<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 12 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="2050" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>I’ve successfully tested monitoring for the appearance of a statically defined file (i.e. no wildcards), and have been happy with the result.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I’m now tasked with trying to alarm on the appearance of file where only part of the filename will be static, hence the need for wildcards.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I’m at the point where the presence of a file causes a green condition, and the removal of that file causes a white condition.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The client-local.cfg is set up to look like this (the commented lines are my various attempts to test/change the behavior):<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>file:`find /opt/WSCluster*/WebSphere/wp_profile | grep javacore | sort -r`<o:p></o:p></p><p class=MsoNormal>#file:`find /opt/WSCluster*/WebSphere/wp_profile | grep javacore | sort -r | head -n 1`<o:p></o:p></p><p class=MsoNormal>#file:`find /opt/WSCluster1/WebSphere/wp_profile | grep javacore | sort -r | head -n 1`<o:p></o:p></p><p class=MsoNormal>#file:`find /opt/WSCluster2/WebSphere/wp_profile | grep javacore > /dev/null | sort -r | head --lines=1`<o:p></o:p></p><p class=MsoNormal>#file:`find /opt/WSCluster3/WebSphere/wp_profile | grep javacore > /dev/null | sort -r | head --lines=1`<o:p></o:p></p><p class=MsoNormal>log:/var/adm/syslog/syslog.log:10240<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The analysis.cfg is set up like so (again, commented lines are my attempts to test/change the behavior):<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal> FILE /opt/WSCluster1/WebSphere/wp_profile/%javacore(^*.) yellow NOEXIST<o:p></o:p></p><p class=MsoNormal># FILE /opt/WSCluster(^*.)/WebSphere/wp_profile/javacore(^*.) NOEXIST yellow<o:p></o:p></p><p class=MsoNormal># FILE /opt/WSCluster(^*.)/WebSphere/wp_profile/javacore(^*.) yellow<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I’ve put a test file out, /opt/WSCluster1/WebSphere/wp_profile/javacore.mike1, and Xymon is reporting green on the file’s existence…which, of course, is not the desired behavior.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>My guess is that I’m completely bollixing the regex…any thoughts or help would be appreciated.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>--<o:p></o:p></p><p class=MsoNormal><b><span style='font-size:12.0pt;color:black'>Mike Burger</span></b><span style='font-size:12.0pt;color:black'><o:p></o:p></span></p><p class=MsoNormal><b><span style='font-size:12.0pt;color:black'>AIX Administrator<o:p></o:p></span></b></p><p class=MsoNormal><a href="http://freedomhome.fhmc.local/intranet/main.jsp" target=content><b><span style='font-family:"Arial","sans-serif";color:black;text-decoration:none'><img border=0 width=143 height=70 id="Picture_x0020_1" src="cid:image001.gif@01CDE4DA.4BD2C4C0" alt="cid:image001.gif@01CC72C8.834C1990"></span></b></a><o:p></o:p></p><p class=MsoNormal><b><span style='font-size:8.0pt;color:black'>Phone (317) 537-3680</span></b><b><span style='color:black'>, </span></b><b><span style='font-size:8.0pt;color:black'>Fax</span></b><b><span style='color:black'> </span></b><b><span style='font-size:8.0pt;color:black'>(317) 537-4680, Cell (317) 797-2040 </span></b><b><span style='color:black'><o:p></o:p></span></b></p><p class=MsoNormal><b><span style='font-size:8.0pt;color:black'>E-mail: </span></b><span style='font-size:8.0pt;color:#1F497D'><a href="mailto:Anthony.House@freedommortgage.com"><b><span style='color:#1F497D'>Mike.Burger@FreedomMortgage.com</span></b></a><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:8.0pt;color:#C00000'>"Once word leaks out that a pirate's gone soft, people begin to disobey you and then it's nothing but work, work, work, all the time." --Westley/The Dread Pirate Roberts<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>
<pre>
CONFIDENTIALITY NOTICE: This e-mail message, including all attachments, is for
the sole use of the intended recipient(s) and may contain confidential
information. Any unauthorized review, use, disclosure, alteration or
distribution is strictly prohibited and may violate state or federal law. If you
are not the intended recipient, please contact the sender by reply e-mail,
delete this email and destroy all copies of the message.</pre>