Features Analysis - Pandora FMS

Transcription

Featuresanalysisof Pandora FMS

FEATURESARCHITECTUREAGENT TECHNOLOGYCONSOLIDATED REPORTSFROM METACONSOLEUSER INTERFACEAND REPORTING*CERTIFIED*

FEATURESANALYSISPandora FMS features listThe following pages shows a list of different features, sorted by categories, of the 4.0 version, inits OpenSource and Enterprise ca ST Enterprise Licence,with full access to sourcecode, and restricted distribution and usage.Support“Self-service” via PandoraFMS Community Forumsand online documentationFull commercial support(8/5 or 24/7). Access to ourenterprise Knowledge Baseand module library.PriceFreeBased on the number ce & AvailabilityMonitoringFault&Event ManagementEvent correlation systemCentralized Managementusing monitoring policiesAutomatic updates with OpenUpdate ManagerGeolocation (GIS)CLI ManagementLDAP/AD Authenticationpandorafms.com3

000 agents2.000 agentsAutenticación LDAP/ADVirtual infraestructure andcloud computingMonitoring delegation tosecondary servers(Export Server)High AvailabilityHigh scalation(Metaconsole)Monitorización with weightsCustomizablevisual consoleSynthetic Modules (dynamicdata creation over existingdata)DB Historic to store dataduring long periodsSupport (Experimental) forOracle & PostgreSQL asbackendCentralized distributionsystemRecommended capacity limitper server3rd Party Product IntegrationAPI Librarypandorafms.com4

FEATURESANALYSISAgent Full featured multiplatformagents for Windows, HP-UX,Solaris, BSD and LinuxDelegated agents (Brokermode and Proxy mode)Postconditions andpreconditions in the softwareagent module executionAndroid & Embedded devicesagentsRemote Inventory and/orwith agentsRemote agent managementUser Interface andreportingSkins system for a completeinterface customization peruserRole-Based AccessControl LevelsFine Grain ACL System100% WEB Environment,multi client with separatedviews, ready for SaaSNative integration of IntegriaIMS Incidents systemConsolidated reports fromMetaconsolepandorafms.com5

FEATURESANALYSISInterfaz de usuario Light Web Consolefor mobilesReports & SLAITIL v3 MetricsCustom ReportsDashboardConsolidated reportsfrom MetaconsoleAuto Discovery & networktopology detectionSNMP (v1, v2c, v3)MonitoringIPv6 SupportWMI MonitoringSNMP Trap MonitoringDynamic user-customizedmaps (network console)Hiht speed ICMP & SNMPExplorationTransactional WebMonitoringSSH/ Telnet Consolepandorafms.com6

A R CH1ITECTUREPandora FMS has a very flexibleand versatile design and allowsto work in several differentways, combining different kindsof monitoring.*CERTIFIED*

PANDORA FMSARCHITECTURESynthetic modulesSynthetic modules are used to generate new data from existing data, using arithmeticaloperations or average values. This is useful for: calculating the total throughput of a switch,adding the traffic of all its interfaces, the number of total sales by adding the average sales valueof each franchise, or the average temperature of a room from the temperature value in all itspoints.Performance & Availability MonitoringPandora FMS provides a complete solution for performance & availability, monitoring the keyresources across the infrastructure, to ensure that all devices are ready to respond to end userrequests.It is possible to run these tests in the software agent or from Pandora FMS Server, whicheliminates the risk associated with running monitoring software on target systems.pandorafms.com8

PANDORA FMSARCHITECTUREPandora FMS specific tests and features include: ICMP response and delay SNMP Polling (v1, v2c, v3) Standard TCP/IP services (HTTP,SMTP, etc.) Specified TCP/IP ports with regularexpression matching URL availability Linux/Unix process availability (viaSNMP) Nagios Plug-In Support (for both,availability and performance) Network traffic in a device Network latency timeScheduled Performance Tests: CPU, Disk and Memory Usage System overload Number of occurrences in a logfile persecond Temperature on a system Output of a system command Obtention of WMI or PerformanceCounters values in Windows Service availability or runningprocesses Oracle DB status, as well as itstablespaces and other valuesFault & Event ManagementPandora FMS event system keeps a log of everything that has happened. When a service or ahost goes down, or it comes up again, when an alert is fired, when new hosts are discovered atthe network, etc.It is possible to search events, filtering them by group, type, severity, or event status. All this isdone from the Web Console. Events can be exported to a CSV file, or be linked to feed readers,thanks to it RSS feed.pandorafms.com9

PANDORA FMSARCHITECTUREThe operative of these events allows them to be validated or marked as “in process” by anoperator, in a way any task taking place there can be seen, leaving a trace of comments over it.Besides, the events are associated to a group of tags or categories, allowing Pandora to performsearches and semantical groups.Visual console for custom defined service-level monitoringPandora FMS allows to each user to define their customized view of the monitoring, this isa customized-defined graph view, based on a representation in the space, selected items,represented status, data, graphs or other visual console status, scaling always the critical eventThis feature, combined with the service-based monitoring on weights, in a much more flexibleway and with user-defined margins. Unlike as with the “specific” monitoring, where there arekept specific values from specific indicators, the service monitoring with Pandora FMS is thoughto monitor “groups” of elements, from different kind, with certain “margin of error”, based onthe failure accumulation.The need of monitoring services as something “abstract” appears when we ask ourselves thisquestion: What happens when an element that initially is not critical? such as, for example,one of the twenty Apache servers. Firstly, we could not to warn, in fact, could be it has frequentfalls, so there are 20 nodes, it shouldn’t warn us for the fall of only one node (let’s imagine thatthis warning wake up someone who is sleeping). In fact, a service with so many redundancy ismeant to give us more peace, not more work. It should only warn us if a more critical element isdown (such as a router) or if “several” WEB servers are down, for example, four or five of them.pandorafms.com10

PANDORA FMSARCHITECTUREI should not tell us because they fall one or two nodes (in fact, just imagine having to lift someoneout of bed whenever apache is down). It is assumed that the service is led, so we should havesome margin, and not give us more headaches. The system should be smart enough to knowthat a single server down is not a problem, but when it goes from 5 should start worrying, andcertainly fallen more than 10 servers should get out of bed to anyone.For more information you could check Service-level monitoring section at pandorafms.com.Virtualization and cloud computing monitoringEnterprise version has a specific enterprise plugin (included in the Enterprise license) forautomatic detection of VM in VMWare 4.x infrastructure using a single centralized point(VCenter) to gather all information, using the VMWare API. There are OpenSource pluginsavailable for VirtualBox, Xen, KVM and EC2.You could find more details in our Virtualization and Cloud computing at Pandora FMS’s Web.pandorafms.com11

PANDORA FMSARCHITECTUREHigh AvailabilityPandora FMS has multiple server based structure (Data Server, Plugin Server, Network Server,etc), a Web console and a Database. It has redundancy over all its items. Any amount of serversor consoles can be created, as well as a MySQL cluster for the Database. HA concepts arealso related with Export Server, Metaconsole and the history database (all of them, Enterprisefeatures).Monitoring delegation to secondary servers(Export Server)The Export Server provides the data escalation feature, making possible to have a completelydistributed installation at the same building, office, or even different countries. The differentPandora FMS installations will connect to to a Central Pandora FMS, which will collect andcentralize the information. The Export Server is an Enterprise feature.Source of RAWinformationPandora FMSSETUP #1Pandora FMSSETUP #1Pandora FMSdatabaseMETA SETUPPandora FMSservers(any kind)Pandora FMSconsolePandora FMSdatabasePandora FMSservers(any kind)NETWORKPandora FMSExport ServerPandora FMSExport ServerPandoraserverpandorafms.comSource of RAWinformationPandoradatabaseTop Level User ViewPandora FMSconsolePandoraconsole12

PANDORA FMSARCHITECTUREHigh scalability (Metaconsole)Pandora FMS has the Metaconsole feature that is a Web environment that works as a managerof independent installations from Pandora FMS, to coordinate them in server farms with onlyone management. This allows Pandora FMS to get almost an unlimited scalability, managingdifferent installations, independents between themselves, from a single point, in a federatedand independent system.Pandora ServerHistoryDatabasePandora ServerHistoryDatabasePandora ServerRead more about this advanced topics in our Architecture section at aseMainDatabaseWeb consoleWeb consoleMETA CONSOLEWeb consoleCentralized Management using monitoring policiesThis feature is very important for organizations with lots of agents. Pandora FMS is able tomanage thousand of devices with thousand modules and alerts. We have developed the policiesfeature, in order to make easier the administrator’s job. Policies are even applicable usingcommand line interface and ready to be used in a multi-tiered environment.The policies allow to assign modules and alerts to the agents in a centralized way. This is possiblebecause every policy module and alert is propagated to every the subscribed agent. This is anEnterprise feature.pandorafms.com13

PANDORA FMSARCHITECTUREAutomatic updates with Open Update ManagerThe Export Server provides the data escalation feature, doing possible to have a completelydistributed installation at the same building, office, or even different countries. The differentPandora FMS installations will connect to to a Central Pandora FMS, which will collect andcentralize the information. Since 3.2.1 version, Update Manager can use offile (zip files) to updatethe system.LDAP/AD AuthenticationPandora FMS has its own user system, stored in its database, but you have the choice of usingActive Directory or LDAP to authenticate against remote systems, keeping the relevant dataregarding Pandora rights and roles, in its own database. Pandora FMS has got an authenticationAPI so it can be extended to proprietary mechanisms, implemented by the user itself.CLI ManagementPandora FMS can be managed via command line. The CLI (Command-Line Interface) in PandoraFMS is used making command-line calls (pandora manage). This method is specially useful tointegrate 3rd party applications with Pandora FMS via automated tasks. Basically, it consists ina call with parsed parameters to realize an action like creating or deleting an agent, a moduleor an user, amongst other ones.pandorafms.com14

PANDORA FMSARCHITECTUREGeolocation (GIS)Since version 3.1, Pandora FMS started providing location information and interactive maps thatwill show the agent’s location. Newest version (4.0) includes support for Android Phone, whichsend GIS information and translate (using Reverse Geocoding) to “human” addresses, showingin a map location of the device, and a list of addresses with timestamps.Recommended capacity limit per serverPandora FMS has been designed to work in company environments: this means, groups ofsystems which can grow and grow progressively. Our engineers have estimated an average of2.000 agents per server, with 25 modules per agents, executing tasks every five minutes. Usingthe metaconsole and the Export Server, these numbers can be expanded using more servers, ortrying to assign more agents in a single server (this last choice needs a very fine customization).We have clients with huge environments, where Pandora FMS is used with different methodsand purposes. For example, we’ve got a client with 6.000 agents, and a setup of four servers anda metaconsole. We also have got another client with a single server and 160.000 modules.pandorafms.com15

PANDORA FMSARCHITECTUREEvent correlation systemSince version 4.0, Pandora FMS incorporates a system to correlate events and producealerts or new events. This system allow us to define logical rules between the system events,based on many fields, like tags, status, criticity, value, group, source agent, etc. Besides,all these rules are applied over a time range. This system can “filter” false positives, eventstorms and determine the source of the problem way more automatized and clear.DB Historic to store data during long periodsPandora FMS Enterprise version supports an additional database to store all the data whichisn’t used often, (i.e data older than one month). This data is browsed transparently whenit’s needed, allowing a soft and fast system data processing in “real time” and, on the otherhand, to store more data and for a longer time.3rd Party Product Integration API LibraryPandora FMS external WEB API is used doing HTTP/HTTPS remote calls (REST API) abovethe file /include/api.php.This is the method that has been defined in Pandora FMS to integrate applications fromthird parts with Pandora FMS. This is a HTTP request with the parameters formated toreceive a value or a list of values, the API also allow to set operations on the server (likeapply a policy or insert a value). The API is also used to get event information for an externalevent manager.pandorafms.com16

PANDORA FMSARCHITECTUREMonitoring with weightsWhile there is a “specific” monitoring where defined values from defined indicators are gathered,the service monitoring with Pandora FMS is meant to monitor sets of elements, of differenttypes, with some error ranges, based on the failure accumulation.Support for Oracle & PostgreSQL as backend(Experimental)Since version 4.0, Pandora FMS incorporates support for Oracle or PostgreSQL as databasesystems for the Pandora backend, replacing MySQL, which was until now the only backendPandoraFMS has ever supported. It is not recommended to use them in production systems yet(that’s why we say it is still experimental).Centralized file distribution systemA file collection is a set of files (scripts and/or executables) which are copied automatically to aspecific folder in the agent (Windows or Unix). File collections allow these files to be propagatedwithin the policies, in a way they can be used by a group or agents, using a “package” of scriptsand the modules which use them.pandorafms.com17

2AGENTTECHNOLOGYPandora FMS has agents in alltypes of systems, able to extractinformation in any way, andto process and send dodgingvarious obstacles and complexnetwork topologies.*CERTIFIED*

AGENTTECHNOLOGYMultiplatform agentshere are software Agents for Windows, Linux, AIX, HP-UX, Solaris, BSD y Mac: small sizeagents that provide information about the system where they are installed (CPU, memoryusage, disc usage, the outputof any command, etc.).There are also hardwareAgentstomonitortemperature,humidity,smoke, Gas, flood and anydevice that send dry contact.Embedded agents and Android agentPandora FMS have developed a specific agent for embedded devices, made in Posix C, aimedat devices with very little RAM, and can work with all types of processors (ARM, VIA .). Thesekind of agents should be able to run on any Linux-embedded device. Pandora FMS also have anspecific agent for Android phones: Pandroid.This agent, reports GPS information to theGIS system on Pandora FMS, and also returnsbattery levels, compass information, amongother sensor information like proximityinformation. In the future, this agent could bethe platform to send centralized informationfrom mobile devices.pandorafms.com19

AGENTTECHNOLOGYDelegated agents (Broker mode and Proxy mode)This is a special work method forthe agent, which allow it to workin different complex architectures,operating over a single physical agentand deploying a remote monitoringfrom that agent, resulting in thereal monitoring on various agents,monitored and managed from thesingle system with a software agentinstalled. This agent is managed likea normal agent, but behaving as if itcontained other agents.Tentacle protocol supports the useof proxies (in HTTP/Connect mode)in a way other agents can connectdirectly to the server using a standardproxy. In the same way, agents canbe configured so they can act asintermediate servers (Drone mode),so they can be used to centralize thecommunication with the destinationserver or with another proxy. Thissystem also allows file collection andremote configuration management.Pandora FMSServerPandora FMSAgentsPandora FMSDrone AgentsPandora FMSAgentsRemoteNetworkPandora FMSAgentsPandora FMSDrone AgentsEjecución de módulos en los agentes softwareThis functionality, allows to act from agents inmediately without waiting for managing theproblem from the console. Also avoids certain checks when executing specific situations as abackup, in HA systems, etc.pandorafms.com20

AGENTTECHNOLOGYRemote Inventory or with agentA new system and service inventory which will act as a system inventory, showing software andhardware in the monitored systems. It is possible to choose whether agent-less or agent-basedconfiguration to get that data.Remote agent managementSince Pandora FMS 3.1 Enterprise version you can modify from the Web Console theconfiguration of any Agent installed. This allows to add or remove modules from the agent,change the IP address of Pandora FMS server, the interval, the connection port, and any otherconfiguration option of the Agent.pandorafms.com21

3CONSDETOLIDA OLEREPORT FROM METACONSPandora FMS, among manyother functions performs SNMPv3, WMI and transactionalmonitoring, network mapsand dynamic network topologydetection.*CERTIFIED*

CONSOLIDATED REPORTFROM METACONSOLEDynamic browsable network mapsThese maps are an improved and extended version of the original visual console andnetwork maps. This allows the user, in a completely visual environment, to create his ownmaps, with real monitoring elements and reorder them following a customized networkview, establish multiple hierarchies with them, as well as linking them to other maps andbrowse them.Ipv6 SupportThis version includes full support for TCP, ICMP and SNMP protocols.Autodiscovery and network topology detectorPandora FMS is able to scan and detect new non monitored systems periodically, detectingits OS and profile, based on TCP ports and assign them to an specific network monitoringtemplate, depending on the network, OS or port profile. Recon server also detects the networktopology and will try to “attach” to the more direct known parent to the new host.pandorafms.com23

CONSOLIDATED REPORTFROM METACONSOLESNMP MonitoringSimple Network Management Protocol (SNMP is a UDP-based network protocol. It is usedmostly in network management systems to monitor network-attached devices for conditionsthat warrant administrators attention. Pandora FMS can monitor any device with SNMP protocoldirectly from the Pandora FMS Network Server.SNMP Trap MonitoringPandora FMS has a Trap Console that shows the SNMP events that have been received byPandora FMS server, showing the following information about the event: its status, the OIDsource and the associated Agent, the date, if it has any associated alert, and the action to takeon the event. From the same Console, alerts could be assigned in order to receive traps.Pandora FMS Enterprise SNMP traps console has a few interesting features for Enterprisecustomers: It has a MIBs loader for traps definition. User can define a Traps alias to show the information differently. It can forward a TRAP to agent, as a string module. It can filter SNMP before processing traps.pandorafms.com24

CONSOLIDATED REPORTFROM METACONSOLEWMI MonitoringWindows Management Instrumentation (WMI) (or Windows Management Interface) is a set ofextensions for the Windows Driver Model that provides an operating system interface throughwhich the instrumented components provide information and notification. Pandora FMS canmonitor any Windows System SNMP protocol directly from the Pandora FMS WMI Server orusing the WMI module in Windows Agent.Transactional advanced WEB MonitoringPandora FMS Web monitoring is a transactional or synthetic test. This one reproduces thecomplete browsing “process” truly. It could include features such as to authenticate in a form,do click in a menu option, fill in a form, verifying that each process returns an specific textstring. Any mistake in a moment of the process, will have as result a failure in the checking.The complete transaction includes the download of all the resources (graphs, animations, etc),that the real browsing has.Web monitoring returns a “real” user experience, reporting time of transaction, and it is able to“check” if the complete transaction is complete, checking text output response.Hi-Speed ICMP & SNMP ExplorationPandora FMS version 4.0 incorporates the new “Enterprise Network Server” which performsthe same tasks the OpenSource does but up to 50 times faster, by using specific faster tools foreach test and organizing the checks in multi-thread blocks, providing an efficient managementin systems with thousands of ICMP and/or SNMP checks.pandorafms.com25

4REPORTING-USER INTERFACE-Pandora FMS, allows to havea customized view of the webinterface for each user, withreports, dashboard, mobileconsole and a free integration ofIntegria IMS.*CERTIFIED*

REPORTING/USER INTERFACESkins systemPandora FMS Enterprise version allows us to design our own interface -per user group- so itsview can be fully customized: colors, icons, layout, logos, etc.Role-Based Access Control LevelsPandora FMS has an user role and a permission system, that allows to define new userswith different permissions over the different monitoring groups. This way, an user could beadministrator of the Accounting System, having only permissions to see the events of the HumanRecourses group. This OpenSource system is complemented with ACL Enterprise system.ITIL v3 MetricsNow, it’s possible to add the items MTBF, MTTR, TTO y TTRT of any monitored event in thereports.pandorafms.com27

REPORTING/USER INTERFACE100% Web, multiclient ready for SaaSPandora’s architecture and its design has been oriented to serve different clients with the sameinfrastructure. It is multiclient (each user sees only his elements). Since it is 100% Web, itallows any remote client to access its views and the management of its reports.SLA & ReportingPandora FMS can create HTML, PDF and XML reports for any monitored element. Data, suchas graphs, SLAs, metrics, events, etc., can be added to these reports. Reports are created for aconfigurable time frame, that goes from an hour up to six months.Pandora FMS SLA reports allow us to define the level of agreement (%) existing per parameter,defining valid operation ranges. This allow us to define combined metrics with many values todetermine the level of agreement of a set of parameters in a defined time range.Fine Grain ACL SystemThe possibility of configuring through ACLs the Operation and Administration sections from themenu that could be seen by the user. This allow to define a different interface for each user,removing specific parts of the interface, even if the user has rights to see it.pandorafms.com28

REPORTING/USER INTERFACENative integration of Integria IMS incidents systemPandora FMS has a basic incident system integrated. Instead of improving this system, we havetotally integrated it with an external incident system, called Integria IMS.Más información en la Web integriaims.comThis OpenSource system, allow us to perform many tasks, like automatic notifications viaemail, define work groups, add attachments, SLA notifications and separate by operation roles.You will be able to use Pandora FMS interface to work directly over Integria.pandorafms.com29

REPORTING/USER INTERFACECustom ReportsNow it is possible to change the logo of the reports and add first page, header, footer and indexin the reports. With Pandora FMS, in its Enterprise version, it is possible to create reports inHTML, PDF and XML and send them to an email address in the desired date. Besides, reportscan be recurrent and sent every week, month, each six months, etc.In the Enterprise reports, the first page can be customized with a WYSIWYG editor, withautomatic content indexes, custom fonts (including non Latin characters, like Japanese,Arabic.) and of course, different Wizards can be used to provide an easier and fastermanagement.pandorafms.com30

REPORTING/USER INTERFACELight WEB Console for mobilesPandora FMS provides an specific interface for light mobiledevices (such as mobile phones) where essential system datacan be visualized in an efficient and fast format, adapted tothe terminal used at that moment. This interface can visualizegraphics, status, events and some other relevant data inPandora.3rd Party Product Integration API LibraryPandora FMS external Web API is used doing HTTP/HTTPSremote calls (REST API). This is the method that has beendefined in Pandora FMS to integrate applications from thirdparts with Pandora FMS. This is a HTTP request with theparameters formated to receive a value or a list of values, theAPI also allow to set operations on the server (like apply a policyor insert a value). The API is also used to get event informationfor an external event manager.SSH/Telnet ConsoleThis feature allow adminsitrators and users to connect directly from the browser (HTML5 needed!)to your remote devices, like Routers, Switches or unix servers by using a 100% Web implementationof Telnet/SSH. All connections comes from Pandora FMS server, so you can centralize your networkaccess from a single point. This feature and the VNC access extension, helps you to manage yournetwork and servers from a single, centralized point by using Pandora FMS.pandorafms.com31

REPORTING/USER INTERFACEDashboardSince Pandora FMS 3.1, the Pandora Console has a new main page, called Dashboard. Ourdashboard is based on “pieces” of custom-defined information called widgets, and is totallycustomizable with different screens and frames. Each dashboard will contain different widgetssuch as reports, graphs, maps, metrics etc. Each user can define its own dashboard.pandorafms.com32

THANK YOUfor your attention. Formore details about theproduct, please visitpandorafms.com orcontact the technicalsupport of Pandora FMS.www.artica.esinfo@artica.es( 34) 91 559 72 22

Free Artica ST Enterprise Licence, with full access to source code, and restricted distribu- . Nagios Plug-In Support (for both, availability and performance) . Oracle DB status, as well as its tablespaces and other values Fault & Event Management Pandora FMS event system keeps a log of everything that has happened. When a service or a .