I'm guessing the same. The "^" means to tie to the start of the string, which makes no sense unless it's at the start of the string. Try something like this:<div><br></div><div><span style="font-family:arial,sans-serif;font-size:13px">FILE /opt/WSCluster1/WebSphere/wp_</span><span style="font-family:arial,sans-serif;font-size:13px">profile/%^javacore yellow NOEXIST</span><br>
</div><div><span style="font-family:arial,sans-serif;font-size:13px"><br></span></div><div><span style="font-family:arial,sans-serif;font-size:13px">Note that the regex "^javacore" will match anything starting with "javacore" no matter what follows. It's as if there's an implied wildcard at the end.</span></div>
<div><span style="font-family:arial,sans-serif;font-size:13px"><br></span></div><div><span style="font-family:arial,sans-serif;font-size:13px">J</span></div><div><span style="font-family:arial,sans-serif;font-size:13px"><br>
</span></div><div class="gmail_extra"><br><br><div class="gmail_quote">On 29 December 2012 01:04, Michael Burger <span dir="ltr"><<a href="mailto:Mike.Burger@freedommortgage.com" target="_blank">Mike.Burger@freedommortgage.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang="EN-US" link="blue" vlink="purple"><div><p class="MsoNormal">I’ve successfully tested monitoring for the appearance of a statically defined file (i.e. no wildcards), and have been happy with the result.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">I’m now tasked with trying to alarm on the appearance of file where only part of the filename will be static, hence the need for wildcards.<u></u><u></u></p><p class="MsoNormal">
<u></u> <u></u></p><p class="MsoNormal">I’m at the point where the presence of a file causes a green condition, and the removal of that file causes a white condition.<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">The client-local.cfg is set up to look like this (the commented lines are my various attempts to test/change the behavior):<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">
file:`find /opt/WSCluster*/WebSphere/wp_profile | grep javacore | sort -r`<u></u><u></u></p><p class="MsoNormal">#file:`find /opt/WSCluster*/WebSphere/wp_profile | grep javacore | sort -r | head -n 1`<u></u><u></u></p><p class="MsoNormal">
#file:`find /opt/WSCluster1/WebSphere/wp_profile | grep javacore | sort -r | head -n 1`<u></u><u></u></p><p class="MsoNormal">#file:`find /opt/WSCluster2/WebSphere/wp_profile | grep javacore > /dev/null | sort -r | head --lines=1`<u></u><u></u></p>
<p class="MsoNormal">#file:`find /opt/WSCluster3/WebSphere/wp_profile | grep javacore > /dev/null | sort -r | head --lines=1`<u></u><u></u></p><p class="MsoNormal">log:/var/adm/syslog/syslog.log:10240<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">The analysis.cfg is set up like so (again, commented lines are my attempts to test/change the behavior):<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"> FILE /opt/WSCluster1/WebSphere/wp_profile/%javacore(^*.) yellow NOEXIST<u></u><u></u></p><p class="MsoNormal"># FILE /opt/WSCluster(^*.)/WebSphere/wp_profile/javacore(^*.) NOEXIST yellow<u></u><u></u></p>
<p class="MsoNormal"># FILE /opt/WSCluster(^*.)/WebSphere/wp_profile/javacore(^*.) yellow<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">I’ve put a test file out, /opt/WSCluster1/WebSphere/wp_profile/javacore.mike1, and Xymon is reporting green on the file’s existence…which, of course, is not the desired behavior.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">My guess is that I’m completely bollixing the regex…any thoughts or help would be appreciated.<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">
--<u></u><u></u></p><p class="MsoNormal"><b><span style="font-size:12.0pt">Mike Burger</span></b><span style="font-size:12.0pt"><u></u><u></u></span></p><p class="MsoNormal"><b><span style="font-size:12.0pt">AIX Administrator<u></u><u></u></span></b></p>
<p class="MsoNormal"><a href="http://freedomhome.fhmc.local/intranet/main.jsp" target="_blank"><b><span style="text-decoration:none;font-family:"Arial","sans-serif""><img border="0" width="143" height="70" src="cid:image001.gif@01CDE4DA.4BD2C4C0" alt="cid:image001.gif@01CC72C8.834C1990"></span></b></a><u></u><u></u></p>
<p class="MsoNormal"><b><span style="font-size:8.0pt">Phone (317) 537-3680</span></b><b><span style>, </span></b><b><span style="font-size:8.0pt">Fax</span></b><b><span style> </span></b><b><span style="font-size:8.0pt">(317) 537-4680, Cell (317) 797-2040 </span></b><b><span style><u></u><u></u></span></b></p>
<p class="MsoNormal"><b><span style="font-size:8.0pt">E-mail: </span></b><span style="font-size:8.0pt;color:#1f497d"><a href="mailto:Anthony.House@freedommortgage.com" target="_blank"><b><span style="color:#1f497d">Mike.Burger@FreedomMortgage.com</span></b></a><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;color:#c00000">"Once word leaks out that a pirate's gone soft, people begin to disobey you and then it's nothing but work, work, work, all the time." --Westley/The Dread Pirate Roberts<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p></div></div>
<pre>
CONFIDENTIALITY NOTICE: This e-mail message, including all attachments, is for
the sole use of the intended recipient(s) and may contain confidential
information. Any unauthorized review, use, disclosure, alteration or
distribution is strictly prohibited and may violate state or federal law. If you
are not the intended recipient, please contact the sender by reply e-mail,
delete this email and destroy all copies of the message.</pre>
<br>_______________________________________________<br>
Xymon mailing list<br>
<a href="mailto:Xymon@xymon.com">Xymon@xymon.com</a><br>
<a href="http://lists.xymon.com/mailman/listinfo/xymon" target="_blank">http://lists.xymon.com/mailman/listinfo/xymon</a><br>
<br></blockquote></div><br></div>