| 両方とも前のリビジョン 前のリビジョン 次のリビジョン | 前のリビジョン |
| ja:documentation:pandorafms:management_and_operation:12_console_setup [2025/06/07 22:34] – [データのエクスポート] junichi | ja:documentation:pandorafms:management_and_operation:12_console_setup [2025/06/07 22:45] (現在) – [LDAP] junichi |
|---|
| </file> | </file> |
| |
| * **Chromium path**: The path or PATH where Chromium is installed must be entered. **Chromium** is a special component that is used to dynamically generate graphics in PDF. | * <wrap :en>**Chromium path**</wrap>: The path or PATH where Chromium is installed must be entered. **Chromium** is a special component that is used to dynamically generate graphics in PDF. |
| * **Automatic login (hash) password**: Defines a static symmetric password, used to create a hash and enable automatic validation by URL. It is used to integrate Pandora FMS into another WEB application, passing a username as a parameter, and using a hash generated by the username and this password, allowing automatic validation in Pandora FMS, without entering a password. To see an example of this integration see the file ''/extras/sample_login.php'' of the Pandora FMS Console. | * <wrap :en>**Time source**</wrap>: List where you can choose the source of the date and time to use. It can be the local system ("System") or the database ("Database"). The first is typically used when the database is on a different system with a different time zone than the Console. |
| * **Time source**: List where you can choose the source of the date and time to use. It can be the local system ("System") or the database ("Database"). The first is typically used when the database is on a different system with a different time zone than the Console. | * <wrap :en>**Attachment directory**</wrap>: Pandora FMS Console file directory. Used to host collections, issue attachments and other series of files. **You must have write permissions** for the web server, it is located by default at: |
| * **Attachment directory**: Pandora FMS Console file directory. Used to host collections, issue attachments and other series of files. **You must have write permissions** for the web server, it is located by default at: | |
| |
| * **Chromium パス(Chromium path):** chromium のパスを入力します。**Chromium** は、PDF でグラフを動的に生成するために使用される特別なコンポーネントです。 | * **Chromium パス(Chromium path):** chromium のパスを入力します。**Chromium** は、PDF でグラフを動的に生成するために使用される特別なコンポーネントです。 |
| * **自動ログイン (hash) パスワード(Automatic login (hash) password)**: ハッシュを作成し、URL を通して自動認証を行えるようにするためのパスワードを定義します。これは、他の Web アプリケーションから、Pandora へユーザ名とユーザ名を元に生成したハッシュを使ってアクセスするために使います。このパスワードにより、パスワードを入力することなく Pandora FMS への自動認証をすることができます。この設定例は、Pandora FMS コンソールの ''/extras/sample_login.php'' を参照してください。 | |
| * **日時データソース(Time source)**: 日時データをデータベースもしくはシステムのどちらから取得するかを選択します。データベースがコンソールと異なるマシンで動作している場合は、データベースを選択します。 | * **日時データソース(Time source)**: 日時データをデータベースもしくはシステムのどちらから取得するかを選択します。データベースがコンソールと異なるマシンで動作している場合は、データベースを選択します。 |
| * **添付ファイルの保存場所(Attachment directory)**: Pandora FMS コンソールファイル ディレクトリ。コレクション、イシューの添付ファイル、およびその他の一連のファイルを置くために使用されます。**Web サーバへの書き込み権限が必要です**。デフォルトでは次の場所にあります。 | * **添付ファイルの保存場所(Attachment directory)**: Pandora FMS コンソールファイル ディレクトリ。コレクション、イシューの添付ファイル、およびその他の一連のファイルを置くために使用されます。**Web サーバへの書き込み権限が必要です**。デフォルトでは次の場所にあります。 |
| </WRAP> | </WRAP> |
| |
| * **Automatically check for updates**: Enable/disable automatic checking for updates in the Warp Update. This causes the console to contact the Pandora FMS update provider every time you log in, sending anonymous information about the use of Pandora FMS (number of agents). | * <wrap :en>**Automatically check for updates**</wrap>: Enable/disable automatic checking for updates in the Warp Update. This causes the console to contact the Pandora FMS update provider every time you log in, sending anonymous information about the use of Pandora FMS (number of agents). |
| * **API password **: Authentication method to access the [[:en:documentation:pandorafms:technical_reference:02_annex_externalapi|Pandora FMS API]]. | * <wrap :en>**API password**</wrap>: Authentication method to access the [[:en:documentation:pandorafms:technical_reference:02_annex_externalapi|Pandora FMS API]]. |
| * **IP list with API access**: List of IP addresses that will have access to the Pandora FMS web service API (by default ''127.0.0.1'', local access only). The asterisk can be used as a wildcard, so placing ''*'' gives access to all IP addresses or, for example, ''125.56.24.*'' grants access to the entire subnet ''125.56.24'' . | * <wrap :en>**IP list with API access**</wrap>: List of IP addresses that will have access to the Pandora FMS web service API (by default ''127.0.0.1'', local access only). The asterisk can be used as a wildcard, so placing ''*'' gives access to all IP addresses or, for example, ''125.56.24.*'' grants access to the entire subnet ''125.56.24''. |
| * **Enable GIS features**: Enable/Disable the [[:en:documentation:pandorafms:monitoring:20_gis|GIS features]] for the Pandora FMS console. | * <wrap :en>**Enable GIS features**</wrap>: Enable/Disable the [[:en:documentation:pandorafms:monitoring:20_gis|GIS features]] for the Pandora FMS console. |
| * **Enable NetFlow**: Enable or disable [[:en:documentation:pandorafms:monitoring:18_netflow|NetFlow]]. | * <wrap :en>**Enable NetFlow**</wrap>: Enable or disable [[:en:documentation:pandorafms:monitoring:18_netflow|NetFlow]]. |
| * **General network path** (Version 770 or later): Directory where the ''netflow'' and ''sflow'' directories will be stored for the corresponding data. | * <wrap :en>**General network path**</wrap>: Directory where the ''netflow'' and ''sflow'' directories will be stored for the corresponding data. |
| * **Server timezone setup**: Defines the time zone in which the Console is located. Unlike the codes/abbreviations of all countries (ISO 3166), the list of time zones has complicated regulations (IANA Time Zone Database), which is why a first list with continents/countries is included and selecting an option from it will update the list. second list where you can choose exactly a country/city. The **Timezone setup** text box will not change until you press the **Update** button. | * <wrap :en>**Server timezone setup**</wrap>: Defines the time zone in which the Console is located. Unlike the codes/abbreviations of all countries (ISO 3166), the list of time zones has complicated regulations (IANA Time Zone Database), which is why a first list with continents/countries is included and selecting an option from it will update the list. second list where you can choose exactly a country/city. |
| * **Public URL**: A public URL can be stored. It is useful to complete this field when you have a reverse proxy or, for example, with the **mod_proxy** mode of the Apache web server. | * <wrap :en>**Public URL**</wrap>: A public URL can be stored. It is useful to complete this field when you have a reverse proxy or, for example, with the ''mod_proxy'' mode of the Apache web server. |
| * **Inventory changes blacklist** (Version 768 or later): Inventory modules included within the blacklist will not generate events when they change. | * <wrap :en>**Inventory changes blacklist**</wrap>: Inventory modules included within the blacklist will not generate events when they change. |
| * **Server log directory**: Directory where the server log files are stored. | * <wrap :en>**Server log directory**</wrap>: Directory where the server log files are stored. |
| * **Event storm protection**: If this option is enabled, no events or alerts will be generated, but data will still be received. | * <wrap :en>**Event storm protection**</wrap>: If this option is enabled, no events or alerts will be generated, but data will still be received. |
| * **Command line snapshot**: String or string type modules that return more than one line will display their content in the form of an image. | * <wrap :en>**Command line snapshot**</wrap>: String or string type modules that return more than one line will display their content in the form of an image. |
| * **Change remote config encoding**: Activating this parameter converts the character encoding (encoding) of the writing of the modules in the remote configuration files from UTF-8 by default to the encoding configured in the files themselves. setting. | * <wrap :en>**Change remote config encoding**</wrap>: Activating this parameter converts the character encoding (encoding) of the writing of the modules in the remote configuration files from UTF-8 by default to the encoding configured in the files themselves. setting. |
| * **Referrer security**: When active, it is checked for security that the user comes from a Pandora FMS URL and that the link is **not** external and therefore is no longer suspicious. By default it is disabled. The extreme security sites that are verified are: | * <wrap :en>**Referrer security**</wrap>: When active, it is checked for security that the user comes from a Pandora FMS URL and that the link is **not** external and therefore is no longer suspicious. By default it is disabled. The extreme security sites that are verified are: |
| * DB manager extension. | * DB manager extension. |
| * User configuration. | * User configuration. |
| * Recon script configuration. | * Recon script configuration. |
| * **Allows create planned downtimes in the past**: Activate or deactivate the possibility of creating planned downtimes in the past. The purpose of this is to modify information for [[:en:documentation:pandorafms:monitoring:07_services|SLA reports]]. | * <wrap :en>**Allows create planned downtimes in the past**</wrap>: Activate or deactivate the possibility of creating planned downtimes in the past. The purpose of this is to modify information for [[:en:documentation:pandorafms:monitoring:07_services|SLA reports]]. |
| * **Limit for bulk operations**: Limit of elements that can be modified by bulk operations at one time. | * <wrap :en>**Limit for bulk operations**</wrap>: Limit of elements that can be modified by bulk operations at one time. |
| * **Include manually disabled agents**: Allows you to enable or disable the display of manually disabled agents in certain Console views. | * <wrap :en>**Include manually disabled agents**</wrap>: Allows you to enable or disable the display of manually disabled agents in certain Console views. |
| * **Set alias as name by default in agent creation**: When this parameter is activated, the selection box in the agent creation menu collects the alias entered in the form and also saves it as the agent name and is activated by default . | * <wrap :en>**Set alias as name by default in agent creation**</wrap>: When this parameter is activated, the selection box in the agent creation menu collects the alias entered in the form and also saves it as the agent name and is activated by default . |
| * **Unique IP**: Enabling this parameter will automatically activate the Unique IP button when creating and editing agents to detect whether the IP addresses assigned to an agent are available or in use by the same agent or another agent. | * <wrap :en>**Unique IP**</wrap>: Enabling this parameter will automatically activate the Unique IP button when creating and editing agents to detect whether the IP addresses assigned to an agent are available or in use by the same agent or another agent. |
| * **Module custom ID readonly**: Activating this parameter blocks the editing of the custom id of an agent's module from the Console but allows editing from the CLI and the API. This is useful for automatic third-party integrations without the user being able to modify this value. | * <wrap :en>**Module custom ID readonly**</wrap>: Activating this parameter blocks the editing of the custom id of an agent's module from the Console but allows editing from the CLI and the API. This is useful for automatic third-party integrations without the user being able to modify this value. |
| * **Enable console log**: Due to the large amount of debug data generated by this log, it is recommended to disable it, as configured by default. If activated, the file ''/var/log/php-fpm/error.log'' is used to log Console events. | * <wrap :en>**Enable console log**</wrap>: Due to the large amount of debug data generated by this log, it is recommended to disable it, as configured by default. If activated, the file ''/var/log/php-fpm/error.log'' is used to log Console events. |
| |
| * **自動アップデートチェック(Automatic check for updates)**: オープンアップデートマネージャで、自動的にアップデートチェックを行うかどうかを設定します。これを設定すると、毎時 Pandora FMS の更新サイト (Pandora FMS SL) へ接続し、Pandora FMS の利用情報 (エージェントの数) を送信するようになります。 | * **自動アップデートチェック(Automatic check for updates)**: オープンアップデートマネージャで、自動的にアップデートチェックを行うかどうかを設定します。これを設定すると、毎時 Pandora FMS の更新サイト (Pandora FMS SL) へ接続し、Pandora FMS の利用情報 (エージェントの数) を送信するようになります。 |
| |
| === レポート専用コンソール === | === レポート専用コンソール === |
| |
| <WRAP center round info 60%> | |
| |
| NG 764 version or later. | |
| |
| </WRAP> | |
| |
| <WRAP center round info 60%> | |
| |
| バージョン NG 764 以降 | |
| |
| </WRAP> | |
| |
| The critical mission of the dedicated Reporting Console, based on the data extracted from the PFMS databases (main and historical), is to prepare, convert into useful information, generate, save and send reports for hundreds of agents and software agents. To do this, it has preconfigured special aspects for both the software and the hardware: | The critical mission of the dedicated Reporting Console, based on the data extracted from the PFMS databases (main and historical), is to prepare, convert into useful information, generate, save and send reports for hundreds of agents and software agents. To do this, it has preconfigured special aspects for both the software and the hardware: |
| 重要なフィールド: | 重要なフィールド: |
| |
| * **Fallback to local authentication**: If this option is enabled, a [[:en:documentation:pandorafms:management_and_operation:12_console_setup#local_pandora_fms|local authentication]] will be done if LDAP fails. Administrator users will always have fallback enabled, so as not to lose access to Pandora FMS in case of failure of the remote authentication system. | * <wrap :en>**LDAP server**</wrap> and <wrap :en>**Secondary LDAP server**</wrap>: Depending on the environment, the host may be accessed directly (''x.x.x.x.x'') or by URL (''<nowiki>ldap://x.x.x.x.x</nowiki>'', ''<nowiki>ldaps://x.x.x.x.x</nowiki>''). |
| * **Automatically create remote users**: Enables or disables automatic creation of remote users. This option makes it possible for Pandora FMS to create users automatically once they have logged in using LDAP. | * <wrap :en>**Login attribute**</wrap> and <wrap :en>**Secondary Login attribute**</wrap>: Both fields are case sensitive. |
| * **LDAP function**: When searching in LDAP, you can choose whether to use the native PHP function or use the local **ldapsearch** command. It is recommended to use the local command for those environments that have an LDAP with many elements. | * <wrap :en>**Fallback to local authentication**</wrap>: Should this option be enabled, [[#ks1_6_1|local authentication]] will be performed if LDAP fails. Administrator users will always have //fallback// enabled, in order not to lose access to Pandora FMS in case of remote authentication system failure. |
| **Advanced LDAP Config** | * <wrap :en>**Automatically create remote users**</wrap>: It enables or disables remote user automatic creation. This option allows Pandora FMS to create the users automatically once they have logged in (//login//) using LDAP. |
| | * <wrap :en>**LDAP function**</wrap>: When searching LDAP, you may choose whether to use the native PHP function or the local ''ldapsearch'' command. It is recommended to use the local command for those environments that have an LDAP with many elements. |
| |
| | * **LDAP サーバ(LDAP server)** および **セカンダリ LDAP サーバ(Secondary LDAP server)**: 環境に応じて、ホストに対して直接アクセスする (''x.x.x.x.x'') ことも、URL でアクセスする (''<nowiki>ldap://x.x.x.x.x</nowiki>''、''<nowiki>ldaps://x.x.x.x.x</nowiki>'') こともできます。 |
| | * **ログインアトリビュート(Login attribute)** および **セカンダリログインアトリビュート(Secondary Login attribute)**: どちらのフィールドも大文字と小文字が区別されます。 |
| * **ローカル認証にフォールバック(Fallback to local Authentication)**: このオプションを有効にすると、LDAPリモート認証が失敗した場合に、ローカル認証にフォールバックします。管理者ユーザは、リモート認証システムに障害が発生した場合でも Pandora FMS へのアクセスを失わないように、常にフォールバックが有効になります。 | * **ローカル認証にフォールバック(Fallback to local Authentication)**: このオプションを有効にすると、LDAPリモート認証が失敗した場合に、ローカル認証にフォールバックします。管理者ユーザは、リモート認証システムに障害が発生した場合でも Pandora FMS へのアクセスを失わないように、常にフォールバックが有効になります。 |
| * **リモートユーザの自動作成(Autocreate remote users)**: リモートユーザの自動作成を有効化/無効化します。このオプションで、LDAP を使ってログインしたユーザを自動的に作成できます。 | * **リモートユーザの自動作成(Autocreate remote users)**: リモートユーザの自動作成を有効化/無効化します。このオプションで、LDAP を使ってログインしたユーザを自動的に作成できます。 |
| **高度な LDAP 設定** | **高度な LDAP 設定** |
| |
| * If the option is activated, a list appears with all saved advanced permissions. You can add new permissions by selecting the profile, groups and tags, next to the attributes filter. If the user meets any of those attributes (for example, a specific organizational unit or group) then the user will be created. | * Should this option be enabled, a list of all saved advanced permissions will be displayed. New permissions may be added by selecting the profile, groups and tags, next to the attribute filter. If any user meets any of these attributes (e.g. a particular organizational unit or group), then the user will be created. |
| * If this option is not activated, the simple system for creating user profiles is used (**Automatically create profile**, **Automatically create profile group**, **Automatically create profile tags**, **Automatically assigned no hierarchy** ). | * //If this option is not activated//, the simple system will be used for user profile creation (<wrap :en>**Automatically create profile**</wrap>, <wrap :en>**Automatically create profile group**</wrap>, <wrap :en>**Automatically create profile tags**</wrap>, <wrap :en>**Automatically assigned no hierarchy**</wrap>). |
| |
| * このオプションを有効にすると、保存されているすべての高度な権限のリストが表示されます。属性フィルターの横にあるプロファイル、グループ、タグを選択すると、新しい権限を追加できます。ユーザがこれらの属性のいずれか (特定の組織単位またはグループなど) を満たしている場合、ユーザが作成されます。 | * このオプションを有効にすると、保存されているすべての高度な権限のリストが表示されます。属性フィルターの横にあるプロファイル、グループ、タグを選択すると、新しい権限を追加できます。ユーザがこれらの属性のいずれか (特定の組織単位またはグループなど) を満たしている場合、ユーザが作成されます。 |