bridge" o en un host real, le funcionará correctamente.

Problems with SNMP and Debian / Ubuntu

In recent Debian / Ubuntu versions (this is written in April 2011), SNMP agent comes with a non-enabled MIB tree, that means, SNMP agents will not translate or understand any "word" of MIB address, only will understand numeric OID, thats a problem for most SNMP software, so you will need to re-configure it. Two steps:

  1. Install package mibs-downloader
  2. Edit /etc/snmp/snmp.conf and remove all the uncommented lines (or comment them).

SNMP Trap console doesnt work and log says: "couldn't open udp:162"

This happen because the snmptrapd system daemon has started before Pandora FMS snmptrapd daemon, and has the port blocked (in use).

Stop the sistem daemon:

/etc/init.d/snmpd stop

(Could be different in other systems different than suse).

Restart pandora server

/etc/init.d/pandora_server restart

Be very useful to delay the system SNMP startup after the Pandora FMS server start, to avoid this conflict in the future.

Kernel message "possible SYN flooding on port 41121. Sending cookies"

This problem related with having a lot of TIME_WAIT connections (netstat -an | grep TIME_WAIT | wc -l > 20000)

Solution, tune up your kernel with these parameters

echo 32000 > /proc/sys/net/ipv4/tcp_max_syn_backlog
echo 30 >  /proc/sys/net/ipv4/tcp_fin_timeout

Do not use it with load balancing / clustering enviroments:

echo 1 > /proc/sys/net/ipv4/tcp_tw_recycle


Boolean ICMP Network module showing critical status while conectivity with the agent it's being right

This problem appears when the first package from the ping ejecution doesn't achieves the recipient.

If icmp_checks parameter is set as 1 inside the Server Configuration File(Default path: /etc/pandora/pandora_server.conf) it will show critical value.That is why it only looks foward the first attemp from the ping command. Module status would be also critical if icmp_checks value is over than 1,the reason is that this parameter only executes "independent" pings so check results would always be wrong.

Solution would be using a script which executes a ping sending as packages as we want on its execution.So if a machine doesn't answer to the first package we should fix it modifying the script with more than 1 number of packages so the result will be succeed.


Using the pingcheck.sh script would bring us the solution.It would deliver 1 if the machine answers or 0 if it doesn't.

Script code:


#!/bin/bash

if [ -z "$1" ]
then
echo "Syntax:"
echo " "
echo "pingcheck.sh <count> <timeout> ip_address"
echo " "
exit
fi

COUNT=$1
TIMEOUT=$2
IP=$3

ping -c $COUNT -W $TIMEOUT $IP 2> /dev/null > /dev/null
if [ $? == 0 ]
then
echo 1
else
echo 0
fi

Script execution must have this format:

pingcheck.sh <count> <timeout> ip_address

In order to use this script we should follow the following tips:

-Create a file using the script code on this path:

/usr/share/pandora_server/util/plugin/pingcheck.sh

-We allow it to be executed:

# chmod +x /usr/share/pandora_server/util/plugin/pingcheck.sh

-Then,we build a new module plugin from the menu: Manage servers > Manage plug-ins inside Pandora Web Console.

File:pingcheck.png

Name: PingCheck
Command: /usr/share/pandora_server/util/plugin/pingcheck.sh

-Finally we enter into the module configuration inside the agent where the issue is happening and we add a new Plugin Server Module. After this,we choose the plugin and we set these parameters for the check in the Plug-in Parameters field:

2 5 ip_address

Latency modules do not work with the server ICMP Enterprise Enabled

Sometimes we may find that having ICMP Enterprise Server enabled, latency checks do not work properly. To this, we must check if nmap correctly returns the SRTT, with this:

nmap -nsP -PE -oX - www.pandorafms.com | grep srtt

The output should indicate something like this:

<times srtt="181998" rttvar="181998" to="909990" />

Web Server with SSL modules not support multi-threads in certain versions

If you have enabled web server with more than one thread and are monitoring several sites with SSL support, it is likely that the fall down pandora_server with a memory problem because the library Net::SSLeay that are used for monitoring SSL not support multi-threads under version 1.42.

So in the case we are monitoring SSL sites with an earlier version, provided the parameter

web_threads 1

Agents

There's a memory leak in Pandora FMS Agent 4.x process under RHEL/CentOS/Fedora

If you are using a RHEL/CentOS 5.x/Fedora platform, you might notice a memory leak in Pandora Agent process under versions 4.x.

The problem resides in a bug inside the Threads Perl library in the versions packaged by default (5.8.8 i.e) which affects these distros and is not definitely fixed until versions 5.13.9 or above.

There are multiple choices to solve this problem:

a) Either upgrade your OS/Perl version...

b) Or comment the following lines inside /usr/bin/pandora_agent:

eval {
       local $SIG{__DIE__};
       require threads;
       require threads::shared;
       require Thread::Semaphore;
};
if (!$@) {
       $Sem = Thread::Semaphore->new;
       threads::shared::share (\$Xml);
       threads::shared::share (\$Sem);
}

This would let us execute Pandora Agent without agent threading support, thus avoiding the memory leak inside Threads library.

In the last case, please don't forget to disable the agent_threads parameter token inside /etc/pandora/pandora_agent.conf.

File collections don't work

If you are using a UNIX/Linux platform, first of all check you have unzip command installed because is necessary to use file collection. Furthermore the user that executes Pandora FMS agent must can execute unzip command from its path.

After install unzip package you must check the content of collections folder. The collections folder is in:

<pandora_agent_path>/collections

By default the path is:

/etc/pandora/collections

You must delete each *.md5 file that doesn't have a folder with the same name in collection folder. The agent will download the collections in the next execution cicle.

If you are using Pandora FMS agent for Windows platforms first of all check that you can execute unzip command from path. Unzip command is installed with Pandora FMS agent so you don't need to install it.

After that you must check collection folder to ensure always si right. The path of collection folder is:

<pandora_agent_path>\collections

By default the path is:

C:\Archivos de Programas\pandora_agent\collections.

You must delete each *.md5 file that doesn't have a folder with the same name in collection folder. The agent will download the collections in the next execution cycle.

Windows Service PandoraFMSAgent cannot be initialized

1. Check if you have installed the Pandora FMS Agent with Administrator rights and if its service's got SYSTEM rights. Otherwise, this service won't work.

2. Make sure there's no PandoraAgent.exe file located in the same path where the Pandora FMS Agent installer is located. Otherwise, the service will point to that binary file instead of the one installed by default in the pandora_agent folder, and an error which doesn't allow the Agent to initialize will be generated, since that .exe isn't in the same path of the rest of the needed Pandora FMS Agent files.

Recommendations for use of characters in agents names

For proper operation of all functions performed PandoraFMS with their agents / modules, it is recommended not to use characters such /,\,|,%,#,&,$. When dealing with these agents, they can create confusion with the use of system paths or run other commands, causing errors on the server.

Spaces in Agents / Brokers names on Windows

For a Windows agent can be generated in the Pandora with the full name, if it contains any spaces, the configuration of the agent name must be enclosed in quotes, for example: agent_name "Windows 2003"

Alerting system

I try to configure an alert but I get "N/A" value on macro _data_

This is because you're forcing the alerts manually. Try to wait and get a real data. Any forced alert puts "N/A" in the data value.

Module / Plugin execution

(Windows) How can I execute commands with a different user than SYSTEM ?

You need an external way to execute commands using privileges from other user. Windows command RunAS allow that, BUT, need to input the password for that user "interactively", so that is not useful for automate anything, so you need to use another tool, able to execute something passing as parameters user and passwords in the command line. CPAU tool does that exactly, it's a freeware tool and you can get from here:

http://www.joeware.net/freetools/tools/cpau/index.htm

Basic usage:

CPAU -u user [-p password] -ex "WhatToRun" [switches]
  user       User to log on as. Ex: user or domain\user
  password   User's password
  WhatToRun  What to execute

There is another tool with more options to crypt the password, and with more security options, for people very worried about put a password on the .conf file. This tool is called RunAsSSPC and you get it from here:

http://robotronic.de/runasspcEn.html


Using module_interval with plugins

When we decide to use the module_interval with plugins, we set in the XML plugin is formed to run with module_interval configuration like the one you have configured in the agent config.

In this way, we avoid that in the Pandora Console occur false states Unknown in this plugin modules.

Upgrade & migration problems

After a server upgrade / migration all network modules are unknown

That could be because a server name change, and if old server is not present in the server table. You need to "setup" manually your agents to use the new server. To avoid to edit one by one, you can use the SQL manager to configure all agents in a quick SQL command. For example, if your new server is called "linux-ppby" the SQL sentence will be:

update tagente set server_name = "linux-ppby" 

No need to restart the server, just wait a few seconds and modules will be processed again.

Another choice is to change the "Server" parameter in the massive agent edition option of the Massive Operation section by selecting all the migrated agents.

After upgrading to Pandora FMS 4.0 Pandora Server cannot start

After doing the migration to Pandora FMS 4.0, the following event could take place:

DBD::mysql::db do failed: Failed to read auto-increment value from storage engine at /usr/lib/perl5/PandoraFMS/DB.pm line 556.

Should you encounter this error after starting your Pandora Server, the following line should be inserted into your Pandora DB:

ALTER TABLE tsesion AUTO_INCREMENT = 1;

Error while executing the migration script from version 3.2 to 4.0

It could occur that we find the following error while executing the migration script in the open source version:

Error 1089 at line 184: incorrect sub part key; the used key part isn´t a string, the used length is longer then the ky part, or the storage engine doesn´t support unique subkeys

This line matches inside the script with:

ALTER TABLE 'tagente_modulo' ADD INDEX nombre ('nombre' (255));

It could happen that while migrating a database which has been migrated some more times from older versions, some columns don't have the expected type in the current migration process, ending up in an error.

In this case, we can check this with:

describe tagente_modulo;

If the column we're trying to change has the right type, this should be:

text NOT NULL DEFAULT 

Otherwise, if the column has a type varchar(100) and the varchar limit is lower than the index one (255), this generates a MySQL error.

The solution for this event is to insert the following line in the database:

ALTER TABLE 'tagente_modulo' MODIFY 'nombre' text NOT NULL DEFAULT ;

Once done, keep executing the script from the line you had the error.

If the following line (185) drops a SQL syntax error:

CREATE INDEX `module_group` on tagente_modulo (`id_module_group`) using btree;

This could happen due to your MySQL version, since in other machines with newer versions, this syntax is accepted.

However, the solution is as simple as changing the line to:

CREATE INDEX `module_group` using btree on tagente_modulo (`id_module_group`);

And once done, execute the script from this line.

Anyway, this line has already been modified and in future versions or fixes, this syntax will appear corrected already.

Will be the Database affected in future versions?

Yes, but it will keep compatibility in order that the older agents will continue working without problems. It will be not necessary reinstall the agents again when updating the server or the database. All database changes are managed using the provided migration scripts. See more about this in the chapter about upgrade in our documentation.

Problems with upgrading to the 5.0 version running the migration script

It is possible that after running the migration script 4.1 to 5 occur an error regarding a table treport_content

ERROR 1452 (23000) at line 266: Cannot add or update a child row: a foreign key constraint fails (`pandora`.<result 2 when explaining filename '#sql-867_1ba'>, CONSTRAINT `?sql?867_1ba_ibfk_1` FOREIGN KEY (`id_report_content`) REFERENCES `treport_content` (`id_rc`) ON DELETE CASCADE ON UPD) 

If this occurs, you will have to perform this query in mysql:

DELETE from treport_content_item WHERE id_report_content NOT IN (select id_rc from treport_content);

After this you have two options, comment all lines to 265 and re-run the migration script, or restore the database using the backup that we should have done before, run the previous query and pass the full migration script again.


Migrate from 4.1 to 5.0 pandora_server not start

In some cases there may be a problem when migrating from 4.1 to version 5 do not start the server with this error:

DBD::mysql::db do failed: Unknown column 'last_error' in 'field list' at /usr/lib/perl5/PandoraFMS/DB.pm line 811.

The solution is to manually add this query in Pandora's database.

ALTER TABLE `tagente_estado` ADD COLUMN `last_error` tinyint(4) NOT NULL DEFAULT 0;


After migrating to version 5.0 the Update Manager download updates from 4.1

It is possible that after upgrading to version 5.0 from an earlier version, the Update Manager configuration pointing to URL version 4, instead of version 5.

To solve this problem you need configure in Adminsitration > Extensions > Update Manager Settings > Update server path

/pandoraupdate5/server.php

Problems with VMware images

Problems with the VMWare Image, eth0 doesn't work

Q: The problem is, the interface eth0 cannot be found. So when i try to change the ip address it just doesn't work (sending me 'eth0: error while getting interface flags: no such device).

A: Cleaning cache will fix the eth0 issue. It is cause by MAC caching, when you copy vmware image.

  rm /etc/udev/rules.d/*.*

I download a corrupted/invalid version of the vmware/ISO image

Sometimes Sourceforge.net mirrors fails, try with a different download location link (Mirror) in sourceforge.net. All files has been tested and works fine. Several thousands of people have it running :-)

Fail runnning VMware virtual machine

There is an error detected with Pandora FMS' VMware image on VMware 4.1 systems. The error detected is the following:

Module DevicePowerOn power on failed. Unable to create virtual SCSI device for scsi0:0, '/vmfs/volumes/5113db7a-9a00a928-45ad-001a646a1c38/Pandora 4.0.3/Pandora_4.0.3_OpenSource_Appliance.i686-0.0.22.vmdk' Failed to open disk scsi0:0: Unsupported or invalid disk type 7. Make sure that the disk has been imported.

To solve this error just change the virtual disk format. To do this clone the disk using the following command

vmkfstools -d thin -i "Pandora_4.0.3_OpenSource_Appliance.i686-0.0.22-s001.vmdk" "Pandora_4.0.3_new.vmdk"

Now you can assign this new this called Pandora_4.0.3_new.vmdk to the virtual machine and it will start without problems.

Passwords of Centos VMWare Virtual Image

User: root

Password: pandora


Console User: admin

Password: pandora


Mysql User:root

Password: pandora

Not Classified

Inestability problems

If the installation of Pandora FMS falls from time to time, or some remote checks (network, plugins, WMI, Web monitors) sometimes give incorrect values ​​(for example, an ICMP check should give 1 and returns 0) or a remote check that inexplicably remain in unknown mode, may be due to the following causes:

1. Little memory. To use Pandora FMS on a production system should have at least 2GB. It can be used on systems with less memory, but you have to "tune" very well all the components, and even so, be limited to a very small environment, with very few threads / sub network and MySQL consuming very little memory.

2. Virtual environments. In some misconfigured virtual environments exist instability problems that occur when a lot of load on the real physical system. This can be seen in the system log (dmesg) as the pandora_server coredumps or MySQL.


Problems with virtualization (Virtuozzo)

Some agent falls without any reason can be explained because something is happening in the way Pandora works, specifically at /etc/init.d/pandora_agent_daemon.

In this case, the problem has been detected in systems with a virtualization infrastructure based on Virtuozzo, where are monitored both the hardware nodes and the virtual machines that runs above. As Virtuozzo does Software virtualization,the processes than runs in virtual machines could perfectly be seen doing one ps in the hardware node.

[root@xxxxxxx ~]# ps -Af | grep pandora_agent
root     20643 17147  0 Aug25 ?        00:00:08 /usr/bin/perl /usr/bin/pandora_agent /etc/pandora
root     22665 20918  0 Aug25 ?        00:00:08 /usr/bin/perl /usr/bin/pandora_agent /etc/pandora
root     22862 21033  0 13:13 pts/5    00:00:00 grep pandora_agent
root     23518     1  0 Aug25 ?        00:00:12 /usr/bin/perl /usr/bin/pandora_agent /etc/pandora
root     24839 31440  0 Aug25 ?        00:00:08 /usr/bin/perl /usr/bin/pandora_agent /etc/pandora
root     26703 24727  0 Aug25 ?        00:00:07 /usr/bin/perl /usr/bin/pandora_agent /etc/pandora
root     28677 16959  0 Aug25 ?        00:00:08 /usr/bin/perl /usr/bin/pandora_agent /etc/pandora
root     29524   301  0 Aug25 ?        00:00:08 /usr/bin/perl /usr/bin/pandora_agent /etc/pandora


When getting out the pid of the /etc/init.d/pandora_agent_daemon. through one ps for doing a kill-for example- what happens is that we get the identifier of the first agent listed between all that are running, that in statistics is hardly ever the one that we want-the one of the hardware node

When doing stop or restart of agents in the hardware nodes, in fact, we have been applying this order to one not specified agent of one of the virtual machines that runs above. When the command stop is fired on one machine, there is not problem, because the ps only see their own processes.


The solution is simply to rename the directory /etc/pandora for /etc/pandora_virt and to edit the file /etc/init.d/pandora_agent_daemon and replace the following line:


PANDORA_PATH=/etc/pandora

with

PANDORA_PATH=/etc/pandora_virt

With this, when you start and stop the process of the "real" machine, this will not affect to the virtual machine

How can I auto-refresh any section of the console ?

Just add

&refr=60

To the URL, and it will autorefresh the page each 60 seconds.

I want to generate my own XML, simulating data from an agent, why my XML doesnt work

The best option here, is just looking a real XML and try to imitate it. The most basic items are showed here:

A basic XML could be, for example something like:

<agent_data agent_name="testxml" timestamp="2010-09-06 22:10:00" version="1.0" os="Other" 
os_version="1.0" interval="300">
<module>
<name>5min</name>
<type>generic_data</type>
<data>73.3</data>
</module>
</agent_data>

A more advanced XML, with multi-data series, be like this one:

<agent_data agent_name="testxml" timestamp="2010-09-06 21:10:00" version="1.0" os="Other" 
os_version="1.0" interval="300">
<module>
<name>Multi Data Sample</name>
<type>generic_data</type>
<datalist>
<data>
<value>73.3</value>
<timestamp>2010-09-06 21:00:00</timestamp>
</data>
<data>
<value>13.3</value>
<timestamp>2010-09-06 21:05:00</timestamp>
</data>
</datalist>
</module>
</agent_data>

Just put a filled called xxxxxxx.data in the Pandora FMS incoming directlry and will be processed by the data server.


I get error Fatal error: Call to undefined function imagerotate()

This is a problem in php-gd implementation in Ubuntu/Debian systems, you need to recompile all php yourself and fix the patches applied by ubuntu/debian to original php-gd package. All steps are described here: http://wiki.slicehost.com/doku.php?id=php5_with_bundled_gd

Linux agent inventory doesnt get hardware (CPU, RAM, etc) information

You need to have installed the lshw command. You can obtain in RPM from:

http://rpm.pbone.net/index.php3?stat=3&search=lshw&srodzaj=3

In a debian/ubuntu system, just install it with:

apt-get install lshw

Forcing timezone in the console

By default, if that is not configured, Pandora FMS console uses PHP default timezone, if that is not set-up (not default), is forced to be European Time zone. To change this, edit file include/config_process.php, and use your own timezone, for this example Mexico City:

if (ini_get('date.timezone') == ""){
        date_default_timezone_set("America/Mexico_City");
#       date_default_timezone_set("Europe/Berlin");
}

Timezone problems

It is usually a problem of the timezone system configuration, but we have summarize a test group that allow to see in which point of all Pandora system could have the difference in times. To solve it, you need to execute it visualizing the results that it shows:

- for the system (in the terminal)

date +"%z"
date

- For database (in mysql)

select now();
mysql> SELECT @@global.time_zone, @@session.time_zone;

- For perl

perl -e 'my $t = localtime(); print "$t";'

- For PHP, create a new file called test_timezone.php at the www apache directory (usually /var/www or /srv/www/htdocs/) that will have:

 <?php
     echo date("Y/m/d H:i:s O e");
 ?>

Now open a browser pointing to your test file, like http://your_ip_server_address/test_timezone.php

Once that the test battery and seeing the difficult point, we need to change the configuration of the piece which is not reporting the correct time. We need to "force" that component to use a specific timezone, or if you're not sure, you can also force all components to have the same timezone.

- For the system (in debian) :

dpkg-reconfigure tzdata

- For DB (mysql), open the file /etc/mysql/my.cnf and add the following line after the section "[mysqld_safe]"

timezone = <time_zone>

- For PHP:

- For all the system, at the file /etc/php5/apache2/php.ini (or equivalent in your distro) and change/add the line:

date.timezone = <time_zone>

- Only for pandora_console, edit in file <pandora_console>/include/config.php. Add the line:

putenv("TZ=<time_zone>");

My pandora_db script programmed in /etc/cron.daily never executes, why ?

If you're running a Debian or Ubuntu server, there is a problem reported in /etc/cron.daily/apt script who stop the execution of runparts and avoid the execution of other scripts in /etc/cron.daily.

One solution is delete that script at /etc/cron.daily/apt and another solution is to set the execution of pandora_db.pl directly in /etc/crontab.

Does Pandora FMS support SNMP timeticks ?

Yes, a SNMP timetick is a 0.001 seconds, or 100 timeticks = 1 second. So to get this data in days, for example, you need to use the post-process module feature and multiply value obtained by 0,000000116. This is the result of divide value obtained by 8640000. Remember that postprocess only allow to specify values to multiply not to divide, so 0,000000116 = 1 / 8640000. You can use the same method to get the value in hours, for example, this will be 100x60x60 = 360000, and 1/360000 = 0,000002778.

I do not receive mail when an alert is triggered

This is an example SMTP setup in /etc/pandora/pandora_server.conf file:

mta_adress smtp.domain.com
mta_port 25
mta_user myloginuser@domain.com
mta_pass 123456
mta_from pandora@domain.com

Be careful with the mta_auth config token, is to set "type" of authentication mechanism, not password (for that is mta_pass). If you have a special MTA mechanism, use for example:

mta_auth LOGIN

Also make sure you have a proper dns configuration in your system that allows you to send mails outside to your desired domains.

Before trying anything check this:

ping destinationmail.domain.com

You should receive response before trying to configure Pandora Server.

Sent an alert when an agent doesn't send any information

Q: How can i send a alert to an email address when a windows agent doesn't send any information? In the console there will be an "Out of Limits" sign and the last contact will be in red. How to activate a alert when this happens?

A: You need to use the "keepalive" module, check the docs for more information, basically is an special module who change it's status when you don't get information from the agent (remote or by software agent) in interval x 2 seconds.

I get errors "Lock wait timeout exceeded"

This is a problem with your MySQL Server, it get's stuck and cannot proccess operations. Its usually because a problem due a incomplete "frozen" transaction. Connect to your mysql server and execute:

show innodb status \G

Search for something similar to:

------------
TRANSACTIONS
------------
Trx id counter 0 2005868535
Purge done for trx's n:o < 0 2005868523 undo n:o < 0 0
History list length 4
Total number of lock structs in row lock hash table 12990
LIST OF TRANSACTIONS FOR EACH SESSION:
---TRANSACTION 0 2005868508, not started, process no 6801, OS thread id 1150482768
MySQL thread id 67, query id 5223 localhost root
show innodb status
---TRANSACTION 0 2005868518, ACTIVE 833 sec, process no 6801, OS thread id 1150617936 rollback
mysql tables in use 2, locked 2
ROLLING BACK 12992 lock struct(s), heap size 1685488, undo log entries 1557131
MySQL thread id 70, query id 5111 localhost pandora end
DELETE FROM tagente_datos WHERE id_agente_modulo IN (SELECT id_agente_modulo FROM tagente_modulo WHERE  
delete_pending = 1)

Another easy way to list current operations is the command:

SHOW FULL PROCESSLIST

In this example, transaction id 70 , has been active for 833, and seems to be DEAD and it's blocking the access some some data, and probably it's the explanation for that "lock wait" errors.

Kill the transaction with:

KILL 70;

Sometimes a KILL could take some time, so be patient. Killing (kill -9) a mysql daemon IS NOT A GOOD IDEA, and you will get a corrupted database in a 99% probability, so you need to wait to finish.

I have a problem only with M-W-D-H graphs, I can't see them

This could be due to the variable that defines the use of '$config_fontpath' true type fonts , in file include/config.php is not correct. For example, in Gentoo Linux, arial.ttf place is '/usr/share/fonts/corefonts/arial.ttf'. In the compressed file of the console is given the reporting/FreeSans.ttf true type font.

Pandora FMS Server downs

The first thing you should do to find the cause is to examine the file /var/log/pandora/pandora_server.error and according to the following possible error messages, there are the following solutions:

Starting Pandora FMS Server. Error logging activated.
DBD::mysql::st execute failed: Table 'pandora.tagent_module_inventory' doesn't exist at /usr/local/share/perl/5.10.0/PandoraFMS/DB.pm line 199.

In this case is because in previous installations you left files of the Pandora Server Enterprise installation. Specifically, it should be the file /usr/local/share/perl/5.10.0/PandoraFMS/Enterprise.pm. If you eliminate it, the Pandora Server will be not down.

I can't see any error in the PHP error log file

The configuration of PHP error log is located, same as the rest of configuration in the php.ini file. From version 1.2 we have added an option to the file ./include/config.php of the Web Console in order it will not show any error. This have not consequences in the rest of the applications already installed, that will continue using the php.ini guidelines. It only affects to the Pandora Web Console. It is possible to change this performance modifying at ./include/config.php the line

     error_reporting(0);

with something like

     error_reporting(E_ALL);

It is recommended to check the PHP documentation to know other posible values of this function.

To see errors check always file at /var/log/apache/error.log or similar file.

I have problems running agent for Windows 2008 in 64 bits

Agent has been tested in 64bit environments and works. Problems could be because two reasons:

1. Running exec agents, because binary utils provided by Pandora FMS agent are compiled for 32bits and sometimes have problems running under a 64bit service. Check if under a shell command all utils your are using (gawk, cut, grep) are working fine. If not, try to replace by another executable or use another way to get around the problem.

2. Problems in logevent parsing/monitoring. This is due because a missing DLL (PDH.dll), this library must be in "C:\windows\system32", if it's not present, try to copy from another 64-Bit Machine. That's not uncommon, looking at google hits, it is often removed by some uninstallers.

I get problem creating table (errno: 150) in MySQL while trying to migrate to 3.0

You probably get an error similar to:

ERROR 1005 (HY000) at line 101: Can't create table './pandora/talert_template_modules.frm' (errno: 150)

This is due a problem in MySQL because some fields has no the expected type. id_agente_modulo field in 2.1 should have bigint(10) type. If you have migrated from a 1.x before you will have this problem. Before running the migration tool to 3.0, enter this command in the mysql console:

ALTER TABLE tagente_modulo MODIFY id_agente_modulo bigint(10) unsigned NOT NULL auto_increment;

And try to run again the migration tool. Please remind that 2.x and 3.x versions needs to have InnoDB support enabled in your MySQL database server

Another possible explanation is that your MySQL is too old and doesn't support some foreign key syntax. Be sure you are running at lest a MySQL 5.1 version-

Pandora FMS Server debian (.deb) package fails to install

This error is shown when trying to start Pandora FMS server:

# /etc/init.d/pandora_server start
Pandora FMS Server is not running, cannot stop it.
Can't locate PandoraFMS/DB.pm in @INC (@INC contains: /etc/perl /usr/local/lib/perl/5.10.1 /usr/local/share/perl/5.10.1 /usr/lib/perl5 
/usr/share /perl5 /usr/lib/perl/5.10 /usr/share/perl/5.10 /usr/local/lib/site_perl .) at /usr/bin/pandora_server line 28.
BEGIN failed--compilation aborted at /usr/bin/pandora_server line 28.
Cannot start Pandora FMS Server. Aborted.
Check Pandora FMS log files at '/var/log/pandora/pandora_server.error & pandora_server.log'

Just copy the installed PandorFMS perl library to another directory:

cp /usr/local/share/perl/5.10.0 /usr/local/share/perl/5.10.1 -R

Pandora FMS crashes and the log message said "DBD::mysql::db do failed: Duplicate entry '1808516' for key 'PRIMARY'"

Your MySQL database has been corrupted and the auto-incremental field has been desynchronized. To resolve this, just update the last value of the auto-incremental field the the table has problems

alter table xxxxx Auto_increment = 1234;

Where "1234" is a highest value possible + 2. You can get this value for example with:

select MAX(primary_key_field) FROM xxxxx;

In Pandora FMS most table corruption should have in tagente_datos, tagent_access, tagente_datos_string or tevento. This could be an example or how to fix the problem in the tagente_datos_string

mysql> select max(id_tagente_datos_string) from tagente_datos_string;
+------------------------------+
| max(id_tagente_datos_string) |
+------------------------------+
|                      1900270 |
+------------------------------+
alter table tagente_datos_string Auto_increment = 1900272;

In MySQL Cluster problem be related with a bad sync between nodes: [4] (ndb_autoincrement_prefetch_sz parameter)

If this doesnt fix the problem, try to use this settings in the SQL Node, editing your my.cnf file:

ndb-autoincrement-prefetch-sz=1
auto_increment_increment=5
auto_increment_offset=5

This also can happen because a table has a primary key with auto increment and has a very small top limit:

For example: tsesion is defined by default with int(4) this could be too low for huge systems, to fix this, just alter table to set more allocatable PK:

alter table tsesion modify ID_sesion bigint(20) unsigned;

I have a 3Com Switch and I want to monitor with SNMP, how can I start ?

1. Try to locate the MIB for your device, for example, 3COM OfficeConnect swith in Google shows me this.

http://www.mirrorservice.org/sites/ftp.3com.com/pub/mibs/open-view/3com-products.mib

Could be a good starting point, a device could have different MIB files. Mib files are text files (.txt or .mib), readable from a simple text editor.

2. Download a MIB browser, there are a lot of free tools, for example:

http://www.ireasoning.com/mibbrowser.shtml

You can choose others, of course. Just take a look on different google searches.

3. Load the MIB into your mib browser. Each program do this differently.

4. "Browse" your device with your MIB browser, you will need a IP address accesible from your host, and of course the SNMP community (a kind of password) who allow to "read" data remotely.

5. Locate some "items" usable for you, and write it down in numerical format, like 1.3.4.2.5.6.3.23 Thats "weird numbers" are called "OID", and thats what need Pandora FMS to grab data from your device.

6. Create a network snmp module (probably incremental data (or generic_data_inc) type), and use the IP of your device, the OID you've collected and the SNMP community.

7. If everything it's ok the first data you willl colect is a 0, wait to collect a second data and data collected will be "items per second". Most SNMP information is given as a incremental data (a delta) and you need to grab at least 2 data to calculate the difference.

8. You can also get status information (port status) from SNMP devices, and text information (like IOS version from a Cisco Router) for example. There are types not supported at this time (timeticks) but probably in the future will be supported.

SNMP monitoring is hard at the beginning, but once you get it, all SNMP monitoring it's almost the same, so don't give up! ;-)

I get alerts every 5 min until problem it's fixed, how can I adjust to notify only once until problem it's fixed ?

Set alert threshold to 1 day (or more), set minimun alerts to 0 and max to 1. In this way Pandora FMS just ejecute an alert per day while problem continues un-resolved.

In SUSE I got my /tmp full of temp files, how can I automatically manage ?

Just edit /etc/sysconf/cron and define there your policy of deletion of "temp" directories. Could be also used to purge old pandora data in /var/spool/pandora/data_in (Old _BADXML_ files, for example). SUSE >11.x has a powerful script to manage temporal directories/data.

Pandora FMS shutdown and I get errors with "Mysql has gone away" in my logs

Edit your my.cnf (Main config file of MySQL) and alter following parameters:

wait_timeout = 40000
connect_timeout = 40000
interactive_timeout = 40000
max_allowed_packet=32M

If you're using PHP 4.3 or higher (or not sure(, in the console, edit config_process.php, and alter line mysql_pconnect() statement to mysql_connect(). For some reason PHP 5.3 DOES NOT LIKE persistent connections and this make MySQL very silly about timeouts, resulting errors with "has gone away".

In some systems with several physical servers or a lot of threads tserver table could generate some locks. To avoid that, just alter the type of table, using this SQL syntax:

UPDATE tserver engine = MyISAM;

Pandora FMS don't send properly my emails

First, check your pandora_server.conf properties and make sure that your mta_* parameters are ok and your MTA (Mail Server) can forward your messages. If you're using MTA authentication make sure that Sendmail.pm (Usually at /usr/share/perl5/Mail/Sendmail.pm) is version 0.79_16 or above, version 0.79 don't support AUTH methods. If your version is old, just replace by 0.79_16, you can get it here: [5]. Another option is to install from CPAN. Old versions works perfectly for MTA without authentication.

Enable WMI Service in Windows XP

Problems are because:

1. There is no connection to WMI because Firewall. 2. Remote DCOM is not enabled. Follow steps in Microsoft KB875605 [6] 3. Other problems can happen (WMI Corruption, or ACL disabled) check this URL [7]

After install a Windows agent in my Windows 2003 server it doesnt work, nothing is copied to server

In some systems, adding paths to SYSTEM is not inmmediate and need reboot to get the new path (pandora_agent/util) inserted in global %PATH% variable. Another way is copy contents of pandora_agent/util in a directory is currently on Path, like c:\windows. If you're using tentacle (default) to copy XML data files, it is mandatory to copy at lease tentacle_client.exe to somewhere inside the current path.

Of course, if you reboot your server, it will take the new Pandora FMS util directory in the path and everything will be ok.

How can I use PERL 5.8 in my old Solaris 8 ?

The best way is to install BlashWave packages. There are a lot of opensource packages in the Lastware package system, who works like the apt-get / yum / zypper system, grabbing the repository data, and installing on demand, resolvind dependencies. Check for more information in http://www.blastwave.org/howto.html

Whatever action I take, I get prompted again for login credentials.

Is PHP cgi runing under different user than /var/lib/php/session had permissions ?

I have all my Pandora SNMP Console setup fine, but I don't receive any trap

Check contents of your pandora_snmptrap.log. This should be like:

tail -f /var/log/pandora/pandora_snmptrap.log

If you have "No access configuration - dropping trap." lines is because you have not configured the access of your snmptrapd daemon. Use this commands to solve the problem:

echo "authCommunity log public" >> /etc/snmp/snmptrapd.conf

/etc/init.d/pandora_snmpconsole restart

And now should work.

I had recurrent problems with some servers generating a lot of BADXML files

The solution for common problems (FAQ) helped (changing the encode type), but there are more tips:

1. Check if the modules in /etc/pandora_agent.conf have *at least* this lines for each module:

module_begin
module_name
module_type
module_exec
module_end

I don't have sure, but you should keep the lines in this order to avoid BADXML.

2. Check if you have a return data value equal to "0.00". I don't know why (maybe a bug?) but all my agents that have this return value generate a BADXML. So, I change this to simply "0" and the XML worked perfectly.

Ubuntu 9.04, Fedora XX, Redhat XX or SuSe XX doesnt have wmi-client package, what I can do to use WMI ?

Just download the wmiclient provided for "generic linux" in our download section (32bit) it works perfectly on Ubuntu 9.04, Fedora and other Linux distros because is a static compiled binary.

 http://sourceforge.net/project/downloading.php?group_id=155200&filename=wmi_client_linux.tar.gz&a=54919695

If you have problems running it or want to compile yourself, you need to get sources of latest version of Samba 4.x version (3.x don't have WMI or WinExe support). After compile and link you will get the wmic tool. Does this ONLY if provided binary (see above) doesn't work for you.

How can I upgrade a stable version with updates ?

For the latest stable version (3.x) code is public and available on branches/pandora_3.x directory in our code repository, you can get it with Subversion client using this command:

svn co https://pandora.svn.sourceforge.net/svnroot/pandora/branches/pandora_3.x

Just copy new files over old files BUT be sure to backup everything (including database), just to be safe.

Also, consider using Pandora FMS Enterprise version [8] to keep up-to-date automatically your system.

How can I Start/Stop a Windows service on demand from Linux (To exec in an alert from Pandora FMS)

You need an updated version of Samba (3.x) and administrative credentials to access remotely (RPC call) to a Windows server. In this example we will use 192.168.50.121 like target server, "Administrador" as user and "pepe" as password. We want to work with a service called "PandoraFMSAgent" and also see the full list of services:

To get a list of process:

net rpc service list -U administrador%pepe -I 192.168.50.121 
.
. full list

To show the status of a process:

 net rpc service status  PandoraFMSAgent -U administrador%pepe -I 192.168.50.121 

 PandoraFMSAgent service is running.
 Configuration details:

	Controls Accepted    = 0x5
	Service Type         = 0x10
	Start Type           = 0x2
	Error Control        = 0x1
	Tag ID               = 0x0
	Executable Path      = C:\Archivos de programa\pandora_agent\PandoraAgent.exe
	Load Order Group     = 
	Dependencies         = /
	Start Name           = LocalSystem
	Display Name         = Pandora FMS agent

To stop a process:

net rpc service stop  PandoraFMSAgent -U administrador%pepe -I 192.168.50.121 .
PandoraFMSAgent service is stopped.

To start a process:

net rpc service start  PandoraFMSAgent -U administrador%pepe -I 192.168.50.121 
Successfully started service: PandoraFMSAgent

Pandora server is receiving data from an agent, and show latest data correctly, but graph don't show anything. Agent is working and last data is correct. Raw Data table is also empty

Probably your agent date is not sync with Pandora FMS. Check date in remote system and compare with the local date. Check timezones in both systems. You can setup agent (in 3.0 version) to "not use" its local time, and in 3.1 version you can define a different timezone to made the calculations and plus/substract time depending on timezone of agent.

How can I make a backup of database?

A simple mysqldump will dump your database contents. A blank database with the same name (without data), should be enought to receive dump generated by mysqldump.

Make the backup

mysqldump -u root -p pandora > /backup/pandoradb_backup.sql

Restore the backup (from scratch)

mysql -u root -p
create database pandora;
use pandora;
source /backup/pandoradb_backup.sql

Probably you also need to give access to your console pandora user:

grant all privileges on pandora.* to pandora@localhost identified by 'mypassword';

I have setup a alert for a module, but when it comes a bad "peak" it doesn't fire the alert, if it is a proc module, it is reflected on event log, but alert doesn't fire

Check that your alert has a "min alerts" of 0. If it has a value of 1, for example, it means that needs at least one "bad" value before activate the alert. In this case, with a value of "min alerts" of 1, you need at least two bad values (in the same period defined by time threshold parameter) to fire an alert.

When I start the network server, I get a message 'segmentation fault' and server seems to stop running

Check your /etc/pandora/pandora_server.conf file and see how many network_threads are you using. If you're using more than 40-50 threads in a PIV with less than 1GB, probably your machine is not able to manage so many threads. Try to reduce. A single network thread is enough to manage about 100/200 modules, probably more depending on your setup and network latency needs.

I'd just installed pandora server on a solaris 10 machine. Is there a way to skip the error "This isn't GNU/Linux" ?

Pandora is not well tested on Solaris systems, but you could try to use in Solaris at your owk risk. Just edit Config.pm file and search:

die "[ERROR] This isn't GNU/Linux.

Comment this line and Pandora FMS should start without warning about that SO is not Linux.

Adding mibs to Pandora FMS

Q: does anyone know how to load HP and/or compaq MIBS into pandora for the SNMP Walk functionality?

A: Pandora FMS do not manage directly SNMP, it relies on GNU/Linux Net-SNMP libraries that are managed by system, so editing /etc/snmp/snmp.conf you can define MIB loading. You should configure your the linux system that runs Pandora FMS Console and add MIB files to /etc/snmp/snmp.conf file (and restart apache). This are /etc/snmp/snmp.conf directives for MIB management:

mibdirs DIRLIST

specifies a list of directories to search for MIB files. This operates in the same way as the -M option - see snmpcmd(1) for details. Note that this value can be overridden by the MIBDIRS environment variable, and the -M option.

mibs MIBLIST

specifies a list of MIB modules (not files) that should be loaded. This operates in the same way as the -m option - see snmpcmd(1) for details. Note that this list can be overridden by the MIBS environment variable, and the -m option.

mibfile FILE

specifies a (single) MIB file to load, in addition to the list read from the mibs token (or equivalent configuration). Note that this value can be overridden by the MIBFILES environment variable.

Keepalive module doesn't work for me

Q: According to last fms1.3 beta .... I can not make the visual console to show in red color when the computer or server is not on / not alive. Setting in map_builder: Single graph zixzax / agent_keepalive server 320 70 0 0. It shows the picture somehow but it suppose to show in red instead of green color since i set the zixzax down/off.

A: Keepalive only set to "down" where there is NO CONTACT, it's a very special module (that currently have about 10% of support questions Very Happy).

If you have five modules for an agent, for example:

1. ICMP check 2. Four Agent modules 3. Keepalive module (by default)

And your agent is down (because machine is dead, for example), the ICMP module is "working", and reporting that machine is down, so if you have a ICMP check Keepalive module never become "DEAD" because there is at least one module working, so you need to use ICMP check to draw agent info on your map.

There is a lot of configuration required, prior to install Pandora FMS that isn't covered in the quick installation guide

Q: I'm not too experienced with Apache, Perl or even Linux. I work mostly with network design and support. So I wanted to implement some sort of monitoring, and Pandora seemed like an OK choice. But I used to think I could follow a manual letter by letter, until now that is... Is there alot of configuration required that isn't covered in the quick installation guide. As in, does it require arbitrary configuration of Apache or anything of the kind? .

A: If you're working with ubuntu, you don't need to "adjust" or configure neither apache or PHP, simple install all dependencies:

apt-get install apache2 libapache2-mod-php5 php5-mysql mysql-server php-pear php5-gd php5-snmp snmp snmptrapd snmpd

This should install all server and console dependencies in your system in a Ubuntu server. Perl dependencies are detailed on Quick Install Guide

I would like to know how to install more than one pandora agents in the same machine

If you take a look to pandora_agent_daemon, in the first 20 lines of that script you have a bunch of variables that need to rewrite:

PANDORA_PATH=/etc/pandora
DAEMON=/usr/bin/pandora_agent
PIDFILE=/var/run/pandora_agent.pid
LOGFILE=/var/log/pandora_agent.log

Just create a directory /etc/pandora2

And copy your /etc/init.d/pandora_agent_daemon to /etc/init.d/pandora_agent2_daemon with lines shown before modified to do not interfere with first agent, something like:

PANDORA_PATH=/etc/pandora2
DAEMON=/usr/bin/pandora_agent
PIDFILE=/var/run/pandora_agent2.pid
LOGFILE=/var/log/pandora_agent2.log

Copy your pandora_agent.conf config to /etc/pandora2 and if you want to use a pandora_user.conf also copy to this location.

My Pandora FMS Agents don't connect with Pandora FMS server, or my Pandora FMS Agents ask me for SSH password when try to connect. Implementing SSH authentication

I'm asked for a password when make connection for copying XML data. I tried connecting through SSH but still didn't work.

A: Before trying start a remote pandora agent you must be sure that SSH Key auth its working, for try this, execute in a host with pandora agent installed: ssh pandora@pandora_server.

Pandora_server is the hostname where pandora server its instaled. If you can connect directly, automated SSH Auth key its working OK and pandora agent must be able to connect Pandora Server.

Please refer Pandora FMS Server Install documentation on how to install automated Pandora SSH key auth. You need to do following steps in order:

1. Create "pandora" user in your Pandora FMS data server system. Be sure to give "pandora" user privileges to write in incoming directory for data files (/opt/pandora_server/data_in for 1.2 version or /var/spool/pandora/data_in for 1.3 version).

2. Create ssh key for root using (or the user using running Pandora FMS agent) in each of Pandora FMS Agent Systems, with command:

ssh-keygen -t dsa

This would generate a file called /root/.ssh/id_dsa.pub

Copy contents of that file over the file (create if not exists) /home/pandora/.ssh/authorized_keys with permissions only to read/write for pandora user in Pandora FMS Data server system.

3. From root user in the Pandora FMS agent system, test the connection with command:

 ssh pandora@pandorafms_data_server

If it's the first connection, it should ask you about the authenticity of host's fingerprint. Say yes, and you should enter system without problems. If not, SSH authentication is not correct, and you need to review previous steps carefully.

4. Run the agent, it should copy datafiles over Pandora FMS data server incoming data directory.


My agents on FC4 machines cannot send data to the Pandora Server (SSH Transfer mode)

I have installed agents on fc4 machines and my pandora server on fc5 and I also have an agent on the fc5 machine running the pandora server .The agents on the fc4 machines cannot send data to the pandora server but the agent on the machine running the pandora server(fc5) works ok.I also have a problem with generating the public keys.

A: Before trying start a remote pandora agent you must be sure that SSH Key auth its working, for try this, execute in a host with pandora agent installed: ssh pandora@pandora_server.

Pandora_server is the hostname where pandora server its instaled. If you can connect directly, automated SSH Auth key its working OK and pandora agent must be able to connect Pandora Server. Please refer Pandora Agent documentation on how to install automated Pandora SSH key auth.

When I try to see any graph, I don't see any image, and if I try to see the broken icon, the page shows Fatal error: Call to undefined function: imagetypes()

A: imagetypes() is a GD function, check if you have installed the GD library. Also, take a look at your php.ini file, to see if you load the gd.so library. To do so, add the next line to the file:

extension=gd.so.

Pandora Web Console doesn't run and I get some MySQL errors

A: If you have created Pandora DataBase and added the Pandora user in the database, review your include/config.php file to change the database, host user and password with your own data. Also check connectivity with MySQL Server by connecting by hand.


I get Mysql error "client does not support authentication protocol"

I use MySQL 4.1 or MySQL 5.0, and when I try to authenticate user I get the next error: Warning: mysql_connect() [function.mysql-connect]: client does not support authentication protocol requested by server; consider upgrading

A: In MySQL 4.1 there's a new type of authentication different that 4.0 or 3.23 and PHP isn't compiled for this version, so it can't connect. There are a few different solutions, first is to compile PHP against the MySQL 4.1 client library. If that doesn't work or you can't do that, then you can read this text about how to fix it. Basically, you need to save the pandora user password with old hashing algorithm:

mysql> set password for 'pandora'@'localhost' = old_password('pandora');

I get Pandora FMS Console error: You don't have access to this page

Q: I install Pandora Web Console and when I login as admin and try to access any of the links, I get an error: You don't have access to this page

A: You don't need this change in Pandora 1.2 and newer. This happens because the session isn't initiated. Review if you have the next line in your php.ini file:

session.auto_start = 1

Also take a look at the session.save_path parameter in the same file, to ensure you have access to this directory (usually /tmp).

How can I run Pandora agent in IPSO / FreeBSD?

A: Due to a unknown bug in IPSO, sometimes it detects a different number of Pandora running processes and detects another Pandora agent running. If this happens, try to launch Pandora agent with:

$ nohup ./pandora_agent.sh &

Can I run any Pandora agent in Cisco?

A: No, you can't. But you can run a satellite agent running in a nearby host (a host that has access to Cisco SNMP interface) and run a SNMP remote agent in a Pandora compatible system. With Pandora 1.2 you could run a remote network agent monitoring ICMP, TCP, UDP, and SNMP parameters of Cisco equipment. You also could setup a custom Pandora FMS agent that uses expect to get data and report to Pandora FMS Data server in provided XML interface.

Which is the load Pandora can support?

It depends on your architecture. If you have a single-server (MySQL, Pandora Server and Pandora Console) machine, about 1000 agents (in v3.0), with a total of 25-30 individual data items (modules) per agent. Hardware needed for that is a "cheap" Server, with a dual core CPU (2.4Ghz), 4GB of RAM and a 7500rpm Harddisk.

For more powerful setups (1000 agents), can I use multiple servers, using a high availability solution?

Yes. There is a HA solution and multiple high-load. Please read the documentation in depth, all information is explained there.

Can I use Crystal Reports with Pandora?

A: Yes, you can since database schema is open. Check our documentation about database schema explanation of directly, read the code in our development repository.

After a problem with MySQL Server (shutdown, restart) my Pandora Server stops. There are any data lost?

A: Pandora Server automatically shutdown if it can not connect with MySQL Server. If Pandora Server is not running, data packets are storing in Pandora Server incoming directory. When Pandora Server restart again, it will process that packets and no data will be lost.

Where can I download the srvany.exe and instsrv.exe files?

A: Microsoft has released this files into the Resource Kit for Windows 2000 and for Windows XP and Windows 2003. You can download it freely from Microsoft, but Only for XP and 2003. This file was used for Pandora FMS older versions (1.1) but could be used to program as service the Perl Unix agent running on windows with the Active State Perl. Thats a nice hack :-)

How do I convert the Pandora Windows agent 1.1 keys into Pandora Windows agent 1.2 keys?

A: Disclaimer: Your old keys must be in DSA format. If they are not in this format, or you are not sure, generate a new pair of SSH keys.

In order to convert your ppk keys into OpenSSH DSA format (id_dsa and id_dsa.pub files) you will need Putygen utility.

Open Putygen, go to "File" menu and click "Load", then open your ppk private key. Open "Conversions" menu and select "Export OpenSSH key". Save it as "id_dsa".

To export the public key, in the main window of Putygen you can see a textbox on the top which title is "Public key for pasting into OpenSSH authorized_keys file". Select all the text in the box and copy it in the clipboard. Create a text file with notepad and paste the text into the file. Save the file and close notepad. Rename this file to "id_dsa.pub" and thats all.

How to generate a pair of SSH keys for Pandora Windows agent ? (SSH Transfer only)

A: Open Putygen and select SSH2-DSA at the bottom of the main window. Then click "Generate". The program will ask you to move the mouse over the blank area to generate randomness. Once the key has been generated, export it by opening "Conversions" menu and select "Export OpenSSH key". Don't use any passphrase when exporting it, so click "No" if a warning dialog appears. This will export the private key, which you must save as "id_dsa".

To export the public key, in the main window of Putygen you can see a textbox on the top which title is "Public key for pasting into OpenSSH authorized_keys file". Select all the text in the box and copy it in the clipboard. Create a text file with notepad and paste the text into the file. Save the file and close notepad. Rename this file to "id_dsa.pub" and that's all.

How to configure the Pandora server to accept the keys from Pandora FMS Windows agent (SSH Transfer) ?

A: Connect to your server and go to /home/pandora/.ssh . If this directory does not exist you must create it. Open "authorized_keys" file with your favourite editor (you must create it also if it does not exists) and paste the public key in a new line of the file. This should work now, so run pandora windows agent SSH test again with:

c:\path\to\pandora> PandoraAgent --test-ssh

I have Net::SNMP installed but Pandora still asks me for SNMP.pm

A: net-snmp-perl and Net::SNMP are two different things.

net-snmp-perl is the perl bindings for the snmp library at http://net-snmp.sourceforge.net/, which provides an SNMP.pm without the Net:: prefix.

Net::SNMP is a perl module from http://search.cpan.org/dist/Net-SNMP/ which provides Net::SNMP (i.e. it would be /usr/lib/perl5/vendor_perl/5.8.5/Net/SNMP.pm). You can find RPMs for this package in Dag's repo: http://dag.wieers.com/packages/perl-Net-SNMP/

UPDATE: With Pandora FMS 3.0 this library is not needed anymore.

Error: Call to undefined function imageantialias() in Pandora Console

A: The problem resides on the jpgraph.php file: Line 5791 and 5792.

  If you take a look on that lines you'll find this:
   $this->use_anti_aliasing = $aFlg;
  imageantialias($this->img,$aFlg); 

To solve the bug just change those lines into these:

    $this->use_anti_aliasing = false;
   //imageantialias($this->img,$aFlg);  

Problem starting the first time Pandora Agent for Unix (SSH Transfer mode)

Q: When i enter

[root@localhost root]# /opt/pandora_agent/pandora_agent_daemon start
Pandora Agent is now running with PID 14786

Then it will display

[root@localhost root]# The authenticity of host '192.168.182.157 (192.168.182.157)' can't be established.
RSA key fingerprint is 9c:11:1b:ac:44:2e:10:98:16:75:00:58:34:18:5b:2d.
Are you sure you want to continue connecting (yes/no)?

when I press yes it still show those message. what is the problem?

A: Yep, it's normal. Stop the agent. Make the first connection to the server manually. I mean, ssh pandora@pandora_server_ip, press yes. That will also make you to be sure you set up the ssh publickey configuration successfully. After doing this, launch the agent again and everything should work out ok for you.

How to run PandoraFMS agent on the system startup

Q: I've installed the pandora_agent on my Linux system and I want it to run every time the computer starts up, how can I do that automatically?

A: First of all, copy pandora_agent_daemon to /etc/init.d

Then if you wanna pandora_agent_daemon starts in your system boot, just:

ln -s /etc/init.d/pandora_agent_daemon /etc/rcX.d/S99pandora_agent_daemon

Where the X is the run level you're booting into.

Then, to make sure your pandora_agent_daemon is being correctly switched off when you make a shutdown, or poweroff...

ln -s /etc/init.d/pandora_agent_daemon /etc/rc0.d/K99pandora_agent_daemon
ln -s /etc/init.d/pandora_agent_daemon /etc/rc6.d/K99pandora_agent_daemon

Problems with PHP-PEAR RPM

Q: I installed php-pear rpm package but the graphics do not work though

A: By default, php-pear is installed in /usr/share/pear

To solve that just:

 cp /usr/share/pear/PEAR.php /var/www/html/pandora_console/reporting/

(Check out your pandora_console PATH) Then, just make apache able to read that file:

 chown apache PEAR.php

(Check out which user is running the apache server, could be either apache or www-data)

Problems with "Unknown agent" in the WebConsole"

Q: I created the agent in the webconsole but it has no data. Looking at the logs I found this error:

  2007/07/11 14:13:45 ulises_Data [V1] ERROR: Received data from an unknown agent

But the agent is created in the webconsole

A: You need to install: libxml-simple-perl

  apt-get install libxml-simple-perl

I need more decimals in the definitions of SLA's, how can I get it ?

A: Altering database with following SQL sentence (MySQL):

ALTER TABLE treport_content_sla_combined MODIFY `sla_limit` double(18,3) default NULL;
ALTER TABLE treport_content_sla_combined MODIFY `sla_min` double(18,3) default NULL;
ALTER TABLE treport_content_sla_combined MODIFY `sla_max` double(18,3) default NULL;

This will give you three decimals, if you need more, just alter the table again. This is for the SLA's only.

I need more precission for the postprocess field

A: Altering database with following SQL sentence (MySQL):

ALTER TABLE tagente_modulo MODIFY `post_process` double(18,13) default NULL;

Can't locate PandoraFMS/DB.pm on Debian after install Pandora FMS 3.0

A: It seems to be a problem detecting the perl version to solve it just copy it, for example:

# cp /usr/local/share/perl/5.10.0 /usr/local/share/perl/5.10.1 -R

PDF Reports without graphs

A report with graphs, this report show graphs in the html view, but when the same report in PDF the graphs don't show. And this bug is cause to the PHP configuration (normally this file is in /etc/php5/apache2/php.ini), in this configuration you have a disable the flag to pass session as parameter. Well, for to set on the flag, you can change the line "session.use_only_cookies = 0". The reason is becase to make the PDF, the server auto-get the image graph and use the user session as parameter.

PDF Reports not have graphics and / or are slow

One relatively common problem in the PDF reports is when the external URL monitoring cannot be resolved from Pandora FMS Console. We must verify that the URL to customer access, can be resolved and accessed from the server where is installed Pandora, for example:

 https://monitoring.mydomain.com/pandora

It may be that the server is behind a NAT address and the address which resolves the domain from the local machine is not accessible from the console. for it would edit the /etc/hosts as follows:

 127.0.0.1 monitoring.mydomain.com

A Map's background is black

In the Dashboards, when creating a visual map Widget, if the map's background is completely black, it is due to the Apache configuration. If the Pandora console is installed in the Apache location by default (/var/www en Ubuntu) this problem won't be, but if we've installed the Pandora console in other location, as for example at /home/Usuario/public_html,then, it'll be possible that you'll have problems to find the map background image.


Massive SNMP operations doesnt work

When you do a SNMP Walk in the massive operation section, It should appear after a few seconds, a form with the detected interfaces. If you select an interface, possible values detected will be shown. If you don't get anything that means your system has problems to translate OID.

Please read "SNMP OID read problems"

SNMP OID Read problems

The OID are translated with a "dictionary" or MIBS that should be properly installed. In latest versions of Ubuntu/Debian that MIBS are not installed with the system, and you need to install/download explicitly.

To do that, you can download a package called snmp-mibs-downloader and install. After installation, just editing the file /etc/snmp/snmp.conf and comment line "mibs:", it will work.

After that restart Apache server. For example in Ubuntu:

sudo /etc/init.d/apache2 restart

I have upgraded to version 3.2 and policy modules are marked as unlinked

Starting from version 3.2 policy modules can be unlinked from a policy to allow customisation, but existing policy modules are not marked as linked during the upgrade. This can be fixed with the following SQL query:

UPDATE pandora.tagente_modulo SET policy_linked=1 WHERE id_policy_module!=0;


How can I add fonts in order to use them in the graphs and reports?

To add fonts to Pandora, you need only to copy them in the include/fonts file.

More info at: http://www.openideas.info/wiki/index.php?title=Pandora_3.0:Documentation_es:Presentacion_datos#Typograf.C3.ADa_e_idiomas


Problems with SNMP v1 and Pandora web console

The error can be checked because when you execute a function which performs a SNMP Walk using SNMP v1 the following string will appears in your web server logfile:

snmprealwalk(): This name does not exist:

It is a PHP bug, you can see more information at:

https://bugs.php.net/bug.php?id=51336&edit=1

To fix it you must upgrade your PHP installation to a higher version.

SSLeay thread safe error

If you see your Pandora FMS server is down and when you check the log file /var/log/pandora/pandora_server.error you find an error like this:

/lib64/libc.so.6[0x399ea748f4]
/lib64/libc.so.6(realloc+0x102)[0x399ea753e2]
/lib64/libcrypto.so.6(CRYPTO_realloc+0x60)[0x39a22dae50]
/lib64/libcrypto.so.6(lh_insert+0xf9)[0x39a227e9f9]
/lib64/libcrypto.so.6(OBJ_NAME_add+0x6d)[0x39a225c72d]
/lib64/libcrypto.so.6(OpenSSL_add_all_ciphers+0x38f)[0x39a228532f]
/lib64/libcrypto.so.6(OPENSSL_add_all_algorithms_noconf+0xe)[0x39a2284f8e]
/usr/lib64/perl5/vendor_perl/5.8.8/x86_64-linux-thread-multi/auto/Crypt/SSLeay/SSLeay.so(XS_Crypt__SSLeay__CTX_new+0x291)[0x2aaaaaee3be1]
/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi/CORE/libperl.so(Perl_pp_entersub+0x3f6)[0x39a1290aa6]
/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi/CORE/libperl.so(Perl_runops_standard+0xe)[0x39a128a34e]
/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi/CORE/libperl.so(Perl_call_sv+0x650)[0x39a12376f0]
/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi/auto/threads/threads.so(Perl_ithread_run+0x155)[0x2af9342782f5]
/lib64/libpthread.so.0[0x399f20673d]
/lib64/libc.so.6(clone+0x6d)[0x399ead44bd]
...

The problem is that your version of perl-Net-SSLeay library is earlier than 1.42 and is not thread-safe. You can see more information at: http://search.cpan.org/~mikem/Net-SSLeay-1.45/lib/Net/SSLeay.pod#Using_Net::SSLeay_in_multi-threaded_applications

To solve the problem you must decrease the number of threads for web server to 1 with the following configuration:

web_threads 1

If your Pandora FMS web server must support a high load then, you must update the package to a newer version.

Use of Modules Type Incremental

The incremental modules get "Rate" values, that is, items per second (Bytes per sec) in case of traffic.

This kind of module is created this way because in SNMP all counters are useful to measure a rate of values per second. To do this with absolute values will be trick, because the intervales if they aren't exactly the same, will give values that shouldn't be compared.This way peaks would be shown in the graph, which would be not correct because the average interval would be lightly higher to the previous ones making all false. But one rate (X/sec) could be perfectly comparable to other rate (X/items/sec).

Table data overflows

If you are trying to store numbers bigger that what tagente_datos.datos can hold, you can increase its precision by connecting to Pandora FMS's database and issuing the following command:

ALTER TABLE tagente_datos MODIFY datos double(precision, 2) default NULL;

For example, if you need to store 128bit integers (which go up to 3.4e38) you need 39 digits for the integer part. Since Pandora FMS uses 2 digits for the fractional part, the resulting command would be:

ALTER TABLE tagente_datos MODIFY datos double(41, 2) default NULL;

Problems receiving SNMP alarm traps with string in parenthesis

If you have configured an SNMP alert, which is set to an alert that uses _data_ macro on the execution, to receive an SNMP trap this can fail when it receives a string snmptrap and containing parentheses.

Example: .1.3.6.1.4.1.4174.0.4.7 = STRING: "SQL Server 2012 (Monitoring)"

To solve this problem, you must call the macro _data_ in single quotes: '_data_'.

Pandora FMS's database is too big and pandora_db.pl freezes

If pandora_db.pl is having trouble cleaning up Pandora FMS's database edit it, increase $BIG_OPERATION_STEP (to 1000-10000, for example) and decrease $SMALL_OPERATION_STEP (to 100-200).

$BIG_OPERATION_STEP is the number of blocks that a time interval is split into. A bigger value means bigger blocks, which is faster but heavier on the database.

$SMALL_OPERATION_STEP is the number of rows that are processed in a single query. A smaller value means more lighter queries.

Delete agents to solve problems with agents excess in Enterprise version

The Enterprise version is limited by number of agents. in the case that exceeds the number of licensed agents appear an error message.

To delete remaining agents only thing to do is disable the Enterprise version and the delete leftover agents with Open version. We can do this by renaming the folder Enterprise, in the case that it is a Centos Appliance we would do:

mv /var/www/html/pandora_console/enterprise /var/www/html/pandora_console/enterprise.bk

Required agents nomenclature agents from version 5

From version 5 Pandora must be borne in mind when creating fictitious agents, that the nomenclature should follow the data files, reaching tentacle directory, must follow this pattern: agent_name.numbers.data

Example. pandora_agent.3123278534.data

Any other format that can be assumed to follow the data_server not capture the information and let the XML stored in the directory.