# Pandora:FAQ

Jump to: navigation, search

Many of following questions has been asked in our public forums [1] or in our development mail list [2], if you don't find here an answer for your problem, try to check out there.

# Frequently Asked Questions (FAQs)

## How can I install?

### How can I upgrade from version 3.x.y to 3.x.z ? (Same major version upgrade)

If you are installed, the "official" released version, and you know there are updates in your same major version, they will be always updated in the Subersion Pandora code repository. To update your version, just install a subversion client software, and execute following command:

svn co https://pandora.svn.sourceforge.net/svnroot/pandora/trunk


That will download the last development version (Trunk), today is 3.1 (tomorrow, will be 3.2), if you want to download latest updates from a specific stable version, for example 3.0, execute:

svn co https://pandora.svn.sourceforge.net/svnroot/pandora/branches/pandora_3.0


To update, just follow the procedure described in documentation, to upgrade from the same version, as written in http://openideas.info/wiki/index.php?title=Pandora_3.0:Documentation_en:Anexo_Upgrade

You have more information about development version and upgrades from the code repository in http://pandorafms.org/index.php?sec=community&sec2=development&lng=en

### My old AIX (4.3, 5.1) don't have Perl 5.8, I cannot run agents

A: You can install part of the IBM toolbox, containing the Perl 5.8 packages. Download them from ftp://ftp.software.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/perl/

Note that some AIX are bundled with Perl v5.6: This version is able to run Pandora FMS agents, so you don't need to install Perl 5.8

### My old HP-UX (11.0, 11.11) don't have Perl 5.8, I cannot run agents

A: You can install the official cpan packages for Perl 5.8 in HPUX. Download them from http://mirrors.develooper.com/hpux/downloads.html

### How can I install Jpgraph?

R: You should unzip dthe Jpgraph downloaded files in directory ./reporting/jgraph of the Web console

### How can I install the GD libraries in Windows?

A: PHP for Windows includes the GD library by default but maybe they are not activated. Edit your php.ini file (usually in c:\winnt\php.ini or c:\windows\php.ini) and add the next line to the file:

extension=php_gd2.dll


Restart your server to make the changes to take effect.

### How can I install PEAR at Windows?

R: The PHP version for Windows comes already with PEAR. Yo only need to make it work uncommenting the line that has include_path, deleting the «;» character

     ;include_path = ".;c:\php\includes"


in your php.ini and adding the path to PEAR, which is at the PHP directory. At the end, you will have something as:

     include_path = ".;c:\php\includes;C:\php\PEAR"


Remember to restart Apache.

For GNU/Linux you should install the php-pear packages, php-image-canvas and php-image-graph. You can find more information for systems based on Debian GNU/Linux in the Openideas.info.

### I cannot access the Pandora Console installation web page in CentOS.

R: It is possible that even having the pandora_console folder properly located (/var/www/html/pandora_console) with the adequate rights (usr: apache - grp: apache - mod: 644) we cannot access the Pandora FMS Console installation web page. This could be a problem regarding having SELinux active with a strict policy, which prevents us from executing the php code of our Pandora.

In order to confirm it, we can check the apache error log and search for lines regarding the application of a SELinux policy in apache.

In this case, a workaround is to deactivate SELinux. This is done by editing the file /etc/selinux/config, changing SELINUX=enforcing by disabled:

# cat /etc/selinux/config
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#       enforcing - SELinux security policy is enforced.
#       permissive - SELinux prints warnings instead of enforcing.
#       disabled - SELinux is fully disabled.
SELINUX=disabled
# SELINUXTYPE= type of policy in use. Possible values are:
#       targeted - Only targeted network daemons are protected.
#       strict - Full SELinux protection.
SELINUXTYPE=targeted

# SETLOCALDEFS= Check local definition changes
SETLOCALDEFS=0


As it is marked in the comments, after editing the file, it is needed to restart to deactivate SELinux or use setenforce:

# setenforce 0


Remember to restart the Apache service.

### perl-SNMP dependency in RHEL / CentOS / Fedora cannot be found.

R: For versions prior to RHEL6 or equivalents, perl-SNMP doesn't exist, so it would be needed to install the dependency net-snmp-perl.

Once this is done, please start your Pandora Server if you had forced the installation before, or install it and force the installation if it keeps asking for perl-SNMP.

### For the CENTOS distribution How can I see the flash charts in Firefox

In addition to installing the rpm from the Adobe site, install the package repositories flash-plugin to work on firefox graphs: yum install flash-plugin.

### Nmap not works fine in Windows ( Satellite Server o Pandora Server )

For the proper operation of the binary nmap.exe on Windows installations is necessary the library MSVCP100.DLL.

The definitive solution to the problem is to download the msvcp100.dll library from the official website of Microsoft. Installed with "Microsoft Visual C++ 2010 SP1 Redistributable Package".

## How Can I do ?

### How can I configure the email server for the alers kind email?

This is configured in the server,specifically in the file pandora_server.conf, you should restart the server after modifying the file to it gets the changes

### How can I use PERL 5.8 in my old Solaris 8 ?

The best way is to install the BlashWave package s.There are many OpenSource packages in the Lastware last package system that works as for example

apt-get / yum / zypper system, recording the data repository and installing them on demand and solving dependencies. See more info at: http://www.blastwave.org/howto.html

### How can I improve a fixed version with updates ?

For the last fixed version (2.x) the code is public and is available in the directory branches/pandora_2.x of our code repository. You can get it with the Subversion client using the following command:

svn co https://pandora.svn.sourceforge.net/svnroot/pandora/branches/pandora_2.x


You will only need to copy new files on the old ones. BUT please, make sure to do a backup of all (including the database) to be sure.

Same way, consider the convenience of using the Pandora Enterprise version [3] to update your system in an automatic way

### How can I Start/Close a Windows service upon request from Linux (to execute with an alert from Pandora FMS)

You need an updated version of Samba (3.x) and a admin credentials to could access remotely (RPC call) to a Windows server. In this example we will use 192.168.50.121 as taget server, , "Administrator" como user y "pepe" as password. We want to work with a service called "PandoraFMSAgent" and see the complete list of services:

Get a process list:

net rpc service list -U administrador%pepe -I 192.168.50.121

.
. full list


To see the status of one process:

 net rpc service status  PandoraFMSAgent -U administrador%pepe -I 192.168.50.121

PandoraFMSAgent service is running.
Configuration details:

Controls Accepted    = 0x5
Service Type         = 0x10
Start Type           = 0x2
Error Control        = 0x1
Tag ID               = 0x0
Executable Path      = C:\Archivos de programa\pandora_agent\PandoraAgent.exe
Load Order Group     =
Dependencies         = /
Start Name           = LocalSystem
Display Name         = Pandora FMS agent


To stop a process:

net rpc service stop  PandoraFMSAgent -U administrador%pepe -I 192.168.50.121 .

PandoraFMSAgent service is stopped.


To start a process:

net rpc service start  PandoraFMSAgent -U administrador%pepe -I 192.168.50.121

Successfully started service: PandoraFMSAgent


### I want to change the Ip of several modules at the same time, How can I do it?

I have a switch with 240 checks and my IP has changed. How can I change the IP of all the remote checks in a simultaneous way, without having to do it one by one?.

Use the Pandora SQL manager, introducing the SQL similar sentence (change the IPs 10.0.0.2 is the old one and the 10.0.0.1 is the new one:

UPDATE tagente_modulo SET ip_target = "10.0.0.1" WHERE id_target = "10.0.0.2";


### How can I add mibs to Pandora FMS ?

Question: Does anyone knows how to load MIBS in pandora for the SNMP Walk feature? Answer: Pandora FMS does not manage SNMP directly. It is based on GNU/Linux Net-SNMP libraries that are managed by systems,so edit /etc/snmp/snmp.conf to define MIB loading.You should configure the Linux system which runs the PandoraFMS and add the MIBS file to the /etc/snmp/snmp.conf file(and restart apache) These are the directives /etc/snmp/snmp.conf for the MIB management:

mibdirs DIRLIST

specifies a list of directories to search for MIB files. This operates in the same way as the -M option - see snmpcmd(1) for details. Note that this value can be overridden by the MIBDIRS environment variable, and the -M option.

mibs MIBLIST

specifies a list of MIB modules (not files) that should be loaded. This operates in the same way as the -m option - see snmpcmd(1) for details. Note that this list can be overridden by the MIBS environment variable, and the -m option.

mibfile FILE

specifies a (single) MIB file to load, in addition to the list read from the mibs token (or equivalent configuration). Note that this value can be overridden by the MIBFILES environment variable.

### How can I add sources to use them in the graphs and reports?

To add sources to Pandora it will be enough with copying them into the folder include/fonts.

### How to run the PandoraFMS agent in the Start system

Q: I have installed the pandora_agent in my Linux system and I want that it runs every time that I start the system. How can I do it automatically? A: The first thing you should do is to copy the pandora_agent_daemon at/etc/init.d

After, if you want that the pandora_agent_daemon starts when running your system, you only need that:

ln -s /etc/init.d/pandora_agent_daemon /etc/rcX.d/S99pandora_agent_daemon


Where the X es el run level that you are starting

After, be sure that your pandora_agent_daemon is correctly off when you switch off.

ln -s /etc/init.d/pandora_agent_daemon /etc/rc0.d/K99pandora_agent_daemon
ln -s /etc/init.d/pandora_agent_daemon /etc/rc6.d/K99pandora_agent_daemon


### How delete all traps from the trap console

Q: I want to delete all the traps from my traps console without going sheet by sheet.Is it possible to do it also from an specific date?. A: To delete all traps that are in the traps console, you should execute, from the DB Interface extension, the following sql sentence

DELETE FROM ttrap;


To delete all the previous traps previous to10 July 2010 that there are in the traps conseole, you should execute, from the DB Interface extension, the following sql sentence:

DELETE FROM ttrap WHERE timestamp < '2010-07-10 00:00:00';


### How can I recover access to console if I forgot the password for my admin user ?

You will need to create another admin user to change the password for other users. In order to do that, open a shell in your Pandora FMS server and execute following command:

/usr/share/pandora_server/util/pandora_manage.pl /etc/pandora/pandora_server.conf --create_user admin2 none 1


This will create a new administrator user called "admin2" with password "none"

### How can I execute powershell scripts as a module

If you have your powershell located at C:\RutaDeScript\Script\script.ps1 you first need to call to your powershell interpreter like this call:

module_exec C:\WINDOWS\system32\WindowsPowerShell\v1.0\powershell.exe -Command "C:\RutaDeScript\Script\script.ps1"


### My /var/spool/pandora/data_in directory have million of .data files, how can I delete it?

Deleting millions of files in a directory is not possible with rm command, and find . -delete or find . | xargs rm can be slow. The best way to do it is with this command:

perl -e 'for(<*>){((stat)[9]<(unlink))}'


## Compatibility with Standards

### Does Pandora FMS fulfills PCI/DSS ?

The PCI DSS rule implies several requisites:

1. Safe traffic through coding and certificates. 2. Systems of Double access authentication 3. Security policies in the user management. 4. Possibility of audits in all fields and actions on the monitored elements 5. Audit data transfer to external logs managers.

1. Pandora FMS, at all levels(user operatin, communication between components) supports SSL encode and certificates in both extremes:

2. Double authentication. It is possible to deploy a double authentication system. The first one, at access level (HTTP) integrated with any OPensource or commercial token system. The second authentication. The second authentication, at an application level is managed by Pandora, that can be authenticate against LDAP or AD same way, or do it locally.

3. The user management is delimited by policies both at user profile level as operation visibility profile level defined as the Extended ACL system of the Enterprise version.

4. Pandora FMS, in its Enterprise version audits all the user action, including the information about the changed or deleted fields. It also includes a validation system with signature of these registers.

5. These audit logs are availables for their export through SQL and they allow to integrate in a third source for higher security, in time near to real one.

## Terminology

### What is a Timestamp?

A timestamp is a character sequence that informs about the date and hour in which an specific event toke place, for example when getting a data from an agent.

### What means SVN?

It means Subversion, which is the control system software of versions that is used in the Pandora FMS development.SVN is the name of the command line tool.

## Global changes / Administration

### I Want to change the IP of a lot of modules at once, how can I do ?

I've a switch with 230 checks...for some reason you change the switch IP, and thus you need to change the IP in the Main Agent view...and it's very likely you are going to want to change the IP of all the remote checks.

Change the IP address of the agent manually and alter the module configuration at once using the SQL Manager and the following SQL sentence:

UPDATE tagente_modulo SET ip_target = "10.0.0.1" WHERE id_target = "10.0.0.2";


## Database

### I get error "Can't connect to local MySQL server through socket '/tmp/mysql.sock'"

Check you have a /tmp/mysql.sock file, you may have the sock file in another place, like /var/lib/mysql/mysql.sock if that is the case, link to the asked file:

ln -s /var/lib/mysql/mysql.sock  /tmp/mysql.sock


### I lost my Mysql root password, how can I recover it ?

Do so:

service mysql stop

wait until MySQL shuts down. Then run

mysqld_safe --skip-grant-tables &

then you will be able to login as root with no password.

mysql -uroot mysql

In MySQL command line prompt issue the following command:

UPDATE user SET password=PASSWORD("none") WHERE user="root"; FLUSH PRIVILEGES;

Stop the instance of running mysqld

       kill ps aux | grep -e "--skip-grant" | grep -v grep  | awk '{ print $2 }'  Restart the mysql service normally  service mysql start  At this time your root password is reset to "none" and MySQL will now know the privileges and you'll be able to login with your new password: mysql -uroot -pnone mysql ### Using properly the mysql and mysqldump from command line Q: I attempted to use several references from documentation, but there is an error in the document. In several locations you indicate a user name of "root, but the default sql user name in your configuration file is "pandora". A: Always check your current credentials en /etc/pandora/pandora_server.conf. In some enviroments credentials could have changed. You should be able to access MySQL Pandora FMS database always with your Pandora user. By default, database should be called "pandora", and user "pandora", password will be a random string. This means that commands should be like this: To enter in mysql console: mysql -u pandora -D pandora -p <enter pass in console>  and to do a SQL dump (backup): mysqldump -u pandora -p pandora > file <enter pass in console>  ### Repeated data is not inserted in the database I am having some problem with Pandora's data server. For data that has similar value as previous data, my XML data got ingested by the data server but not inserted into the DB. I wonder this is a normal behavior of Pandora's Data Server. How can I change that? Is there any config file to configure that ?. This is the "normal" behaviour of Pandora FMS. See more details in the documentation chapter called "Pandora Engineering" about how Pandora FMS collect information and stores in the database. You can "avoid" the automatic compression using ASYNC modules (but only from Pandora FMS 3.2 or higher, prev. versions do the same for async and for standard modules). ### How delete all traps in the traps console Q: I want delete all traps in the traps console. Is posible to do it from a certain date?. A: To delete all traps in the traps console, you must run, in the DB interface extension the following, the following sql sentence: DELETE FROM ttrap; To delete all traps prior to July 10, 2010 in the traps console, you must run, in the DB interface extension the following, the following sql sentence: DELETE FROM ttrap WHERE timestamp < '2010-07-10 00:00:00'; ### Broken table This error display some SQL error messages like this Table './pandora/tserver' is marked as crashed and should be repaired, for example: SQL error: Table './pandora/tserver' is marked as crashed and should be repaired ('SELECT COUNT(id_server) FROM tserver WHERE 1 = 1 LIMIT 1') in /srv/www/htdocs/pandora_console/include/db/mysql.php on line 81 SQL error: Table './pandora/tserver' is marked as crashed and should be repaired ('SELECT COUNT(id_server) FROM tserver WHERE status = 1 AND keepalive > NOW() - INTERVAL 15 MINUTE') in /srv/www/htdocs/pandora_console/include/db/mysql.php on line 81  This problem happens when MySQL server is not switched off properly. To solve it enter in MySQL prompt and type: repair table tserver  ### The Pandora Console installation has mysql errors as "BLOB/TEXT column '<column>' can't have a default value From the 5.6 version of MySQL have configured by default "STRICT_TRANS_TABLES" and this mysql conf token made this kinds of problems. For to avoid this problem you must follow this steps: • edit the my.cnf file (configuration mysql file), it is in /etc/my.cnf or /usr/my.cnf or /usr/local/mysql/my.cnf • set the token sql_mode=NO_ENGINE_SUBSTITUTION,STRICT_TRANS_TABLES as sql_mode=NO_ENGINE_SUBSTITUTION • restart the mysql server /etc/init.d/mysql restart ### Database error when starting the service pandora_server It is possible that attempt to start the service pandora_server will find this error in the log With verbosity 10 you get this: DBI connect('pandora:localhost:3306','pandora',...) failed: Can't connect to local MySQL server through socket '/tmp/mysql.sock' (2) at /</usr/local/bin/pandora_server>PandoraFMS/DB.pm line 108.  With verbosity 1 or 0 you get this: DBI connect('pandora:localhost:3306','pandora',...) failed: Access denied for user 'pandora'@'localhost' (using password: YES) at /</usr/bin/pandora_server>PandoraFMS/DB.pm line 113.  Both cases you first need to check if password is correct. Is that is correct and it should work, check the mysql socket exists in this path ( /tmp/mysql.sock ). If not, link current mysql sock to /tmp/mysql.sock, usually: ln -s /var/lib/mysql/mysql.sock /tmp/mysql.sock  Try again. Also, can help to change in pandora_server.conf the parameter dbhost with the ip 127.0.0.1 instead of localhost. If the path is correct, we must review again the login credentials and if mysql service is running. ## Networking ### Recon doesnt detect my network topology correctly If you're executing Pandora FMS under a virtual enviroment and you're using a "shared network" (some times called NAT or Host network), the network is not "real" and cannot be calculated. This is easily tested by doing a simple traceroute from commandline, for example: traceroute -n google.com  You should see 7-15 steps until reach the final endpoint in a shared network you will only see one step. Use a bridged/real network and that will work. Si ejecuta Pandora FMS en modo "network bridge" o en un host real, le funcionará correctamente. ### Problems with SNMP and Debian / Ubuntu In recent Debian / Ubuntu versions (this is written in April 2011), SNMP agent comes with a non-enabled MIB tree, that means, SNMP agents will not translate or understand any "word" of MIB address, only will understand numeric OID, thats a problem for most SNMP software, so you will need to re-configure it. Two steps: 1. Install package mibs-downloader 2. Edit /etc/snmp/snmp.conf and remove all the uncommented lines (or comment them). ### SNMP Trap console doesnt work and log says: "couldn't open udp:162" This happen because the snmptrapd system daemon has started before Pandora FMS snmptrapd daemon, and has the port blocked (in use). Stop the sistem daemon: /etc/init.d/snmpd stop  (Could be different in other systems different than suse). Restart pandora server /etc/init.d/pandora_server restart  Be very useful to delay the system SNMP startup after the Pandora FMS server start, to avoid this conflict in the future. ### Kernel message "possible SYN flooding on port 41121. Sending cookies" This problem related with having a lot of TIME_WAIT connections (netstat -an | grep TIME_WAIT | wc -l > 20000) Solution, tune up your kernel with these parameters echo 32000 > /proc/sys/net/ipv4/tcp_max_syn_backlog echo 30 > /proc/sys/net/ipv4/tcp_fin_timeout  Do not use it with load balancing / clustering enviroments: echo 1 > /proc/sys/net/ipv4/tcp_tw_recycle  ### Boolean ICMP Network module showing critical status while conectivity with the agent it's being right This problem appears when the first package from the ping ejecution doesn't achieves the recipient. If icmp_checks parameter is set as 1 inside the Server Configuration File(Default path: /etc/pandora/pandora_server.conf) it will show critical value.That is why it only looks foward the first attemp from the ping command. Module status would be also critical if icmp_checks value is over than 1,the reason is that this parameter only executes "independent" pings so check results would always be wrong. Solution would be using a script which executes a ping sending as packages as we want on its execution.So if a machine doesn't answer to the first package we should fix it modifying the script with more than 1 number of packages so the result will be succeed. Using the pingcheck.sh script would bring us the solution.It would deliver 1 if the machine answers or 0 if it doesn't. Script code: #!/bin/bash if [ -z "$1" ]
then
echo "Syntax:"
echo " "
echo "pingcheck.sh <count> <timeout> ip_address"
echo " "
exit
fi

COUNT=$1 TIMEOUT=$2
IP=$3 ping -c$COUNT -W $TIMEOUT$IP 2> /dev/null > /dev/null
$snmpwalk -v 3 -a MD5 -A authsample -X encsample -l authPriv -u paco sample_target system  The tests shown above are to a target called 'sample_target' for the MIB-2 system tree. Note: Different implementations of net-snmp on different Operating Systems may work slightly differently. For example, OpenSUSE does not need the net-snmp-devel package and the rwuser is created in a separate snmpd.conf under /usr/share/snmp (which is created automatically if it doesn't exist). ## Agents ### There's a memory leak in Pandora FMS Agent 4.x process under RHEL/CentOS/Fedora If you are using a RHEL/CentOS 5.x/Fedora platform, you might notice a memory leak in Pandora Agent process under versions 4.x. The problem resides in a bug inside the Threads Perl library in the versions packaged by default (5.8.8 i.e) which affects these distros and is not definitely fixed until versions 5.13.9 or above. There are multiple choices to solve this problem: a) Either upgrade your OS/Perl version... b) Or comment the following lines inside /usr/bin/pandora_agent: eval { local$SIG{__DIE__};
require threads;
require threads::shared;
require Thread::Semaphore;
};
if (!$@) {$Sem = Thread::Semaphore->new;
threads::shared::share (\$Xml); threads::shared::share (\$Sem);
}


This would let us execute Pandora Agent without agent threading support, thus avoiding the memory leak inside Threads library.

In the last case, please don't forget to disable the agent_threads parameter token inside /etc/pandora/pandora_agent.conf.

### File collections don't work

If you are using a UNIX/Linux platform, first of all check you have unzip command installed because is necessary to use file collection. Furthermore the user that executes Pandora FMS agent must can execute unzip command from its path.

After install unzip package you must check the content of collections folder. The collections folder is in:

<pandora_agent_path>/collections


By default the path is:

/etc/pandora/collections


You must delete each *.md5 file that doesn't have a folder with the same name in collection folder. The agent will download the collections in the next execution cicle.

If you are using Pandora FMS agent for Windows platforms first of all check that you can execute unzip command from path. Unzip command is installed with Pandora FMS agent so you don't need to install it.

After that you must check collection folder to ensure always si right. The path of collection folder is:

<pandora_agent_path>\collections


By default the path is:

C:\Archivos de Programas\pandora_agent\collections.


You must delete each *.md5 file that doesn't have a folder with the same name in collection folder. The agent will download the collections in the next execution cycle.

### Windows Service PandoraFMSAgent cannot be initialized

1. Check if you have installed the Pandora FMS Agent with Administrator rights and if its service's got SYSTEM rights. Otherwise, this service won't work.

2. Make sure there's no PandoraAgent.exe file located in the same path where the Pandora FMS Agent installer is located. Otherwise, the service will point to that binary file instead of the one installed by default in the pandora_agent folder, and an error which doesn't allow the Agent to initialize will be generated, since that .exe isn't in the same path of the rest of the needed Pandora FMS Agent files.

### Pandora FMS Server downs

The first thing you should do to find the cause is to examine the file /var/log/pandora/pandora_server.error and according to the following possible error messages, there are the following solutions:

Starting Pandora FMS Server. Error logging activated.
DBD::mysql::st execute failed: Table 'pandora.tagent_module_inventory' doesn't exist at /usr/local/share/perl/5.10.0/PandoraFMS/DB.pm line 199.


In this case is because in previous installations you left files of the Pandora Server Enterprise installation. Specifically, it should be the file /usr/local/share/perl/5.10.0/PandoraFMS/Enterprise.pm. If you eliminate it, the Pandora Server will be not down.

### I can't see any error in the PHP error log file

The configuration of PHP error log is located, same as the rest of configuration in the php.ini file. From version 1.2 we have added an option to the file ./include/config.php of the Web Console in order it will not show any error. This have not consequences in the rest of the applications already installed, that will continue using the php.ini guidelines. It only affects to the Pandora Web Console. It is possible to change this performance modifying at ./include/config.php the line

     error_reporting(0);


with something like

     error_reporting(E_ALL);


It is recommended to check the PHP documentation to know other posible values of this function.

To see errors check always file at /var/log/apache/error.log or similar file.

### I have problems running agent for Windows 2008 in 64 bits

Agent has been tested in 64bit environments and works. Problems could be because two reasons:

1. Running exec agents, because binary utils provided by Pandora FMS agent are compiled for 32bits and sometimes have problems running under a 64bit service. Check if under a shell command all utils your are using (gawk, cut, grep) are working fine. If not, try to replace by another executable or use another way to get around the problem.

2. Problems in logevent parsing/monitoring. This is due because a missing DLL (PDH.dll), this library must be in "C:\windows\system32", if it's not present, try to copy from another 64-Bit Machine. That's not uncommon, looking at google hits, it is often removed by some uninstallers.

### I get problem creating table (errno: 150) in MySQL while trying to migrate to 3.0

You probably get an error similar to:

ERROR 1005 (HY000) at line 101: Can't create table './pandora/talert_template_modules.frm' (errno: 150)


This is due a problem in MySQL because some fields has no the expected type. id_agente_modulo field in 2.1 should have bigint(10) type. If you have migrated from a 1.x before you will have this problem. Before running the migration tool to 3.0, enter this command in the mysql console:

ALTER TABLE tagente_modulo MODIFY id_agente_modulo bigint(10) unsigned NOT NULL auto_increment;


And try to run again the migration tool. Please remind that 2.x and 3.x versions needs to have InnoDB support enabled in your MySQL database server

Another possible explanation is that your MySQL is too old and doesn't support some foreign key syntax. Be sure you are running at lest a MySQL 5.1 version-

### Pandora FMS Server debian (.deb) package fails to install

This error is shown when trying to start Pandora FMS server:

# /etc/init.d/pandora_server start
Pandora FMS Server is not running, cannot stop it.
Can't locate PandoraFMS/DB.pm in @INC (@INC contains: /etc/perl /usr/local/lib/perl/5.10.1 /usr/local/share/perl/5.10.1 /usr/lib/perl5
/usr/share /perl5 /usr/lib/perl/5.10 /usr/share/perl/5.10 /usr/local/lib/site_perl .) at /usr/bin/pandora_server line 28.
BEGIN failed--compilation aborted at /usr/bin/pandora_server line 28.
Cannot start Pandora FMS Server. Aborted.
Check Pandora FMS log files at '/var/log/pandora/pandora_server.error & pandora_server.log'


Just copy the installed PandorFMS perl library to another directory:

cp /usr/local/share/perl/5.10.0 /usr/local/share/perl/5.10.1 -R


### Pandora FMS crashes and the log message said "DBD::mysql::db do failed: Duplicate entry '1808516' for key 'PRIMARY'"

Your MySQL database has been corrupted and the auto-incremental field has been desynchronized. To resolve this, just update the last value of the auto-incremental field the the table has problems

alter table xxxxx Auto_increment = 1234;


Where "1234" is a highest value possible + 2. You can get this value for example with:

select MAX(primary_key_field) FROM xxxxx;


In Pandora FMS most table corruption should have in tagente_datos, tagent_access, tagente_datos_string or tevento. This could be an example or how to fix the problem in the tagente_datos_string

mysql> select max(id_tagente_datos_string) from tagente_datos_string;
+------------------------------+
| max(id_tagente_datos_string) |
+------------------------------+
|                      1900270 |
+------------------------------+

alter table tagente_datos_string Auto_increment = 1900272;


In MySQL Cluster problem be related with a bad sync between nodes: [4] (ndb_autoincrement_prefetch_sz parameter)

If this doesnt fix the problem, try to use this settings in the SQL Node, editing your my.cnf file:

ndb-autoincrement-prefetch-sz=1
auto_increment_increment=5
auto_increment_offset=5


This also can happen because a table has a primary key with auto increment and has a very small top limit:

For example: tsesion is defined by default with int(4) this could be too low for huge systems, to fix this, just alter table to set more allocatable PK:

alter table tsesion modify ID_sesion bigint(20) unsigned;


### I have a 3Com Switch and I want to monitor with SNMP, how can I start ?

1. Try to locate the MIB for your device, for example, 3COM OfficeConnect swith in Google shows me this.

Could be a good starting point, a device could have different MIB files. Mib files are text files (.txt or .mib), readable from a simple text editor.

2. Download a MIB browser, there are a lot of free tools, for example:

You can choose others, of course. Just take a look on different google searches.

3. Load the MIB into your mib browser. Each program do this differently.

4. "Browse" your device with your MIB browser, you will need a IP address accesible from your host, and of course the SNMP community (a kind of password) who allow to "read" data remotely.

5. Locate some "items" usable for you, and write it down in numerical format, like 1.3.4.2.5.6.3.23 Thats "weird numbers" are called "OID", and thats what need Pandora FMS to grab data from your device.

6. Create a network snmp module (probably incremental data (or generic_data_inc) type), and use the IP of your device, the OID you've collected and the SNMP community.

7. If everything it's ok the first data you willl colect is a 0, wait to collect a second data and data collected will be "items per second". Most SNMP information is given as a incremental data (a delta) and you need to grab at least 2 data to calculate the difference.

8. You can also get status information (port status) from SNMP devices, and text information (like IOS version from a Cisco Router) for example. There are types not supported at this time (timeticks) but probably in the future will be supported.

SNMP monitoring is hard at the beginning, but once you get it, all SNMP monitoring it's almost the same, so don't give up! ;-)

### I get alerts every 5 min until problem it's fixed, how can I adjust to notify only once until problem it's fixed ?

Set alert threshold to 1 day (or more), set minimun alerts to 0 and max to 1. In this way Pandora FMS just ejecute an alert per day while problem continues un-resolved.

### In SUSE I got my /tmp full of temp files, how can I automatically manage ?

Just edit /etc/sysconf/cron and define there your policy of deletion of "temp" directories. Could be also used to purge old pandora data in /var/spool/pandora/data_in (Old _BADXML_ files, for example). SUSE >11.x has a powerful script to manage temporal directories/data.

### Pandora FMS shutdown and I get errors with "Mysql has gone away" in my logs

Edit your my.cnf (Main config file of MySQL) and alter following parameters:

wait_timeout = 40000
connect_timeout = 40000
interactive_timeout = 40000
max_allowed_packet=32M


If you're using PHP 4.3 or higher (or not sure(, in the console, edit config_process.php, and alter line mysql_pconnect() statement to mysql_connect(). For some reason PHP 5.3 DOES NOT LIKE persistent connections and this make MySQL very silly about timeouts, resulting errors with "has gone away".

In some systems with several physical servers or a lot of threads tserver table could generate some locks. To avoid that, just alter the type of table, using this SQL syntax:

UPDATE tserver engine = MyISAM;


### Pandora FMS don't send properly my emails

First, check your pandora_server.conf properties and make sure that your mta_* parameters are ok and your MTA (Mail Server) can forward your messages. If you're using MTA authentication make sure that Sendmail.pm (Usually at /usr/share/perl5/Mail/Sendmail.pm) is version 0.79_16 or above, version 0.79 don't support AUTH methods. If your version is old, just replace by 0.79_16, you can get it here: [5]. Another option is to install from CPAN. Old versions works perfectly for MTA without authentication.

### Enable WMI Service in Windows XP

Problems are because:

1. There is no connection to WMI because Firewall. 2. Remote DCOM is not enabled. Follow steps in Microsoft KB875605 [6] 3. Other problems can happen (WMI Corruption, or ACL disabled) check this URL [7]

### After install a Windows agent in my Windows 2003 server it doesnt work, nothing is copied to server

In some systems, adding paths to SYSTEM is not inmmediate and need reboot to get the new path (pandora_agent/util) inserted in global %PATH% variable. Another way is copy contents of pandora_agent/util in a directory is currently on Path, like c:\windows. If you're using tentacle (default) to copy XML data files, it is mandatory to copy at lease tentacle_client.exe to somewhere inside the current path.

Of course, if you reboot your server, it will take the new Pandora FMS util directory in the path and everything will be ok.

### How can I use PERL 5.8 in my old Solaris 8 ?

The best way is to install BlashWave packages. There are a lot of opensource packages in the Lastware package system, who works like the apt-get / yum / zypper system, grabbing the repository data, and installing on demand, resolvind dependencies. Check for more information in http://www.blastwave.org/howto.html

### Whatever action I take, I get prompted again for login credentials.

Is PHP cgi runing under different user than /var/lib/php/session had permissions ?

### I have all my Pandora SNMP Console setup fine, but I don't receive any trap

Check contents of your pandora_snmptrap.log. This should be like:

tail -f /var/log/pandora/pandora_snmptrap.log


If you have "No access configuration - dropping trap." lines is because you have not configured the access of your snmptrapd daemon. Use this commands to solve the problem:

echo "authCommunity log public" >> /etc/snmp/snmptrapd.conf

/etc/init.d/pandora_server restart


And now should work.

### I had recurrent problems with some servers generating a lot of BADXML files

The solution for common problems (FAQ) helped (changing the encode type), but there are more tips:

1. Check if the modules in /etc/pandora_agent.conf have *at least* this lines for each module:

module_begin
module_name
module_type
module_exec
module_end


I don't have sure, but you should keep the lines in this order to avoid BADXML.

2. Check if you have a return data value equal to "0.00". I don't know why (maybe a bug?) but all my agents that have this return value generate a BADXML. So, I change this to simply "0" and the XML worked perfectly.

### Ubuntu 9.04, Fedora XX, Redhat XX or SuSe XX doesnt have wmi-client package, what I can do to use WMI ?

Just download the wmiclient provided for "generic linux" in our download section (32bit) it works perfectly on Ubuntu 9.04, Fedora and other Linux distros because is a static compiled binary.

 http://sourceforge.net/project/downloading.php?group_id=155200&filename=wmi_client_linux.tar.gz&a=54919695


If you have problems running it or want to compile yourself, you need to get sources of latest version of Samba 4.x version (3.x don't have WMI or WinExe support). After compile and link you will get the wmic tool. Does this ONLY if provided binary (see above) doesn't work for you.

### How can I upgrade a stable version with updates ?

For the latest stable version (3.x) code is public and available on branches/pandora_3.x directory in our code repository, you can get it with Subversion client using this command:

svn co https://pandora.svn.sourceforge.net/svnroot/pandora/branches/pandora_3.x


Just copy new files over old files BUT be sure to backup everything (including database), just to be safe.

Also, consider using Pandora FMS Enterprise version [8] to keep up-to-date automatically your system.

### How can I Start/Stop a Windows service on demand from Linux (To exec in an alert from Pandora FMS)

You need an updated version of Samba (3.x) and administrative credentials to access remotely (RPC call) to a Windows server. In this example we will use 192.168.50.121 like target server, "Administrador" as user and "pepe" as password. We want to work with a service called "PandoraFMSAgent" and also see the full list of services:

To get a list of process:

net rpc service list -U administrador%pepe -I 192.168.50.121

.
. full list


To show the status of a process:

 net rpc service status  PandoraFMSAgent -U administrador%pepe -I 192.168.50.121

PandoraFMSAgent service is running.
Configuration details:

Controls Accepted    = 0x5
Service Type         = 0x10
Start Type           = 0x2
Error Control        = 0x1
Tag ID               = 0x0
Executable Path      = C:\Archivos de programa\pandora_agent\PandoraAgent.exe
Load Order Group     =
Dependencies         = /
Start Name           = LocalSystem
Display Name         = Pandora FMS agent


To stop a process:

net rpc service stop  PandoraFMSAgent -U administrador%pepe -I 192.168.50.121 .

PandoraFMSAgent service is stopped.


To start a process:

net rpc service start  PandoraFMSAgent -U administrador%pepe -I 192.168.50.121

Successfully started service: PandoraFMSAgent


### Pandora server is receiving data from an agent, and show latest data correctly, but graph don't show anything. Agent is working and last data is correct. Raw Data table is also empty

Probably your agent date is not sync with Pandora FMS. Check date in remote system and compare with the local date. Check timezones in both systems. You can setup agent (in 3.0 version) to "not use" its local time, and in 3.1 version you can define a different timezone to made the calculations and plus/substract time depending on timezone of agent.

### How can I make a backup of database?

A simple mysqldump will dump your database contents. A blank database with the same name (without data), should be enought to receive dump generated by mysqldump.

Make the backup

mysqldump -u root -p pandora > /backup/pandoradb_backup.sql


Restore the backup (from scratch)

mysql -u root -p
create database pandora;
use pandora;
source /backup/pandoradb_backup.sql


Probably you also need to give access to your console pandora user:

grant all privileges on pandora.* to pandora@localhost identified by 'mypassword';


### I have setup a alert for a module, but when it comes a bad "peak" it doesn't fire the alert, if it is a proc module, it is reflected on event log, but alert doesn't fire

Check that your alert has a "min alerts" of 0. If it has a value of 1, for example, it means that needs at least one "bad" value before activate the alert. In this case, with a value of "min alerts" of 1, you need at least two bad values (in the same period defined by time threshold parameter) to fire an alert.

### When I start the network server, I get a message 'segmentation fault' and server seems to stop running

Check your /etc/pandora/pandora_server.conf file and see how many network_threads are you using. If you're using more than 40-50 threads in a PIV with less than 1GB, probably your machine is not able to manage so many threads. Try to reduce. A single network thread is enough to manage about 100/200 modules, probably more depending on your setup and network latency needs.

### I'd just installed pandora server on a solaris 10 machine. Is there a way to skip the error "This isn't GNU/Linux" ?

Pandora is not well tested on Solaris systems, but you could try to use in Solaris at your owk risk. Just edit Config.pm file and search:

die "[ERROR] This isn't GNU/Linux.


Comment this line and Pandora FMS should start without warning about that SO is not Linux.

### Adding mibs to Pandora FMS

Q: does anyone know how to load HP and/or compaq MIBS into pandora for the SNMP Walk functionality?

A: Pandora FMS do not manage directly SNMP, it relies on GNU/Linux Net-SNMP libraries that are managed by system, so editing /etc/snmp/snmp.conf you can define MIB loading. You should configure your the linux system that runs Pandora FMS Console and add MIB files to /etc/snmp/snmp.conf file (and restart apache). This are /etc/snmp/snmp.conf directives for MIB management:

mibdirs DIRLIST

specifies a list of directories to search for MIB files. This operates in the same way as the -M option - see snmpcmd(1) for details. Note that this value can be overridden by the MIBDIRS environment variable, and the -M option.

mibs MIBLIST

specifies a list of MIB modules (not files) that should be loaded. This operates in the same way as the -m option - see snmpcmd(1) for details. Note that this list can be overridden by the MIBS environment variable, and the -m option.

mibfile FILE

specifies a (single) MIB file to load, in addition to the list read from the mibs token (or equivalent configuration). Note that this value can be overridden by the MIBFILES environment variable.

### Keepalive module doesn't work for me

Q: According to last fms1.3 beta .... I can not make the visual console to show in red color when the computer or server is not on / not alive. Setting in map_builder: Single graph zixzax / agent_keepalive server 320 70 0 0. It shows the picture somehow but it suppose to show in red instead of green color since i set the zixzax down/off.

A: Keepalive only set to "down" where there is NO CONTACT, it's a very special module (that currently have about 10% of support questions Very Happy).

If you have five modules for an agent, for example:

1. ICMP check 2. Four Agent modules 3. Keepalive module (by default)

And your agent is down (because machine is dead, for example), the ICMP module is "working", and reporting that machine is down, so if you have a ICMP check Keepalive module never become "DEAD" because there is at least one module working, so you need to use ICMP check to draw agent info on your map.

### There is a lot of configuration required, prior to install Pandora FMS that isn't covered in the quick installation guide

Q: I'm not too experienced with Apache, Perl or even Linux. I work mostly with network design and support. So I wanted to implement some sort of monitoring, and Pandora seemed like an OK choice. But I used to think I could follow a manual letter by letter, until now that is... Is there alot of configuration required that isn't covered in the quick installation guide. As in, does it require arbitrary configuration of Apache or anything of the kind? .

A: If you're working with ubuntu, you don't need to "adjust" or configure neither apache or PHP, simple install all dependencies:

apt-get install apache2 libapache2-mod-php5 php5-mysql mysql-server php-pear php5-gd php5-snmp snmp snmptrapd snmpd


This should install all server and console dependencies in your system in a Ubuntu server. Perl dependencies are detailed on Quick Install Guide

### I would like to know how to install more than one pandora agents in the same machine

If you take a look to pandora_agent_daemon, in the first 20 lines of that script you have a bunch of variables that need to rewrite:

PANDORA_PATH=/etc/pandora
DAEMON=/usr/bin/pandora_agent
PIDFILE=/var/run/pandora_agent.pid
LOGFILE=/var/log/pandora_agent.log


Just create a directory /etc/pandora2

And copy your /etc/init.d/pandora_agent_daemon to /etc/init.d/pandora_agent2_daemon with lines shown before modified to do not interfere with first agent, something like:

PANDORA_PATH=/etc/pandora2
DAEMON=/usr/bin/pandora_agent
PIDFILE=/var/run/pandora_agent2.pid
LOGFILE=/var/log/pandora_agent2.log


Copy your pandora_agent.conf config to /etc/pandora2 and if you want to use a pandora_user.conf also copy to this location.

### My Pandora FMS Agents don't connect with Pandora FMS server, or my Pandora FMS Agents ask me for SSH password when try to connect. Implementing SSH authentication

I'm asked for a password when make connection for copying XML data. I tried connecting through SSH but still didn't work.

A: Before trying start a remote pandora agent you must be sure that SSH Key auth its working, for try this, execute in a host with pandora agent installed: ssh pandora@pandora_server.

Pandora_server is the hostname where pandora server its instaled. If you can connect directly, automated SSH Auth key its working OK and pandora agent must be able to connect Pandora Server.

Please refer Pandora FMS Server Install documentation on how to install automated Pandora SSH key auth. You need to do following steps in order:

1. Create "pandora" user in your Pandora FMS data server system. Be sure to give "pandora" user privileges to write in incoming directory for data files (/opt/pandora_server/data_in for 1.2 version or /var/spool/pandora/data_in for 1.3 version).

2. Create ssh key for root using (or the user using running Pandora FMS agent) in each of Pandora FMS Agent Systems, with command:

ssh-keygen -t dsa


This would generate a file called /root/.ssh/id_dsa.pub

Copy contents of that file over the file (create if not exists) /home/pandora/.ssh/authorized_keys with permissions only to read/write for pandora user in Pandora FMS Data server system.

3. From root user in the Pandora FMS agent system, test the connection with command:

 ssh pandora@pandorafms_data_server


If it's the first connection, it should ask you about the authenticity of host's fingerprint. Say yes, and you should enter system without problems. If not, SSH authentication is not correct, and you need to review previous steps carefully.

4. Run the agent, it should copy datafiles over Pandora FMS data server incoming data directory.

### My agents on FC4 machines cannot send data to the Pandora Server (SSH Transfer mode)

I have installed agents on fc4 machines and my pandora server on fc5 and I also have an agent on the fc5 machine running the pandora server .The agents on the fc4 machines cannot send data to the pandora server but the agent on the machine running the pandora server(fc5) works ok.I also have a problem with generating the public keys.

A: Before trying start a remote pandora agent you must be sure that SSH Key auth its working, for try this, execute in a host with pandora agent installed: ssh pandora@pandora_server.

Pandora_server is the hostname where pandora server its instaled. If you can connect directly, automated SSH Auth key its working OK and pandora agent must be able to connect Pandora Server. Please refer Pandora Agent documentation on how to install automated Pandora SSH key auth.

### When I try to see any graph, I don't see any image, and if I try to see the broken icon, the page shows Fatal error: Call to undefined function: imagetypes()

A: imagetypes() is a GD function, check if you have installed the GD library. Also, take a look at your php.ini file, to see if you load the gd.so library. To do so, add the next line to the file:

extension=gd.so.


### Pandora Web Console doesn't run and I get some MySQL errors

A: If you have created Pandora DataBase and added the Pandora user in the database, review your include/config.php file to change the database, host user and password with your own data. Also check connectivity with MySQL Server by connecting by hand.

### I get Mysql error "client does not support authentication protocol"

I use MySQL 4.1 or MySQL 5.0, and when I try to authenticate user I get the next error: Warning: mysql_connect() [function.mysql-connect]: client does not support authentication protocol requested by server; consider upgrading

A: In MySQL 4.1 there's a new type of authentication different that 4.0 or 3.23 and PHP isn't compiled for this version, so it can't connect. There are a few different solutions, first is to compile PHP against the MySQL 4.1 client library. If that doesn't work or you can't do that, then you can read this text about how to fix it. Basically, you need to save the pandora user password with old hashing algorithm:

mysql> set password for 'pandora'@'localhost' = old_password('pandora');


### I get Pandora FMS Console error: You don't have access to this page

Q: I install Pandora Web Console and when I login as admin and try to access any of the links, I get an error: You don't have access to this page

A: You don't need this change in Pandora 1.2 and newer. This happens because the session isn't initiated. Review if you have the next line in your php.ini file:

session.auto_start = 1


Also take a look at the session.save_path parameter in the same file, to ensure you have access to this directory (usually /tmp).

### How can I run Pandora agent in IPSO / FreeBSD?

A: Due to a unknown bug in IPSO, sometimes it detects a different number of Pandora running processes and detects another Pandora agent running. If this happens, try to launch Pandora agent with:

$nohup ./pandora_agent.sh &  ### Can I run any Pandora agent in Cisco? A: No, you can't. But you can run a satellite agent running in a nearby host (a host that has access to Cisco SNMP interface) and run a SNMP remote agent in a Pandora compatible system. With Pandora 1.2 you could run a remote network agent monitoring ICMP, TCP, UDP, and SNMP parameters of Cisco equipment. You also could setup a custom Pandora FMS agent that uses expect to get data and report to Pandora FMS Data server in provided XML interface. ### Which is the load Pandora can support? It depends on your architecture. If you have a single-server (MySQL, Pandora Server and Pandora Console) machine, about 1000 agents (in v3.0), with a total of 25-30 individual data items (modules) per agent. Hardware needed for that is a "cheap" Server, with a dual core CPU (2.4Ghz), 4GB of RAM and a 7500rpm Harddisk. ### For more powerful setups (1000 agents), can I use multiple servers, using a high availability solution? Yes. There is a HA solution and multiple high-load. Please read the documentation in depth, all information is explained there. ### Can I use Crystal Reports with Pandora? A: Yes, you can since database schema is open. Check our documentation about database schema explanation of directly, read the code in our development repository. ### After a problem with MySQL Server (shutdown, restart) my Pandora Server stops. There are any data lost? A: Pandora Server automatically shutdown if it can not connect with MySQL Server. If Pandora Server is not running, data packets are storing in Pandora Server incoming directory. When Pandora Server restart again, it will process that packets and no data will be lost. ### Where can I download the srvany.exe and instsrv.exe files? A: Microsoft has released this files into the Resource Kit for Windows 2000 and for Windows XP and Windows 2003. You can download it freely from Microsoft, but Only for XP and 2003. This file was used for Pandora FMS older versions (1.1) but could be used to program as service the Perl Unix agent running on windows with the Active State Perl. Thats a nice hack :-) ### How do I convert the Pandora Windows agent 1.1 keys into Pandora Windows agent 1.2 keys? A: Disclaimer: Your old keys must be in DSA format. If they are not in this format, or you are not sure, generate a new pair of SSH keys. In order to convert your ppk keys into OpenSSH DSA format (id_dsa and id_dsa.pub files) you will need Putygen utility. Open Putygen, go to "File" menu and click "Load", then open your ppk private key. Open "Conversions" menu and select "Export OpenSSH key". Save it as "id_dsa". To export the public key, in the main window of Putygen you can see a textbox on the top which title is "Public key for pasting into OpenSSH authorized_keys file". Select all the text in the box and copy it in the clipboard. Create a text file with notepad and paste the text into the file. Save the file and close notepad. Rename this file to "id_dsa.pub" and thats all. ### How to generate a pair of SSH keys for Pandora Windows agent ? (SSH Transfer only) A: Open Putygen and select SSH2-DSA at the bottom of the main window. Then click "Generate". The program will ask you to move the mouse over the blank area to generate randomness. Once the key has been generated, export it by opening "Conversions" menu and select "Export OpenSSH key". Don't use any passphrase when exporting it, so click "No" if a warning dialog appears. This will export the private key, which you must save as "id_dsa". To export the public key, in the main window of Putygen you can see a textbox on the top which title is "Public key for pasting into OpenSSH authorized_keys file". Select all the text in the box and copy it in the clipboard. Create a text file with notepad and paste the text into the file. Save the file and close notepad. Rename this file to "id_dsa.pub" and that's all. ### How to configure the Pandora server to accept the keys from Pandora FMS Windows agent (SSH Transfer) ? A: Connect to your server and go to /home/pandora/.ssh . If this directory does not exist you must create it. Open "authorized_keys" file with your favourite editor (you must create it also if it does not exists) and paste the public key in a new line of the file. This should work now, so run pandora windows agent SSH test again with: c:\path\to\pandora> PandoraAgent --test-ssh  ### I have Net::SNMP installed but Pandora still asks me for SNMP.pm A: net-snmp-perl and Net::SNMP are two different things. net-snmp-perl is the perl bindings for the snmp library at http://net-snmp.sourceforge.net/, which provides an SNMP.pm without the Net:: prefix. Net::SNMP is a perl module from http://search.cpan.org/dist/Net-SNMP/ which provides Net::SNMP (i.e. it would be /usr/lib/perl5/vendor_perl/5.8.5/Net/SNMP.pm). You can find RPMs for this package in Dag's repo: http://dag.wieers.com/packages/perl-Net-SNMP/ UPDATE: With Pandora FMS 3.0 this library is not needed anymore. ### Error: Call to undefined function imageantialias() in Pandora Console A: The problem resides on the jpgraph.php file: Line 5791 and 5792.  If you take a look on that lines you'll find this: $this->use_anti_aliasing = $aFlg; imageantialias($this->img,$aFlg);   To solve the bug just change those lines into these:  $this->use_anti_aliasing = false;
//imageantialias($this->img,$aFlg);  


### Problem starting the first time Pandora Agent for Unix (SSH Transfer mode)

Q: When i enter

[root@localhost root]# /opt/pandora_agent/pandora_agent_daemon start
Pandora Agent is now running with PID 14786


Then it will display

[root@localhost root]# The authenticity of host '192.168.182.157 (192.168.182.157)' can't be established.
RSA key fingerprint is 9c:11:1b:ac:44:2e:10:98:16:75:00:58:34:18:5b:2d.
Are you sure you want to continue connecting (yes/no)?


when I press yes it still show those message. what is the problem?

A: Yep, it's normal. Stop the agent. Make the first connection to the server manually. I mean, ssh pandora@pandora_server_ip, press yes. That will also make you to be sure you set up the ssh publickey configuration successfully. After doing this, launch the agent again and everything should work out ok for you.

### How to run PandoraFMS agent on the system startup

Q: I've installed the pandora_agent on my Linux system and I want it to run every time the computer starts up, how can I do that automatically?

A: First of all, copy pandora_agent_daemon to /etc/init.d

Then if you wanna pandora_agent_daemon starts in your system boot, just:

ln -s /etc/init.d/pandora_agent_daemon /etc/rcX.d/S99pandora_agent_daemon


Where the X is the run level you're booting into.

Then, to make sure your pandora_agent_daemon is being correctly switched off when you make a shutdown, or poweroff...

ln -s /etc/init.d/pandora_agent_daemon /etc/rc0.d/K99pandora_agent_daemon
ln -s /etc/init.d/pandora_agent_daemon /etc/rc6.d/K99pandora_agent_daemon


### Problems with PHP-PEAR RPM

Q: I installed php-pear rpm package but the graphics do not work though

A: By default, php-pear is installed in /usr/share/pear

To solve that just:

 cp /usr/share/pear/PEAR.php /var/www/html/pandora_console/reporting/


(Check out your pandora_console PATH) Then, just make apache able to read that file:

 chown apache PEAR.php


(Check out which user is running the apache server, could be either apache or www-data)

### Problems with "Unknown agent" in the WebConsole"

Q: I created the agent in the webconsole but it has no data. Looking at the logs I found this error:

  2007/07/11 14:13:45 ulises_Data [V1] ERROR: Received data from an unknown agent


But the agent is created in the webconsole

A: You need to install: libxml-simple-perl

  apt-get install libxml-simple-perl


### I need more decimals in the definitions of SLA's, how can I get it ?

A: Altering database with following SQL sentence (MySQL):

ALTER TABLE treport_content_sla_combined MODIFY sla_limit double(18,3) default NULL;
ALTER TABLE treport_content_sla_combined MODIFY sla_min double(18,3) default NULL;
ALTER TABLE treport_content_sla_combined MODIFY sla_max double(18,3) default NULL;


This will give you three decimals, if you need more, just alter the table again. This is for the SLA's only.

### I need more precission for the postprocess field

A: Altering database with following SQL sentence (MySQL):

ALTER TABLE tagente_modulo MODIFY post_process double(18,13) default NULL;


### Can't locate PandoraFMS/DB.pm on Debian after install Pandora FMS 3.0

A: It seems to be a problem detecting the perl version to solve it just copy it, for example:

# cp /usr/local/share/perl/5.10.0 /usr/local/share/perl/5.10.1 -R


### PDF Reports without graphs

A report with graphs, this report show graphs in the html view, but when the same report in PDF the graphs don't show. And this bug is cause to the PHP configuration (normally this file is in /etc/php5/apache2/php.ini), in this configuration you have a disable the flag to pass session as parameter. Well, for to set on the flag, you can change the line "session.use_only_cookies = 0". The reason is becase to make the PDF, the server auto-get the image graph and use the user session as parameter.

### PDF Reports not have graphics and / or are slow

One relatively common problem in the PDF reports is when the external URL monitoring cannot be resolved from Pandora FMS Console. We must verify that the URL to customer access, can be resolved and accessed from the server where is installed Pandora, for example:

 https://monitoring.mydomain.com/pandora


It may be that the server is behind a NAT address and the address which resolves the domain from the local machine is not accessible from the console. for it would edit the /etc/hosts as follows:

 127.0.0.1 monitoring.mydomain.com


### A Map's background is black

In the Dashboards, when creating a visual map Widget, if the map's background is completely black, it is due to the Apache configuration. If the Pandora console is installed in the Apache location by default (/var/www en Ubuntu) this problem won't be, but if we've installed the Pandora console in other location, as for example at /home/Usuario/public_html,then, it'll be possible that you'll have problems to find the map background image.

### Massive SNMP operations doesnt work

When you do a SNMP Walk in the massive operation section, It should appear after a few seconds, a form with the detected interfaces. If you select an interface, possible values detected will be shown. If you don't get anything that means your system has problems to translate OID.

Please read "SNMP OID read problems"

### SNMP OID Read problems

The OID are translated with a "dictionary" or MIBS that should be properly installed. In latest versions of Ubuntu/Debian that MIBS are not installed with the system, and you need to install/download explicitly.

To do that, you can download a package called snmp-mibs-downloader and install. After installation, just editing the file /etc/snmp/snmp.conf and comment line "mibs:", it will work.

After that restart Apache server. For example in Ubuntu:

sudo /etc/init.d/apache2 restart


### I have upgraded to version 3.2 and policy modules are marked as unlinked

Starting from version 3.2 policy modules can be unlinked from a policy to allow customisation, but existing policy modules are not marked as linked during the upgrade. This can be fixed with the following SQL query:

UPDATE pandora.tagente_modulo SET policy_linked=1 WHERE id_policy_module!=0;


### How can I add fonts in order to use them in the graphs and reports?

To add fonts to Pandora, you need only to copy them in the include/fonts file.

### Problems with SNMP v1 and Pandora web console

The error can be checked because when you execute a function which performs a SNMP Walk using SNMP v1 the following string will appears in your web server logfile:

snmprealwalk(): This name does not exist:


It is a PHP bug, you can see more information at:

https://bugs.php.net/bug.php?id=51336&edit=1


To fix it you must upgrade your PHP installation to a higher version.

### SSLeay thread safe error

If you see your Pandora FMS server is down and when you check the log file /var/log/pandora/pandora_server.error you find an error like this:

/lib64/libc.so.6[0x399ea748f4]
/lib64/libc.so.6(realloc+0x102)[0x399ea753e2]
/lib64/libcrypto.so.6(CRYPTO_realloc+0x60)[0x39a22dae50]
/lib64/libcrypto.so.6(lh_insert+0xf9)[0x39a227e9f9]
/lib64/libcrypto.so.6(OBJ_NAME_add+0x6d)[0x39a225c72d]
/lib64/libcrypto.so.6(OpenSSL_add_all_ciphers+0x38f)[0x39a228532f]
/lib64/libcrypto.so.6(OPENSSL_add_all_algorithms_noconf+0xe)[0x39a2284f8e]
/usr/lib64/perl5/vendor_perl/5.8.8/x86_64-linux-thread-multi/auto/Crypt/SSLeay/SSLeay.so(XS_Crypt__SSLeay__CTX_new+0x291)[0x2aaaaaee3be1]
/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi/CORE/libperl.so(Perl_pp_entersub+0x3f6)[0x39a1290aa6]
/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi/CORE/libperl.so(Perl_runops_standard+0xe)[0x39a128a34e]
/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi/CORE/libperl.so(Perl_call_sv+0x650)[0x39a12376f0]
/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi/auto/threads/threads.so(Perl_ithread_run+0x155)[0x2af9342782f5]
/lib64/libpthread.so.0[0x399f20673d]
/lib64/libc.so.6(clone+0x6d)[0x399ead44bd]
...


The problem is that your version of perl-Net-SSLeay library is earlier than 1.42 and is not thread-safe. You can see more information at: http://search.cpan.org/~mikem/Net-SSLeay-1.45/lib/Net/SSLeay.pod#Using_Net::SSLeay_in_multi-threaded_applications

To solve the problem you must decrease the number of threads for web server to 1 with the following configuration:

web_threads 1


If your Pandora FMS web server must support a high load then, you must update the package to a newer version.

### Use of Modules Type Incremental

The incremental modules get "Rate" values, that is, items per second (Bytes per sec) in case of traffic.

This kind of module is created this way because in SNMP all counters are useful to measure a rate of values per second. To do this with absolute values will be trick, because the intervales if they aren't exactly the same, will give values that shouldn't be compared.This way peaks would be shown in the graph, which would be not correct because the average interval would be lightly higher to the previous ones making all false. But one rate (X/sec) could be perfectly comparable to other rate (X/items/sec).

### Table data overflows

If you are trying to store numbers bigger that what tagente_datos.datos can hold, you can increase its precision by connecting to Pandora FMS's database and issuing the following command:

ALTER TABLE tagente_datos MODIFY datos double(precision, 2) default NULL;


For example, if you need to store 128bit integers (which go up to 3.4e38) you need 39 digits for the integer part. Since Pandora FMS uses 2 digits for the fractional part, the resulting command would be:

ALTER TABLE tagente_datos MODIFY datos double(41, 2) default NULL;


### Problems receiving SNMP alarm traps with string in parenthesis

If you have configured an SNMP alert, which is set to an alert that uses _data_ macro on the execution, to receive an SNMP trap this can fail when it receives a string snmptrap and containing parentheses.

Example: .1.3.6.1.4.1.4174.0.4.7 = STRING: "SQL Server 2012 (Monitoring)"

To solve this problem, you must call the macro _data_ in single quotes: '_data_'.

### Pandora FMS's database is too big and pandora_db.pl freezes

If pandora_db.pl is having trouble cleaning up Pandora FMS's database edit it, increase $BIG_OPERATION_STEP (to 1000-10000, for example) and decrease$SMALL_OPERATION_STEP (to 100-200).

$BIG_OPERATION_STEP is the number of blocks that a time interval is split into. A bigger value means bigger blocks, which is faster but heavier on the database.$SMALL_OPERATION_STEP is the number of rows that are processed in a single query. A smaller value means more lighter queries.

### Delete agents to solve problems with agents excess in Enterprise version

The Enterprise version is limited by number of agents. in the case that exceeds the number of licensed agents appear an error message.

To delete remaining agents only thing to do is disable the Enterprise version and the delete leftover agents with Open version. We can do this by renaming the folder Enterprise, in the case that it is a Centos Appliance we would do:

mv /var/www/html/pandora_console/enterprise /var/www/html/pandora_console/enterprise.bk


### Required agents nomenclature agents from version 5

From version 5 Pandora must be borne in mind when creating fictitious agents, that the nomenclature should follow the data files, reaching tentacle directory, must follow this pattern: agent_name.numbers.data

Example. pandora_agent.3123278534.data

Any other format that can be assumed to follow the data_server not capture the information and let the XML stored in the directory.

### Alerts and events are not launched

Points to consider for the alerts and events from one module to work correctly:

- Having disabled Event storm protection.
- Check for any settings that have the agent in quiet or silent mode.
- Check for any settings that have the module in quiet or silent mode.
- Check for any settings that have the group disabled.

### Issue with name resolution when sending emails

It may happen that sending emails in the Cron Jobs not running properly and will appear on the console log an error like this:

PHP Warning: fsockopen(): php_network_getaddresses: getaddrinfo failed: Temporary failure in name resolution in /var/www/html/pandora_console/include/swiftmailer/classes/Swift/Transport/StreamBuffer.php on line 233


It seems a php error. The solution is stop the Apache service for a few minutes to completely remove all Apache threads and restart Apache ( /etc/init.d/httpd stop ---- /etc/init.d/httpd start )

### I have enabled the double authentication and I have lost the codes generator

You should contact with the Pandora FMS administrator to disable this feature for you. This can be done like this.

### I receive invalid results introducing valid codes of the double authentication

This feature is highly related with the time, and the difference of time between the server time and the time of the codes generator app may be affecting the validation.