2007-08-23 19:24:56 +02:00
|
|
|
# Fichero de configuracion base de agentes de Pandora
|
|
|
|
# Base config file for Pandora FMS Windows Agent
|
|
|
|
# Version 1.3.0
|
2007-08-29 18:20:54 +02:00
|
|
|
# (c) 2006-2007 Esteban Sanchez
|
2007-08-23 19:24:56 +02:00
|
|
|
# (c) 2006-2007 Artica Soluciones Tecnologicas
|
|
|
|
# This program is Free Software, you can redistribute it and/or modify it
|
|
|
|
# under the terms of the GNU General Public Licence as published by the Free Software
|
|
|
|
# Foundation; either version 2 of the Licence or any later version.
|
|
|
|
# This program is distributed in the hope that it will be useful, but
|
|
|
|
# WITHOUT ANY WARRANTY, without ever the implied warranty of MERCHANTABILITY or FITNESS
|
|
|
|
# FOR A PARTICULAR PURPOSE.
|
|
|
|
|
2007-08-29 18:20:54 +02:00
|
|
|
# Edit this file to change your parameters or/and add your own modules
|
2007-09-14 15:58:12 +02:00
|
|
|
# Any line with a # character at the first column will be ignored (comment)
|
2007-08-23 19:24:56 +02:00
|
|
|
# General Parameters
|
|
|
|
# ==================
|
|
|
|
|
2007-09-14 15:58:12 +02:00
|
|
|
server_ip 192.168.50.1
|
2007-08-23 19:24:56 +02:00
|
|
|
server_path /var/spool/pandora/data_in
|
|
|
|
temporal "C:\windows\temp"
|
2007-09-14 15:58:12 +02:00
|
|
|
|
|
|
|
# Interval is defined in seconds
|
|
|
|
|
2007-08-23 19:24:56 +02:00
|
|
|
interval 300
|
2007-09-14 15:58:12 +02:00
|
|
|
|
|
|
|
# Agent uses your hostname automatically, if you need to change agent name
|
|
|
|
# use directive agent_name
|
|
|
|
# agent_name caprica
|
|
|
|
|
2008-04-02 15:31:21 +02:00
|
|
|
# Possible values are tentacle (default), ftp and ssh.
|
2007-09-14 15:58:12 +02:00
|
|
|
|
2008-04-02 15:31:21 +02:00
|
|
|
transfer_mode tentacle
|
|
|
|
server_port 41121
|
2007-09-14 15:58:12 +02:00
|
|
|
|
2008-04-29 13:27:25 +02:00
|
|
|
# In case of using FTP or tentacle with password, uncomment and change (user is always pandora)
|
|
|
|
# server_pwd pandora
|
|
|
|
|
2007-09-14 15:58:12 +02:00
|
|
|
# Debug mode do not copy XML data files to server and stop executing after first one
|
2007-09-03 18:12:02 +02:00
|
|
|
# debug 1
|
2007-08-23 19:24:56 +02:00
|
|
|
|
2008-04-02 18:01:35 +02:00
|
|
|
# ODBC connections
|
|
|
|
# Configuring "ExampleDSN" DSN. Notice that this DSN connection must be configured
|
|
|
|
# under Control panel -> Administrative tools -> ODBC -> DSN
|
|
|
|
odbc_ExampleDSN_username UserNameForDsn
|
|
|
|
odbc_ExampleDSN_password Password1234
|
|
|
|
|
2007-08-23 19:24:56 +02:00
|
|
|
# Module Definition
|
|
|
|
# =================
|
|
|
|
|
|
|
|
|
|
|
|
# Counting OpenedConnections (check the language string)
|
|
|
|
module_begin
|
|
|
|
module_name OpenNetConnections
|
|
|
|
module_type generic_data
|
|
|
|
module_exec netstat -na | grep ESTAB | wc -l | tr -d " "
|
|
|
|
module_description Open Connections (interval 2)
|
|
|
|
module_end
|
|
|
|
|
|
|
|
# Is Schedule service running ?
|
|
|
|
module_begin
|
|
|
|
module_name ServicioProg
|
|
|
|
module_type generic_proc
|
|
|
|
module_service Schedule
|
|
|
|
module_description Schedule Service
|
|
|
|
module_end
|
|
|
|
|
|
|
|
# Is Eventlog service running ?
|
|
|
|
module_begin
|
|
|
|
module_name ServicioReg
|
|
|
|
module_type generic_proc
|
|
|
|
module_service Eventlog
|
|
|
|
module_description Eventlog Service
|
|
|
|
module_end
|
|
|
|
|
|
|
|
# Is Microsoft Messenger running ?
|
|
|
|
module_begin
|
|
|
|
module_name MSN_Messenger
|
|
|
|
module_type generic_proc
|
|
|
|
module_proc msmsgs.exe
|
|
|
|
module_description Microsoft Messenger (MSN)
|
|
|
|
module_end
|
|
|
|
|
2007-09-14 15:58:12 +02:00
|
|
|
# Received packets using external program exec
|
2007-08-23 19:24:56 +02:00
|
|
|
module_begin
|
|
|
|
module_name ReceivedPackets
|
|
|
|
module_type generic_data
|
|
|
|
module_exec netstat -s | grep "Packets Received" | tr -d " " | cut -f 2 -d "=" | tr -d "\n"
|
2007-09-14 15:58:12 +02:00
|
|
|
module_description Received packets
|
|
|
|
module_end
|
|
|
|
|
2007-09-17 17:52:03 +02:00
|
|
|
# Accepted server sessions (Server in Spanish)
|
2007-09-14 15:58:12 +02:00
|
|
|
module_begin
|
|
|
|
module_name ServerSessions
|
|
|
|
module_type generic_data
|
|
|
|
module_exec net statistics server | grep "Sesiones aceptadas" | gawk "{ print $3 }"
|
|
|
|
module_description Accepted server sessions
|
|
|
|
module_end
|
|
|
|
|
|
|
|
# server sessions erros (Server in Spanish)
|
|
|
|
module_begin
|
|
|
|
module_name ServerErrors
|
|
|
|
module_type generic_data
|
|
|
|
module_exec net statistics server | grep "Error" | gawk "{ print $4 }"
|
|
|
|
module_description Server errors
|
|
|
|
module_end
|
|
|
|
|
|
|
|
# Received packets using external program exec
|
|
|
|
module_begin
|
|
|
|
module_name Listen_Conn
|
|
|
|
module_type generic_data
|
|
|
|
module_exec netstat -an | grep LISTEN | wc -l | tr -d " "
|
|
|
|
module_description Listening connections
|
2007-08-23 19:24:56 +02:00
|
|
|
module_end
|
|
|
|
|
|
|
|
# Free space on disk C:
|
|
|
|
module_begin
|
|
|
|
module_name FreeDiskC
|
|
|
|
module_type generic_data
|
|
|
|
module_freedisk C:
|
|
|
|
module_description Free space on drive C:
|
|
|
|
module_end
|
2007-08-29 18:20:54 +02:00
|
|
|
|
2007-08-23 19:24:56 +02:00
|
|
|
# CPU usage percentage
|
|
|
|
module_begin
|
|
|
|
module_name CPUUse0
|
|
|
|
module_type generic_data
|
|
|
|
module_cpuusage 0
|
|
|
|
module_description CPU#0 usage
|
|
|
|
module_end
|
|
|
|
|
2007-08-29 18:20:54 +02:00
|
|
|
# Free Memory
|
2007-08-23 19:24:56 +02:00
|
|
|
module_begin
|
|
|
|
module_name FreeMemory
|
|
|
|
module_type generic_data
|
|
|
|
module_freememory
|
|
|
|
module_description Amount of free memory.
|
|
|
|
module_end
|
2007-08-29 18:20:54 +02:00
|
|
|
|
2007-09-14 15:58:12 +02:00
|
|
|
# Is Checkpoint SecureClient Service alive ?
|
|
|
|
module_begin
|
|
|
|
module_name Checkpoint_SecureClient
|
|
|
|
module_type generic_proc
|
|
|
|
module_proc SR_Service.exe
|
|
|
|
module_description Checkpoint Secure Client VPN client
|
|
|
|
module_end
|
|
|
|
|
|
|
|
# Is Network Connect Service VPN Client from Juniper alive ?
|
|
|
|
module_begin
|
|
|
|
module_name Juniper_VPN
|
|
|
|
module_type generic_proc
|
|
|
|
module_proc dsNcService.exe
|
|
|
|
module_description Network Connect Service VPN Client from Juniper
|
|
|
|
module_end
|
|
|
|
|
2007-09-17 17:52:03 +02:00
|
|
|
# More examples, uncomment (removing #) to use them
|
|
|
|
# =================================================
|
2007-08-29 18:20:54 +02:00
|
|
|
|
2008-04-02 18:01:35 +02:00
|
|
|
# ODBC query example using ExampleDSN connection defined above.
|
|
|
|
# This module gets the first row in example_table.
|
|
|
|
#module_begin
|
|
|
|
#module_name SQL query example
|
|
|
|
#module_type generic_string
|
|
|
|
#module_odbc ExampleDSN
|
|
|
|
#module_odbc_query SELECT * FROM example_table
|
|
|
|
#module_description The first row of example_table
|
|
|
|
#module_end
|
|
|
|
|
|
|
|
# ODBC query example using ExampleDSN connection defined above.
|
|
|
|
# This module gets the first row in example_table
|
|
|
|
#module_begin
|
|
|
|
#module_name SecondSQL query example
|
|
|
|
#module_type generic_data
|
|
|
|
#module_odbc ExampleDSN
|
|
|
|
#module_odbc_query SELECT punctuation FROM example_table WHERE id = 3
|
|
|
|
#module_description The punctuation row of example_tab where id is 3
|
|
|
|
#module_end
|
|
|
|
|
2007-09-17 17:52:03 +02:00
|
|
|
#Free space on disk D:
|
|
|
|
#module_begin
|
|
|
|
#module_name FreeDiskD
|
|
|
|
#module_type generic_data
|
|
|
|
#module_freedisk D:
|
|
|
|
#module_description Free space on drive D:
|
|
|
|
#module_end
|
2007-08-29 18:20:54 +02:00
|
|
|
|
2007-09-17 17:52:03 +02:00
|
|
|
#CPU usage percentage for second CPU
|
2007-09-14 15:58:12 +02:00
|
|
|
#module_begin
|
|
|
|
#module_name CPUUse1
|
|
|
|
#module_type generic_data
|
|
|
|
#module_cpuusage 1
|
|
|
|
#module_description CPU#1 usage
|
|
|
|
#module_end
|