Pandora FMS WP – Monitoring WordPress from Pandora FMS

Instalación

1. Suba los archivos del plugin a la carpeta /wp-content/plugins/plugin-name, o instale el plugin directamente a través del apartado para plugins de WordPress.
2. Active el plugin por medio del apartado ‘Plugins’ de WordPress.
3. En el menú, bajo ‘Ajustes’, usted verá la frase ‘PandoraFMS WP’: utilice esta opción para configurar el plugin.
4. If you want a more secure API access to the Pandora FMS WP REST API, set the allowed IPs. Any IP is allowed by default to access Pandora FMS WP Rest API.
5. In order to get information remotely from your Pandora FMS server, you need to have running the REST API in your wordpress setup, and for that, you need also the permalinks to be running. To check if your API is running, check the API manually, for example: http://mywordpress.com/wp-json/pandorafms_wp/online
   This API request should report 1 if works as intented.
6. Install the .PSPZ2 package in your Pandora FMS console to load library checks that use this plugin by using the API REST over HTTP(s). You can also create the modules manually, its just a regular HTTP request on a REST API, but it’s easier if you load the PSPZ2 with predefined modules.
7. Create a new Plugin Server module in your Pandora FMS WP module in Pandora FMS, define the URL to access the api rest of this plugin, like http://mywordpress.com/ and choose the predefined module from library: online, new_account, plugin check, etc).
8. API Calls available under /wp-json/pandorafms_wp/xxxx :
   /online – Check if WordPress is responding using Pandora FMS WP REST API
   /site_name – Check WordPress sitename
   /version – Return plugin version
   /wp_version – Return WordPress core version
   /admin – Return FALSE if ‘admin’ account exists (a very bad practice)
   /new_account – Return FALSE if new user accounts has been created in last hour
   /theme_registered – Return FALSE if new themes has been installed in last hour
   /plugin_registered – Return FALSE if new plugins has been installed in last hour
   /new_posts – New posts in last hour
   /new_comments – New comments in last hour
   /plugin_update – Return FALSE if a plugin needs update
   /core_update – Return FALSE if wordpress core needs update
   /user_login – Return FALSE if a successful login has been detected in last hour
   /failed_login – Return FALSE if a unsuccessful login has been detected in last hour
   /bruteforce – Return FALSE if a bruteforce attack has been detected in last hour
   /custom_sql_1 – Return result of a custom SQL query.
   /custom_sql_2 – Return result of a custom SQL query.
9. In the /wp-content/plugins/pandorafms-wp/pspz directory you have the .pspz2 file ready to be uploaded to your Pandora FMS console to use this plugin as remote plugin modules. See more information about the process in the module library at https://pandorafms.com/library/wordpress-monitoring-plugin/