Disabled by default. If set to 1, Pandora FMS servers will run in separate processes.
+
Disabled by default. If set to 1, Pandora FMS servers will run in separate processes. Thread self-monitoring is automatically disabled when the Pandora FMS server runs in multiprocess mode.
E-mail server IP address (<wrap :en>**Mail Transfer Agent**</wrap>).
-
Make sure that your Pandora FMS server is able to resolve through its DNS server the mail server in charge of your e-mail domain.
+
メールサーバ (MTA) の IP アドレスを設定します。
-
<code>
+
<WRAP center round important 90%>
-
nslookup -type=mx my.domain
+
-
</code>
+
It must be ensured that the <wrap :en>**Pandora FMS server**</wrap> is able to //resolve// through its DNS server the mail server in charge of your mail domain and that this mail server accepts mails redirected from <wrap :en>**PFMS server**</wrap>:
+
+
''nslookup -type = mx my.domain''
-
Also, make sure in this case that your mail server accepts the emails redirected from Pandora FMS server.
+
If not specified, [[:en:documentation:pandorafms:management_and_operation:12_console_setup#ks1_1_3|Pandora FMS Console configuration]] will be used. It is possible to have a different MTA configuration for Pandora FMS Server and Pandora FMS Console.
</WRAP>
</WRAP>
-
<WRAP center round important 60%>
+
<WRAP center round important 90%>
-
Pandora サーバから DNS を使って、あなたの電子メールドメインを担当するメールサーバの名前解決ができることを確認してください。
<WRAP center round important 60%> If not set, [[:en:documentation:04_using:12_console_setup#general_setup|Pandora FMS Console configuration]] will be used. It is possible to have a different MTA configuration for the Pandora FMS Server and the Pandora FMS Console. </WRAP>
If set to ''1'', mail delivery will be separate for each recipient. If set to ''0'', the mail will be shared among all recipients. By default, ''1''. See also [[#mta_address|mta_address]].
As of version 747, **cURL** is used by default. Set ''LWP'' to use [[https://www.perl.com/pub/2002/08/20/perlandlwp.html/|Library for WWW in Perl (LWP)]] instead of **cURL** for web monitoring.
This is the time frame within which the [[#eventserver|eventserver]] will take events into account.
+
+
これは、[[#eventserver|イベントサーバ]] がイベントを考慮する時間枠です。
+
+
<code>
+
# Event alerts, event window in seconds (3600 by default).
+
event_window 3600
+
+
</code>
=== event_inhibit_alerts ===
=== event_inhibit_alerts ===
行 979:
行 1028:
=== remote_config ===
=== remote_config ===
-
This parameter controls whether it is possible to configure Pandora FMS server remotely from the Console in the servers view, ''0'' disabled, ''1'' enabled (then you must restart PFMS server). It works by Tentacle in a similar way to the remote configuration of the [[:en:documentation:pandorafms:installation:05_configuration_agents#remote_config|Software Agent]].
+
This parameter controls whether it is possible to configure Pandora FMS server remotely from the Console in the server view, ''0'' disabled, ''1'' enabled (then restart PFMS server). It works through Tentacle in a similar way to the remote configuration of the [[:en:documentation:pandorafms:installation:05_configuration_agents#remote_config|Software Agent]].
秒単位の Pandora FMS HA データベースツールの監視間隔。デフォルトでは 60 の記載でコメントアウトされています。
秒単位の Pandora FMS HA データベースツールの監視間隔。デフォルトでは 60 の記載でコメントアウトされています。
+
+
=== ha_connect_retries ===
+
+
<code>
+
# Number of retries for connection attempts to HA databases.
+
#ha_connect_retries 2
+
+
</code>
+
+
Number of attempts it will make in each check with each of the servers of the [[:en:documentation:pandorafms:complex_environments_and_optimization:06_ha#ks6_3|environment HA]] before making any change in the environment.
User that will be in charge of performing all the operations of the [[:en:documentation:pandorafms:complex_environments_and_optimization:06_ha#ks6_3|environment HA]].
Password of [[#ha_dbuser|user]] that will be in charge of performing all the operations of the [[:en:documentation:pandorafms:complex_environments_and_optimization:06_ha#ks6_3|HA environment]].
IP addresses or FQDN of the MySQL servers that make up the [[:en:documentation:pandorafms:complex_environments_and_optimization:06_ha#ks4_2|environment HA]].
+
+
[[:ja:documentation:pandorafms:complex_environments_and_optimization:06_ha#ks4_2|HA 環境]] を構成する MySQL サーバの IP アドレスまたは FQDN。
+
+
=== ha_sshuser ===
+
+
<code>
+
# SSH username for pandora_ha .
+
#ha_sshuser pandora
+
</code>
+
+
Parameters to define the user to connect via SSH to the Percona/MySQL servers to perform the recovery operations of a [[:en:documentation:pandorafms:complex_environments_and_optimization:06_ha#ks6_3| HA environment]].
+
+
Percona/MySQL サーバに SSH 経由で接続して [[:ja:documentation:pandorafms:complex_environments_and_optimization:06_ha#ks6_3| HA 環境]] のリカバリ操作を実行するユーザを定義するパラメータ。
+
+
=== ha_sshport ===
+
+
<code>
+
# SSH port for pandora_ha .
+
#ha_sshport 22
+
</code>
+
+
Parameters to define the port to connect via SSH to the Percona/MySQL servers to perform the recovery operations of a [[:en:documentation:pandorafms:complex_environments_and_optimization:06_ha#ks6_3| HA environment]].
+
+
[[:ja:documentation:pandorafms:complex_environments_and_optimization:06_ha#ks6_3| HA 環境]] のリカバリ操作を実行するために、SSH 経由で Percona/MySQL サーバに接続するためのポートを定義するパラメータ。
+
+
=== repl_dbuser ===
+
+
<code>
+
# Database username for HA replication.
+
#repl_dbuser pandora
+
</code>
+
+
Parameter to define the user in the [[:en:documentation:pandorafms:complex_environments_and_optimization:06_ha#ks6_3|replica of an HA environment]].
Parameter to define the password of the [[#repl_dbuser|user]] in [[:en:documentation:pandorafms:complex_environments_and_optimization:06_ha#ks6_3|the replication of an HA environment]].
<WRAP center round info 60%>See the [[:en:documentation:07_technical_annexes:15_security_architecture|Security Architecture section]] **to ensure the operation** of the entire Pandora FMS system.</WRAP>
-
-
<WRAP center round info 60%>Pandora FMS システム全体の操作を確認するには、[[:ja:documentation:07_technical_annexes:15_security_architecture|セキュリティアーキテクチャ]] を参照してください。</WRAP>
=== dbsslcafile ===
=== dbsslcafile ===
行 1313:
行 1451:
</code>
</code>
-
Path to a file in [[https://en.wikipedia.org/wiki/X.509#Certificate_filename_extensions|PEM]] format that contains a list of [[https://en.wikipedia.org/wiki/Certificate_authority|trusted SSL certificate authorities]]. It is commented by default, to enable it you must uncomment and set the path to the file.
+
**File** path or location, in PEM format, that contains a list of SSL certificates issued by a Certificate Authority. It is commented by default, to enable it, uncomment it and set the path to the file. See [[#dbssl|dbssl]].
<WRAP center round info 60%>See the [[:en:documentation:07_technical_annexes:15_security_architecture|Security Architecture section]] **to ensure the operation** of the entire Pandora FMS system.</WRAP>
+
-
<WRAP center round info 60%>Pandora FMS システム全体の操作を確認するには、[[:ja:documentation:07_technical_annexes:15_security_architecture|セキュリティアーキテクチャ]] を参照してください。</WRAP>
Path to a **directory or folder** that contains SSL certificates granted by a [[https://es.wikipedia.org/wiki/Certificate_authority|certification authority]] in [[https://en.wikipedia.org/wiki/X.509#Certificate_filename_extensions|PEM]] format. It is commented by default, to enable it, uncomment it and set the path to the directory.
+
Path or location of the **directory or folder** that houses SSL certificates issued by a Certificate Authority. Certificates must be in PEM format. It is commented by default, to enable it uncomment it and set the path to the directory. See [[#dbssl|dbssl]].
<WRAP center round info 60%>See the [[:en:documentation:07_technical_annexes:15_security_architecture|Security Architecture section]] **to ensure the operation** of the whole Pandora FMS system.</WRAP>
+
-
+
-
<WRAP center round info 60%>Pandora FMS システム全体の操作を確認するには、[[:ja:documentation:07_technical_annexes:15_security_architecture|セキュリティアーキテクチャ]] を参照してください。</WRAP>
+
=== verify_mysql_ssl_cert ===
=== verify_mysql_ssl_cert ===
行 1356:
行 1486:
</code>
</code>
-
If it is set to ''1'' performs the verification on the MySQL connection (CN of the SSL certificate), //if they do not match, it does not perform the connection//. Default value ''0''.
+
If it is set to ''1'', it performs MySQL connection verification (CN of the SSL certificate), //if they do not match, it does not connect//. Default value ''0''. See [[#dbssl|dbssl]].
# dbsslserverkey: Path to a file in PEM format that contains the MySQL server SSL key.
+
+
# dbsslserverkey
+
+
</code>
+
+
File path or location, in PEM format, that contains MySQL server SSL **key**. It is commented by default, to enable it uncomment and set the path to the file.
# dbsslservercert: Path to a file in PEM format that contains the MySQL server SSL key certificate.
+
+
# dbsslservercert
+
+
</code>
+
+
File path or location, in PEM format, that contains the **certificate** of the SSL key of MySQL server. It is commented by default, to enable it uncomment and set the path to the file. See [[#dbssl|dbssl]].
It is a parameter ( enabled with '' 1 '') that allows to automatically retrieve ''pandora_ha'' environments in which //Splitbrain//, **has occurred, i.e. both nodes behave as main or** //Master//.
+
It is a parameter (enabled with '' 1'') that allows automatically recovering ''pandora_ha'' environments in which Splitbrain was produced, **that is, that both nodes behave as principal or ** Master.
Consult [[:en:documentation:pandorafms:complex_environments_and_optimization:06_ha#alta_disponibilidad_en_la_base_de_datas|section "High availability in the database"]] to ensure the operation of HA Pandora FMS.
-
<WRAP center round info 60%>\\
-
Refer to the section [[:en:documentation:05_big_environments:06_ha#database_ha|"High availability in the database"]] to ensure the operation of the Pandora FMS HA.\\
</WRAP>
</WRAP>
-
<WRAP center round info 60%>\\
+
<WRAP center round info60%>
-
Pandora FMS HA の操作に関しては、[[:ja:documentation:05_big_environments:06_ha#database_ha|冗長化構成(HA)]] を参照してください。\\
+
+
Pandora FMS HA の動作を確実にするために、[[:ja:documentation:pandorafms:complex_environments_and_optimization:06_ha#高可用性データベース|高可用性データベースの章]] を参照してください。
</WRAP>
</WRAP>
-
You must understand and configure all values from **Servers** → **Manage database HA** → **Setup**:
+
You must understand and configure all the values from **Servers** → **Manage database HA** → **Setup**:
See section [[:en:documentation:05_big_environments:06_ha#automatic_node_recovery_in_splitbrain|"Automatic recovery of nodes in Splitbrain"]] for details.\\
+
+
See [[:en:documentation:pandorafms:complex_environments_and_optimization:06_ha#automatic_node_recovery_in_splitbrain|section "Automatic node recovery in Splitbrain"]] for more details.
Script path to perform the resynchronization of the nodes in a [[:en:documentation:pandorafms:complex_environments_and_optimization:06_ha#ks6_3| HA environment]].
+
+
[[:ja:documentation:pandorafms:complex_environments_and_optimization:06_ha#ks6_3| HA 環境]] 内のノードの再同期を実行するためのスクリプトパス。
# Enable (1) or disable (0) Pandora FMS Correlation Server
-
# (PANDORA FMS ENTERPRISE ONLY).
-
correlationserver 0
-
-
</code>
-
-
This server **replaces** ''[[#eventserver|eventserver]]''. To use it, it will be necessary to deactivate the ''eventserver'' and activate the ''correlationserver'' in this way:
The **pass** and **drop** methods of the alerts have no effect when enabled (they are always evaluated as **pass**). The evaluation of the event pool and logs is done at each threshold defined in ''[[:en:documentation:02_installation:04_configuration#correlation_threshold|correlation_threshold]]''.
This server incorporates a correlated alert recovery system whenever there are no more events or logs in the evaluation pool **that comply with any of the alert rules**. When the alert is retrieved, the action is automatically triggered with the '//retrieval//' conditions defined in the action. There are no macros since the trigger is caused by the absence of information, so the only thing reported in the retrieval is the title of the retrieved alert and the time of its retrieval.
When Pandora FMS server starts, it preloads the events within the ''[[#event_window|event_window]]'', to evaluate correlated alerts. With the ''[[#correlationserver|correlationserver]]'', if this option is disabled, restarting the server will trigger a recovery for each alert that was triggered. It is recommended to have it enabled so that recoveries are not launched at each reboot.
+
When Pandora FMS server starts, it preloads the events within the ''[[#event_window|event_window]]'', to evaluate alerts. With the ''[[#eventserver|eventserver]]'', if this option is disabled, restarting the server will trigger a recovery for each alert that was triggered. It is recommended to have it enabled so that recoveries are not launched at each reboot.
# discovery_threads. Each thread will scan a different scan task.
-
elastic_query_size 10
+
discovery_threads 1
</code>
</code>
-
Items per request for [[:en:documentation:03_monitoring:09_log_monitoring|log collection]] with Elasticsearch. Higher values may cause Elasticsearch to stop. Default value: ten ''10''.
+
Number of threads for scanning tasks. Default value: ''1''.
# Correlated Alerts, log window in seconds (3600 by default)
+
# Event Alerts, log window in seconds (3600 by default)
-
# (PANDORA FMS ENTERPRISE ONLY).
+
log_window 3600
log_window 3600
</code>
</code>
-
It sets, for the [[#correlationserver|correlationserver]], the time period (in seconds) for the record or log. Default value: ''3600''. See also ''[[#event_window|event_window]]''.
+
It sets, for the [[#eventserver|eventserver]], the time period (in seconds) for the record or log. Default value: ''3600''. See also ''[[#event_window|event_window]]''.
# Enable (1) or disable (0) the verification of SSL certificates (set to 0 when using self-signed certificates).
+
ssl_verify 0
+
</code>
+
+
Enables or disables the verification of SSL certificates, default value ''0'' (disabled). See topic "[[[:en:documentation:pandorafms:monitoring:09_log_monitoring|Log collection and monitoring]]".
Log decoding server for SIEM monitoring (enabled ''1'' or disabled ''0'').
+
+
SIEM 監視用のログデコードサーバ (有効 ''1''、無効 ''0'')。
+
+
=== siemserver_threads ===
+
+
Number of threads for SIEM Decoding Server. It indicates how many checks can be done simultaneously. It is not recommended to deliberately increase this value, as it may cause excessive consumption of [[#siemserver|server]] resources. A number higher than twenty threads requires a machine with many independent processors or cores.
Number of threads for SIEM Event Server. It indicates how many checks can be done simultaneously. It is not recommended to deliberately increase this value, as it may cause excessive consumption of server resources. A higher number of twenty threads requires you to have a machine with many independent processors or cores.
Time, in seconds, of log pool evaluation for [[#siemevents|siemevents]].
+
+
[[#siemevents|siemevents]] のログプール評価時間 (秒単位)。
+
+
=== siem_max_timeframe ===
+
+
Maximum time, in seconds, to be used as the "time window" of the log pools to be evaluated by [[#siemserver|siemserver]] and [[#siemevents|siemevents]].
The [[#siemserver|SIEM event server]] in each cycle will take from OpenSearch the maximum number of decoded logs indicated in this parameter, to evaluate SIEM rules. If not specified or set to ''-1'' (default value for ''siem_max_hits_logs'') as many logs will be taken as OpenSearch returns per page in a query (10 by default).
Number of processor threads to be used by the [[:en:documentation:pandorafms:monitoring:10_other_monitoring#ks4_2|Monitoring Anomaly Detection Engine server]].
# MADE will query the Pandora FMS database every madeserver_interval seconds
+
# to look for new data.
+
madeserver_interval 60
+
</code>
+
+
Interval, in seconds, of consultation of the [[:en:documentation:pandorafms:monitoring:10_other_monitoring#ks4_2|Monitoring Anomaly Detection Engine server]] to [[:en:documentation:pandorafms:introduction:02_architecture#ks1_1|Pandora FMS server]].
# Minimum number of data required to train a model (e.g., '7d' for seven days).
+
madeserver_min_train 7d
+
</code>
+
+
Minimum amount of accumulated data (in days) to start forecasting work for the [[:en:documentation:pandorafms:monitoring:10_other_monitoring#ks4_2|Monitoring Anomaly Detection Engine server]].
# Maximum number of data kept to train models (e.g., '90d' for 90 days).
+
madeserver_max_history 90d
+
</code>
+
+
Maximum amount of accumulated data (in days) to be retained in the prediction job of the [[:en:documentation:pandorafms:monitoring:10_other_monitoring#ks4_2|Monitoring Anomaly Detection Engine server]]
# Model automatic retraining period (e.g., '7d' for seven days).
+
madeserver_autofit 7d
+
</code>
+
+
Period (in days) for the retraining of the [[:en:documentation:pandorafms:monitoring:10_other_monitoring#ks4_2|Monitoring Anomaly Detection Engine server]]
# Model sensitivity. A lower value triggers less anomalies.
+
madeserver_sensitivity 0.1
+
</code>
+
+
Calibrates the level of anomaly detection in the [[:en:documentation:pandorafms:monitoring:10_other_monitoring#ks4_2|MADE server]], the value is directly proportional.
[[:en:documentation:pandorafms:introduction:02_architecture#consola_web_de_pandora_fms|Pandora FMS Web Console]] has a configuration file that is automatically generated during installation. Its location is: ''/consolepath/include/config.php''.
+
[[:en:documentation:pandorafms:introduction:02_architecture#ks1_2|Pandora FMS Web Console]] has a configuration file that is automatically generated during installation. Its location is at: ''/consolepath/include/config.php''.
[[:ja:documentation:pandorafms:introduction:02_architecture#pandora_fms_コンソール|Pandora FMS Web コンソール]]には、インストール中に自動的に生成される設定ファイルがあります。それは、''/consolepath/include/config.php'' にあります。
[[:ja:documentation:pandorafms:introduction:02_architecture#pandora_fms_コンソール|Pandora FMS Web コンソール]]には、インストール中に自動的に生成される設定ファイルがあります。それは、''/consolepath/include/config.php'' にあります。
-
For example, on CentOS systems it is located at:
+
For example, in [[:en:documentation:pandorafms:technical_annexes:31_pfms_install_latest_rocky_linux#ks10|Rocky Linux]] and [[:en:documentation:pandorafms:technical_annexes:30_pfms_install_latest_ubuntu_server#ks13_7|Ubuntu]] systems, it is located at:
If set to ''1'' , it verifies MySQL connection (CN of the SSL certificate), **if they do not match, no connection is made**. The default value is ''0''.