WHAT´S NEWPANDORA FMS 7.0 NG

UPDATE PACKAGE
RELEASE747
July 2020
These release notes
describe new features,
improvements
and fixed issues inPandora FMS NG 747.
They also provide
information aboutupgrades and describe
some workarounds forknown issues.

•New features and developments•

Feature extinction•

How to update Pandora FMS•

Changes and improvements•

Changes and known limitations•

Bug fixes•

Fixed vulnerabilities•

Legal notice

New features and developments
Improved SNMP and WMI remote scan wizards
SNMP and WMI monitoring allows quick and custom remote monitoring deployment with just afew clicks. We have improved the existing wizards and added a system of profiles and modifiable
templates for maximum automation. It will be possible to define what type of remote modules
you want to add to a new device. You may also apply certain modules automatically if it is a
Cisco router or a Sonicwall firewall and likewise for a Windows or a Linux server. We have many
default modules and we have added a logic that allows to automate and extend it.
Pandora FMS contains many modules by default, but the administrator can define his own
conditional templates and even apply the wizard to the policies, allowing totally customized
massive deployments with ease.

facebook.com/pandorafms
linkedin.com/showcase/pandorafms@pandorafms

pandorafms.com

Update package 747
July 2020

DB2 Monitoring in Discovery
In this update 747, a new monitoring has been added to Discovery: DB2.

How to update
Pnadora FMS

DB2 configuration and monitoring is similar to that of Oracle, it will also have default modules,
in addition to the possibility of entering custom queries.

There are several ways
to update Pandora
FMS console:

Through Update
Manager, automaticallyin Pandora FMS console
itself (it requires
console internetconnection).
Through Update
Manager, manually in
Pandora FMS console
itself by means of OUM
update files.
By manually installing
packages (rpm, deb ...)and later updating theconsole through theweb interface.
The server will have tobe manually updated
through RPM or tarball
packages.

You can find more
information about
Pandora FMS downloads
on our website:

New log viewer system in Metaconsole
In previous releases, several changes have been made to log collection and display. This
release, it is the turn of Pandora FMS Metaconsole. As in nodes, the log display view has
been included within the Metaconsole, with an additional feature to filter logs by node, agent,source, date, etc.

OpenSource
version packages
Enterprise version
packages
For detailed
information and thesteps to follow to
update each item,
classified by operating
systems, go to our Wiki.

pag. 2

pandorafms.com

Update package 747
July 2020

New last value report

Learn more:

A new type of report has been included by which the last value of a module common to anumber of agents will be obtained. From this update onwards, it will be necessary to create
just one item for all the same modules in the report.

Pandora FMS online
documentación
Plugin Library
Pandora FMS
Official Support

Importing groups in the Metaconsole
This release includes mass group creation in the Metaconsole by importing through CSV files,
a feature that was already available in nodes.

VMware monitoring improvement
VMware system monitoring has been optimized with a large number of virtual network entities.
Now, this task can be done faster thanks to network discovery through a multithreading process.

Changes and known limitations
SNMP Interfaces, SNMP and WMI wizards
Module creation and display using SNMP interfaces, SNMP and WMI wizards have been
modified and the wizard works differently (see above, in new features).

Log refactoring
Default console and audit log generation paths have been modified to: /var/www/pandora_console/logs.
In new clients, both logs will be disabled by default and must be enabled in the console configuration. In existing installations, the path changes to the new pathpag. 3

pandorafms.com

Update package 747
July 2020

Fixed vulnerabilities
Thanks to the information provided by @tehwinsam, we have been able to correct and fix
the following vulnerabilities that affected Pandora FMS.

In this release, different ways of entering (XSS) the Pandora FMS code have been solved byusing the web browser in the following views:

N/A5951

SNMP browser

N/A5953

In visual style settings

N/A5954

In creating new tags

N/A5955

In Pandora FMS log view

N/A5957

In network map creation

N/A5958

In the event view

N/A5959

In the special days view

N/A5956

In agent group creation

N/A5952

In creating network scanningFeature extinction
In this release, no existing Pandora FMS features have disappeared.

pag. 4pandorafms.com

Update package 747
July 2020

Changes and improvements

pag. 5

Case#GitLab #Description

N/A5621

Updated route_parser plugin.

N/A5649

Added log displayer to Metaconsole.

9431/ 9433

5346

Added new report type to obtain the last value of the module.

N/A

5787

Replaced default Goliath web engine by CURL.

N/A5936

Added SUID field to ElasticSearch logs.

N/A5935

Pandora FMS Log Saving Refactoring.

N/A

5310

Restructured SNMP interface, SNMP and WMI wizards.

N/A

6055

New documentation of the new type of report “Last value”.

N/A

6035

New documentation of the new WMI/SMP wizards.

N/A

6015

New Discovery DB2 documentation.

N/A

5829

Updated error messages for permissions in Metaconsole.

10075

5703

Access restriction to Pandora FMS logs through web browser.

N/A

5854

VMWare plugin optimization.

N/A

5527

Discovery SAP update to customize module executions.

9834

3367

Added importing groups by CSV in Metaconsole.

N/A

5778 / 5631

Added DB2 to Discovery.

N/A

5784

Added a warning when the administrator orders the deletion ofa node in the Metaconsole.

pandorafms.com

Update package 747
July 2020

Bug fixes

pag. 6

Case#GitLab #Description

10319

5575

Fixed agent duplication due to recognition tasks on the satellite
server.

N/A

6056

Fixed data in HA server view.

10205

6047

Fixed CSV sent by email in Spanish.

10261

6014

Fixed LWP usage for HTTPS environments on CentOS6.

N/A5945

Graph size refactoring in reports.

N/A

5922

Fixed Windows log collecting in ElasticSearch.

N/A

5914

Console display refactoring at different screen resolutions.

9984

5865

Fixed SNMP v3 interactive browser for passwords with specialcharacters.

N/A5850 / 5837

Correct insertion of module screenshots in history reports.

10030

5832

Added information returned through event API call.

N/A

5809

Fixed the failure that did not allow deleting messages sent
through the internal messaging system.

N/A

5739

Fixed background display in public links in visual consoles.

10243

6026

Fixed server view in Metaconsole with queuing higher than 200.

10277

6024

Fixed policy replication in Metaconsole.

10248

5998

Fixed tag verification in event correlation.

N/A

5997

Fixed time stamp in module charts.

10243

5993

Fixed database search in alert correlation.

N/A

5977

Fixed full screen access with non-admin user.

10209

5973

Fixed dashboards as home screen.

10190

5947

Fixed color table representation in PDF.

N/A

5926

Fixed database alert correlation deletion.

10154 /10156

5919

Fixed time stamp in SLA reports (it shows year 1970 in somecases).

N/A

6095

Error 500 in module view in Meta inventory.

pandorafms.com

Update package 747
July 2020

pag. 7

Case#GitLab #Description

9948

5918

Fixed log correlation with Syslog.

N/A5911

Fixed software agent installer using tarball files.

10144

5910

Fixed SQL reports with restricted characters.

10087

5906

Fixed boolean data compaction using pandora_db.

10107

5905

Fixed authentication through Active Directory.

10124

5901

Service widget within a dashboard: service size now self-adjusts
better to widget.

N/A5875

Fixed local inventory module.

N/A5869

Fixed error message in web modules.

N/A

5856

Fixed word filtering in reports.

10067

5853

Fixed adding more than one service in a dashboard.

N/A

5845

Fixed linked items between visual consoles.

N/A

5834

Fixed module historical image display

N/A

5830

Fixed view and actions in SNMP browser.

N/A

5827

Fixed agent creation through API.

N/A

5818

Fixed SNMP Browser through custom MIBS.

10013

5811

Fixed module graphic CSV.

N/A5803

Fixed SNMP module creation using SNMP Browser.

N/A

5919

Fixed agent error messages without optional dependencies.

9999

5788

Fixed percentile items in visual consoles.

N/A

5776

Fixed agent deployment over inaccessible networks causing task
to stay at -1 indefinitely.

N/A5774

Fixed SAP monitoring with passwords with special characters.

N/A

5772

Fixed 24H agent accessibility item in tree view that was notcorrectly displayed.

N/A

5761

Fixed verification of max_execution_value of php.ini by Pandora FMS
console.

pandorafms.com

Update package 747
July 2020

pag. 8

Case#GitLab #Description

N/A5759Fixed interval display in Discovery Oracle.

N/A

5728

Fixed Pandora FMS standard user with administrator
permissions display

N/A

5727

Fixed data displayed by Agent ID and Agent Name in event
view.

N/A

5726

Fixed event severity color in event view.

N/A

5721

Fixed all_agents API call

9895

5715

Fixed IPAM task display with standard user with administrator
permissions.

9909

5714

Fixed agent import using CSV (Discovery).

N/A

5709

Fixed visual console refresh time.

9901

5704

Fixed warning message to the console log.

N/A

5827

Fixed agent creation through API.

N/A5818

Fixed SNMP Browser through custom MIBS.

10013

5811

Fixed module graphic CSV.

N/A5803

Fixed SNMP module creation from SNMP Browser (for stringmodules, when creating them without history).

N/A

5793

Fixed agent error messages without optional dependencies.

9999

5788

Fixed percentile items in visual consoles.

N/A

5695

Fixed time stamp in SLA Reports.

N/A

5679

Fixed visual console display in legacy mode.

9870

5667

Fixed collections with symbolic links.

N/A5636

Fixed parameter deletion in correlation alerts.

9733

5617

Fixed event owner change when validated.

N/A

5568

Fixed agent search in global search engine.

N/A

5545

Fixed summary data in module charts.

N/A

5473

Fixed inventory item modification in report template.

pandorafms.com

Update package 747
July 2020

Case#GitLab #Description

9895

5470

Fixed operating system creation.

9377

5448

Fixed module creation through Discovery SAP.

N/A

5345

Fixed switching between Discovery views.

N/A

5217

Fixed websocket initial configuration modification.

N/A

5186

Fixed HTML display in PDF reports.

N/A

4973

Fixed availability report sampling.

8139

4144

Fixed visual console display on mobile devices.

N/A

3512

Fixed service display on dashboard with clock widget on the samedashboard.

Contact

N/A

5978

Added API call to modify new event fields.

North America

N/A

636

Fixed Target IP and Export Target fields in policies.

9761

6020

Fixed macros in correlation alerts.

N/A

6030

Fixed Shift_JIS encoding in software agents.

9454

5386

Fixed SNMP real-time graphics with passwords with specialcharacters.

Remember you candownload the lastversion of Pandora FMSthrough the Update
Manager.
UpdateBrickell City Tower
80 S.W. 8th Street
Miami. USA
Tel.: +1-305-900-6683
info@pandorafms.com
Europe, Middle East,and Africa
Gran Vía, 62
Madrid, Spain
Tel.: +34-91-559-72-22
Tel.: +33-7-555-39-209
info@pandorafms.com
Latin America
Tel: +51-164-190-94
Tel: +52-5585-264-997
info@pandorafms.com
Asia Pacific
Rworks, Inc
Tel: +81-3-5946-8405
rw-sales@rworks.jp

Legal notices© 2020 Pandora FMS LLC. All rights reserved.
This document may not be reproduced by any means nor modified, decompiled, disassembled, published or distributed, inwhole or in part, or translated to any electronic medium or other means without the prior written consent of Pandora FM.
All right, title, and interest in and to the software, services, and documentation are and shall remain the exclusive property ofPandora FM, its affiliates, and/or its respective licensors.
PANDORA FMS DISCLAIMS ALL WARRANTIES, CONDITIONS, OR OTHER TERMS, EXPRESS OR IMPLIED, STATUTORYOR OTHERWISE, ON THE DOCUMENTATION, INCLUDING WITHOUT LIMITATION NONINFRINGEMENT, ACCURACY,COMPLETENESS, OR USEFULNESS OF ANY INFORMATION CONTAINED HEREIN. IN NO EVENT SHALL PANDORA FMS,ITS SUPPLIERS, NOR ITS LICENSORS BE LIABLE FOR ANY DAMAGES, WHETHER ARISING IN TORT, CONTRACT ORANY OTHER LEGAL THEORY, EVEN IF PANDORA FMS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
The Pandora FMS trademarks are the exclusive property of Pandora FMS LLC or its affiliates, are registered with the U.S.
Patent and Trademark Office, and may be registered or pending registration in other countries. All other Pandora FMS
trademarks, service marks, and logos may be common law marks or are registered or pending registration. All othertrademarks mentioned herein are used for identification purposes only and are trademarks of (and may be registeredtrademarks) of their respective companies.

pag. 9pandorafms.com

pandorafms.com