The BigPanda agent is a low-footprint daemon installed on the master host of your monitoring tool. It consumes alerts from the tool in real-time and then transmits them to BigPanda via TLS-encrypted HTTP calls.

Use the steps below to install, configure update, and uninstall the BigPanda Agent.

Install the BigPanda Agent

📘

Prerequisite:

python >= 3.6.8 and python3-pip is required to install the agent and should be installed prior to installing the agent.

To install the agent, use the following commands based on your OS:

RedHat / CentOS

1. Add a new yum repository to download the BigPanda Agent package:

$ sudo vim /etc/yum.repos.d/bigpanda.repo

...

[BigPanda]
name=BigPanda
baseurl=https://bigpandaio.jfrog.io/artifactory/int-rpm/bigpanda/agents/
enabled=1
gpgcheck=0
gpgkey=https://bigpandaio.jfrog.io/artifactory/int-rpm/bigpanda/agents/repodata/repomd.xml.key
repo_gpgcheck=1

2. Update the yum repos list to add the BigPanda repo:

$ sudo yum update

3. List all available packages in the BigPanda repo:

$ sudo yum list --showduplicates bigpanda-agent | expand

Available Packages
bigpanda-agent.x86_64                    9.0.1-1.el7                    BigPanda
bigpanda-agent.x86_64                    9.0.1-1.el8                    BigPanda
bigpanda-agent.x86_64                    9.1.0-1.el7                    BigPanda
bigpanda-agent.x86_64                    9.1.0-1.el8                    BigPanda

4. Install the BigPanda agent package:

$ sudo yum install bigpanda-agent-<version-number>

🚧

RHEL / CentOS Packages

Based on the available packages listed above, you can pull the RHEL 7 package for the bigpanda-agent version 9.1.0-1.el7 like this: bigpanda-agent-9.1.0-1.el7

Debian / Ubuntu

1. Ensure packages are installed prior to downloading the BigPanda Agent package:

$ sudo apt update && sudo apt install -y gnupg2 curl lsb-release

2. Add the BigPanda repository and download the OpenPGP key:

$ echo deb https://bigpandaio.jfrog.io/artifactory/int-deb `lsb_release -c -s` main | sudo tee /etc/apt/sources.list.d/bigpanda.list
$ curl -sL https://bigpandaio.jfrog.io/artifactory/api/security/keypair/bigpanda/public | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/bigpanda.gpg > /dev/null

• The --dearmor option is for unpacking input from an OpenPGP ASCII armored key.

3. Update apt repos list and install the BigPanda Agent package:

$ sudo apt update
$ sudo apt install -y bigpanda-agent

Configure the Agent Behind a Proxy Server

You can configure the BigPanda Agent to work behind a proxy server.

Before You Start

Install the BigPanda Agent on your server by following the installation instructions for the related integration.

Procedure

1. Use ssh to connect to the server where the Agent is installed.
2. Open /etc/bigpanda/bigpanda.conf in a text editor (ie: sudo vim /etc/bigpanda/bigpanda.conf)
3. Add the proxy configuration under the backend section of the configuration JSON.
   The proxy configuration semantics are based on the semantics of the Python Requests library.

{
  "root": {
    "backend": {
       "proxies": {
         "http": "http://10.10.1.10:3128",
         "https": "http://10.10.1.10:1080"
       }
    }
  }
}

4. Save the configuration file and restart the agent.

Update the BigPanda Agent

You can upgrade the BigPanda Agent to access the features and fixes available in a newer version.

Process

1. Stop the BigPanda agent by running the following command.

• sudo service bigpanda stop

2. Upgrade the agent by running one of the following command.

• For RHEL and CentOS:
  sudo yum install bigpanda-agent
• For Debian and Ubuntu:
  sudo apt update
sudo apt install bigpanda-agent

3. Make sure that the BigPanda Agent has started by running the following command.

• sudo service bigpanda start

4. Verify the BigPanda Agent is loaded by running the following command.

• sudo systemctl status bigpanda

5. Verify that the Agent version has been upgraded by running the following command.
   sudo grep version /etc/bigpanda/bigpanda.conf

Uninstall the BigPanda Agent

To fully remove an agent-based integration, you must remove the BigPanda Agent from the associated server.

Uninstall the Agent from RedHat Enterprise Linux (RHEL) and CentOS

1. Connect to the server where you want to uninstall the BigPanda Agent package. You must have root privileges.
2. Run the following commands.

• sudo yum remove bigpanda-agent
• sudo rm /etc/yum.repos.d/bigpanda.repo

Uninstall the Agent from Debian and Ubuntu

1. Connect to the server where you want to uninstall the BigPanda Agent package. You must have root privileges.
2. Run the following commands:

• sudo apt-get purge bigpanda-agent
• sudo rm /etc/apt/sources.list.d/bigpanda.list
• sudo apt-get update

Uninstall The Agent Manually

❗️

This method does not remove the package from your package manager's database. Consider using this information to verify that the Agent files are completely removed.

1. Stop the BigPanda service by running the following command:

• sudo service bigpanda stop

2. Remove the BigPanda python module from the Python3 library.

• This library is usually located in /usr/lib/pythonVERSION/site-packages/bigpanda or /usr/lib/pythonVERSION/dist-packages/bigpanda.

You can verify site package locations with the following commands:

$ python3 -m site
$ pip3 list -v

3. Remove the following files:

• /usr/bin/bigpanda-agent
• /usr/bin/bigpanda-config
• /etc/init/bigpanda.conf
• /etc/init.d/bigpanda
• /etc/bigpanda
• /var/log/bigpanda
• /var/lib/bigpanda
• /var/run/bigpanda

📘

Using the find command can help locate files

$ sudo find / -name bigpanda*

4. Remove the BigPanda user and group by running the following commands:

• sudo userdel -r bigpanda
• sudo groupdel bigpanda

Configure the BigPanda Agent with a DMZ

You can set up the BigPanda Agent to communicate with a monitoring server that is behind your corporate Demilitarized Zone (DMZ). First, configure the monitoring server to send alerts to a server in your DMZ. Then, set up SSH keys to allow the monitoring server to communicate with the DMZ server. Finally, configure the DMZ server to integrate with BigPanda.

The following example demonstrates one method for implementing this setup on CentOS 7 using rynsc to transfer and synchronize files between the monitoring and the DMZ servers.

Before You Start

• Administrator access to both the monitoring and the DMZ servers.

• Set up permissions to execute the rsync ssh commands, granted either through RSA keys or in the rsyncd.conf file.

• Administrator access to BigPanda.

Configure the Monitoring Server

1. On the monitoring server, install the BigPanda agent by following the install instructions.

• Refer to the Install the BigPanda Agent guide.

2. Configure a scheduled task to run the following rsync command every minute.
   rsync -a -e "ssh" --remove-source-files /var/lib/bigpanda/queue/ $DMZ_servername:/var/lib/bigpanda/queue

❗️

Be sure to replace $DMZ_servername with the network name of your DMZ server. The /var/lib/bigpanda/queue directory will be created when you install the BigPanda agent on the DMZ server.

You can use Windows Scheduled Task facility or a cron job. For example, follow these steps to create a cron job that runs as the root user.

1. Open a crontab file by running the following command.

cron -u root -e

2. Add the following line in the crontab file.
   ***** root /usr/bin/rsync -a -e "ssh" --remove-source-files /var/lib/bigpanda/queue/ $DMZ_servername:/var/lib/bigpanda/queue

❗️

Be sure to replace $DMZ_servername with the network name of your DMZ server.

Set up SSH Keys

1. On the monitoring server, generate a public SSH key with no password by running the following commands.

ssh-keygen -f ~/.ssh/id_rsa -q -P ""
cat ~/.ssh/id_rsa.pub

2. Copy the key to your clipboard and log in to your DMZ server.

3. If the SSH folder does not exist on the DMZ server, create it manually by running the following commands.

mkdir ~/.ssh
chmod 0700 ~/.ssh
touch ~/.ssh/authorized_keys
chmod 0644 ~/.ssh/authorized_keys

4. In the ~/.ssh/authorized_keys file, add the SSH key that you copied in Step 2.

Configure the DMZ Server

1. On the DMZ server, install the BigPanda agent by following the install instructions.

• Refer to the Install the BigPanda Agent guide.

2. Install the appropriate BigPanda agent integration by following the on-screen instructions in the BigPanda console.

Debug the Proxy Configuration

Connectivity issues are often manifested as connection errors inside the agent log file. You are able to debug the root cause of connectivity issues when configuring the agent behind a proxy.

Before you start

Ensure that you have:

• Agent version 8.3.0 and above.
• Python version 3.6.8 and above.
• python3-pip.

Process

1. SSH to the server on which the agent is installed.

2. Run the following command and save the output to a file.
   bigpanda-check-proxy --proxy <proxy_url>

3. Run the following command and save the output to another file. curl -v --proxy <proxy_url> "<https://api.bigpanda.io/health/data">

4. Send the output from both commands to BigPanda support. We will work with you to troubleshoot common connectivity issues.

FAQs

Where can I find the agent log files?

By default, the log files are located at /var/log/bigpanda/. BigPanda log files are rotated when they reach 10MB and only 3 versions are stored at any given time. To change these settings, see Configure the BigPanda Agent Logs.

Is the BigPanda agent secure?

Yes, we’ve designed the agent to be secure and non-intrusive. The installer uses signed deb/rpm packages. The agent itself runs as a custom non-root user and it communicates with BigPanda via SSL.

How do I uninstall the agent?

See Uninstall the BigPanda Agent.

How do I install multiple BigPanda agents?

In most cases, you need only one agent per master server of your integration. If you have multiple masters, you need to create a separate integration, using different app keys, for each master.

What happens if my internet connection is down?

BigPanda does not miss alerts, even if your connection is down. The BigPanda agent intelligently retries sending your alerts, until it’s successful. Once the connection is revived, you will see the events in BigPanda.

Can I run the agent behind a proxy server?

Yes, see Configure the BigPanda Agent Behind a Proxy Server.

Can I use the agent to communicate with a monitoring server behind my DMZ?

Yes, see Using the BigPanda Agent with a DMZ.

Can I use the same agent on multiple integrations?

No, each agent is assigned a unique "agent_id" value (found in the /etc/bigpanda/bigpanda.config file) and can only support one integration.

Next Steps

Find details about the BigPanda Agent

Learn to Configure the BigPanda Agent Log

Learn how to Integrate with BigPanda