188 lines
5.2 KiB
Plaintext
188 lines
5.2 KiB
Plaintext
# Base config file for Pandora FMS agents
|
|
# Version 7.0NG.776
|
|
# Licensed under GPL license v2,
|
|
# (c) 2003-2023 Pandora FMS
|
|
# please visit http://pandora.sourceforge.net
|
|
|
|
# General Parameters
|
|
# ==================
|
|
|
|
server_ip localhost
|
|
server_path /var/spool/pandora/data_in
|
|
temporal /var/spool/pandora/data_out
|
|
logfile /var/log/pandora/pandora_agent.log
|
|
|
|
# Interval in seconds, 300 by default
|
|
interval 300
|
|
|
|
# Debug mode renames XML in the temp folder and continues running
|
|
debug 0
|
|
|
|
# By default, agent takes machine name
|
|
#agent_name adama
|
|
|
|
# Agent description
|
|
#description Put here your agent description
|
|
|
|
# Group assigned for this agent (descriptive, p.e: Servers)
|
|
#group Servers
|
|
|
|
# Autotime: Enforce to server to ignore timestamp coming from this
|
|
# agent, used when agents has no timer or it's inestable. 1 to enable
|
|
# this feature
|
|
# autotime 1
|
|
|
|
# By default agent try to take default encoding defined in host.
|
|
# encoding UTF-8
|
|
|
|
# Listening TCP port for remote server. By default is 41121 (for tentacle)
|
|
# if you want to use SSH use 22, and FTP uses 21.
|
|
server_port 41121
|
|
|
|
# Transfer mode: tentacle, ftp, ssh or local
|
|
transfer_mode tentacle
|
|
|
|
# Server password (Tentacle or FTP). Leave empty for no password (default).
|
|
# server_pwd mypassword
|
|
|
|
# Set to yes/no to enable/disable OpenSSL support for Tentacle (disabled by default).
|
|
# server_ssl no
|
|
|
|
# Extra options for the Tentacle client (for example, server_opts "-v -r 5").
|
|
# server_opts
|
|
|
|
# delayed_startup defines number of MINUTES before start execution
|
|
# for first time when startup Pandora FMS Agent
|
|
# delayed_startup 10
|
|
|
|
# Pandora nice defines priority of execution. Less priority means more intensive execution
|
|
# A recommended value is 10. 0 priority means no Pandora CPU protection enabled (default)
|
|
# pandora_nice 0
|
|
|
|
# Cron mode replace Pandora FMS own task schedule each XX interval seconds by the use
|
|
# of old style cron. You should add to crontab Pandora FMS agent script to use this mode.
|
|
# This is disabled by default, and is not recommended. Use Pandora FMS internal scheduler
|
|
# is much more safe.
|
|
# cron_mode
|
|
|
|
# If set to 1 allows the agent to be configured via the web console (Only Enterprise version)
|
|
# remote_config 1
|
|
|
|
# Secondary server configuration
|
|
# ==============================
|
|
|
|
# If secondary_mode is set to on_error, data files are copied to the secondary
|
|
# server only if the primary server fails. If set to always, data files are
|
|
# always copied to the secondary server.
|
|
# secondary_mode on_error
|
|
# secondary_server_ip localhost
|
|
# secondary_server_path /var/spool/pandora/data_in
|
|
# secondary_server_port 41121
|
|
# secondary_transfer_mode tentacle
|
|
# secondary_server_pwd mypassword
|
|
# secondary_server_ssl no
|
|
# secondary_server_opts
|
|
|
|
# Module Definition
|
|
# =================
|
|
|
|
# System information
|
|
|
|
# vmstat syntax depends on linux distro and vmstat command version, please check before use it
|
|
module_begin
|
|
module_name cpu_user
|
|
module_type generic_data
|
|
module_interval 1
|
|
module_exec vmstat 1 2 | tail -1 | awk '{ print $13 }'
|
|
module_max 100
|
|
module_min 0
|
|
module_description User CPU Usage (%)
|
|
module_end
|
|
|
|
module_begin
|
|
module_name Load Average
|
|
module_type generic_data
|
|
module_exec cat /proc/loadavg |awk '{print $1}'
|
|
module_description Average process in CPU (Last minute)
|
|
module_end
|
|
|
|
module_begin
|
|
module_name disk_root_free
|
|
module_type generic_data
|
|
module_exec df -kh / | tail -1 | awk '{ print 100-$5 }'
|
|
module_max 100
|
|
module_min 0
|
|
module_description Free disk Percentage of root partition
|
|
module_end
|
|
|
|
|
|
module_begin
|
|
module_name memfree
|
|
module_type generic_data
|
|
module_exec cat /proc/meminfo | grep MemFree | awk '{ print $2 }'
|
|
module_description Free Memory
|
|
module_end
|
|
|
|
# This module uses postprocess feature to pass postprocess value to module
|
|
module_begin
|
|
module_name memused
|
|
module_type generic_data
|
|
module_exec cat /proc/meminfo | grep "Active:" | awk '{ print $2 }'
|
|
module_postprocess 0,976
|
|
module_description Meminfo postprocess
|
|
module_end
|
|
|
|
module_begin
|
|
module_name proctotal
|
|
module_type generic_data
|
|
module_exec ps -A | tail --lines=+5 | wc -l
|
|
module_description Total processes
|
|
module_end
|
|
|
|
# Process information
|
|
|
|
module_begin
|
|
module_name sshDaemon
|
|
module_type generic_proc
|
|
module_exec ps -Af | grep sshd | grep -v "grep" | wc -l
|
|
module_description Monitor SSH Daemon
|
|
module_end
|
|
|
|
# Async data example
|
|
|
|
module_begin
|
|
module_name LastLogin
|
|
module_type async_string
|
|
module_exec last | head -1
|
|
module_description Last Login
|
|
module_end
|
|
|
|
#Hardening plugin for security compliance analysis. Enable to use it.
|
|
#module_begin
|
|
#module_plugin /usr/share/pandora_agent/plugins/pandora_hardening -t 150
|
|
#module_absoluteinterval 7d
|
|
#module_end
|
|
|
|
# This module parses /var/log/syslog file, under the module name "syslog"
|
|
# And search for "ssh" string into it, sending only that information.
|
|
module_begin
|
|
module_name Syslog
|
|
module_description Search for ssh string into /var/log/syslog file
|
|
module_type log
|
|
module_regexp /var/log/syslog
|
|
module_pattern ssh
|
|
module_end
|
|
|
|
# Plugin example
|
|
|
|
# Plugin for inventory on the agent.
|
|
# module_plugin inventory 1 cpu ram video nic hd cdrom software
|
|
|
|
# Extraction module example
|
|
#module_begin
|
|
#module_name Collector
|
|
#module_description Logs extraction module
|
|
#module_type log
|
|
#module_regexp /var/log/logfile.log
|
|
#module_pattern .*
|
|
#module_end |