<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Colin,<br>
</div>
<blockquote
cite="mid:CANvHAxTjaF46YSC7wDKdXWL099A2bggwjzh3e_W-JoqaDpHZkg@mail.gmail.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<div dir="ltr">Hi David and thanks for the reply
<div><br>
</div>
<div>I've corrected the regex but the test is still not going
red.</div>
<div><br>
</div>
</div>
</blockquote>
Is there anything in the Client Data report?<br>
You should see sections like:<br>
<br>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<pre>[<a class="moz-txt-link-freetext" href="file:C:\WINDOWS\system.ini">file:C:\WINDOWS\system.ini</a>]
type:0x00020 (file)
mode:777 (not implemented)
linkcount:1
owner:0 (not implemented)
group:0 (not implemented)
size:219
atime:1247574897 (2009/07/14-12:34:57)
ctime:1247574897 (2009/07/14-12:34:57)
mtime:1244704084 (2009/06/11-07:08:04)</pre>
<br>
<blockquote
cite="mid:CANvHAxTjaF46YSC7wDKdXWL099A2bggwjzh3e_W-JoqaDpHZkg@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>Could you share your client-local.cfg?</div>
<div><br>
</div>
</div>
</blockquote>
I don't have any wildcard matching, only specific named files, so
nothing I can send you.<br>
<br>
From client-local.cfg man page:<br>
<br>
<blockquote>FILE CONFIGURATION ENTRIES<br>
A file monitoring entry is used to watch the meta-data of a
file: Owner, group, size, permis-<br>
sions, checksum etc. It looks like this:<br>
<br>
<a class="moz-txt-link-freetext" href="file:/var/log/messages">file:/var/log/messages</a>[:HASH]<br>
<br>
The <a class="moz-txt-link-freetext" href="file:FILENAME">file:FILENAME</a> line defines the filename of the
file to monitor. As with the "log:"<br>
entries, a filename enclosed in backticks means a command
which will generate the filenames<br>
dynamically. The optional [:HASH] setting defines what
type of hash to compute for the file:<br>
md5, sha1 or rmd160. By default, no hash is calculated.<br>
NOTE: If you want to check multiple files using a wildcard,
you must use a command to gener-<br>
ate the filenames. Putting wildcards directly into the
file: entry will not work.<br>
</blockquote>
So unless you are dynamically generating the file name client side,
which would at least require PS client since BBWin doesn't support
it, that is the issue to solve, or else monitor the folder if that
can be done.<br>
<br>
David<br>
<blockquote
cite="mid:CANvHAxTjaF46YSC7wDKdXWL099A2bggwjzh3e_W-JoqaDpHZkg@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>Thanks</div>
<div><br>
</div>
<div>CC</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Mon, Apr 18, 2016 at 8:40 AM, David
Baldwin <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:david.baldwin@ausport.gov.au" target="_blank">david.baldwin@ausport.gov.au</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"><span class="">
<div>On 18/04/2016 9:42 am, Colin Coe wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div>Hi all</div>
<div><br>
</div>
<div>I'm trying to monitor some log files on Windows
7 clients. I have this in the analysis.cfg file:</div>
<div>--- </div>
<div>HOST=%client.*</div>
<div> FILE
"C:\users\user\Documents\ClientTiming*log"
SIZE<500M yellow TRACK</div>
<div> FILE
"C:\users\user\Documents\ClientTiming*log"
SIZE<1G red TRACK</div>
<div> FILE
"C:\users\user\Documents\ClientTrace*log"
SIZE<500M yellow TRACK</div>
<div> FILE
"C:\users\user\Documents\ClientTrace*log"
SIZE<1G red TRACK</div>
<div>---</div>
<div><br>
</div>
<div>The files are displayed but regardless of the
file size, the test stays green.</div>
<div><br>
</div>
<div>I want the test to go red when the files exceed
1GB and yellow when greater than 500MB.</div>
<div><br>
</div>
<div>Any ideas where I'm going wrong?</div>
<br>
</div>
</blockquote>
</span> Is your filename supposed to be a regex? Wildcard
matching isn't builtin.<br>
<br>
Try:<br>
<br>
FILE "%C:\users\user\Documents\ClientTiming.*log"
SIZE<500M yellow TRACK<br>
<br>
For starters.<br>
<br>
Also, have you checked the file data is in your client
data report to match? Note that client-local.cfg only
supports explicit filenames unless this is an extension
for whatever Windows Xymon client you are using.<br>
<br>
An alternative approach is to monitor the size of the
folder containing the log files. OK if only a few
designated logs in there. Not so good if you've got
unlimited history, etc.<br>
<br>
I have the following for my Windows clients:<br>
<br>
(in /etc/client-local.cfg)<br>
<br>
<tt>[win32]</tt><tt><br>
</tt><tt>dir:C:\inetpub</tt><tt><br>
</tt><tt>dir:C:\ProgramData\Microsoft\Windows\WER</tt><tt><br>
</tt><tt>dir:C:\Windows\Logs\CBS</tt><tt><br>
</tt><tt>dir:C:\Windows\Temp</tt><br>
<br>
(in analysis.cfg)<br>
<tt> DIR C:\Windows\Logs\CBS yellow SIZE<200000
TRACK=C-CBS</tt><tt><br>
</tt><tt> DIR C:\Windows\Logs\CBS red
SIZE<500000</tt><tt><br>
</tt><tt> DIR C:\ProgramData\Microsoft\Windows\WER
yellow SIZE<200000 TRACK=C-WER</tt><tt><br>
</tt><tt> DIR C:\ProgramData\Microsoft\Windows\WER
red SIZE<500000</tt><tt><br>
</tt><tt> DIR C:\Windows\Temp yellow SIZE<200000
TRACK=C-Windows-Temp EXHOST=%(sccm)</tt><tt><br>
</tt><tt> DIR C:\Windows\Temp red SIZE<500000
EXHOST=%(sccm)</tt><tt><br>
</tt><br>
<br>
David.<br>
<pre cols="72">--
David Baldwin - Senior Systems Administrator (Datacentres + Networks)
Digital Information Management and Technology
Australian Sports Commission <a moz-do-not-send="true" href="http://ausport.gov.au" target="_blank">http://ausport.gov.au</a>
Tel 02 62147830 Fax 02 62141830 PO Box 176 Belconnen ACT 2616
<a moz-do-not-send="true" href="mailto:david.baldwin@ausport.gov.au" target="_blank">david.baldwin@ausport.gov.au</a> 1 Leverrier Street Bruce ACT 2617
Our Values: RESPECT + INTEGRITY + TEAMWORK + EXCELLENCE
</pre>
<br>
<hr>
Keep up to date with what's happening in Australian sport
visit <a moz-do-not-send="true"
href="http://www.ausport.gov.au" target="_blank">www.ausport.gov.au</a>
<br>
<br>
<font face="arial" size="-2">This message is intended for
the addressee named and may contain confidential and
privileged information. If you are not the intended
recipient please note that any form of distribution,
copying or use of this communication or the information
in it is strictly prohibited and may be unlawful. If you
receive this message in error, please delete it and
notify the sender.</font>
<hr>
</div>
</blockquote>
</div>
<br>
</div>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
David Baldwin - Senior Systems Administrator (Datacentres + Networks)
Digital Information Management and Technology
Australian Sports Commission <a class="moz-txt-link-freetext" href="http://ausport.gov.au">http://ausport.gov.au</a>
Tel 02 62147830 Fax 02 62141830 PO Box 176 Belconnen ACT 2616
<a class="moz-txt-link-abbreviated" href="mailto:david.baldwin@ausport.gov.au">david.baldwin@ausport.gov.au</a> 1 Leverrier Street Bruce ACT 2617
Our Values: RESPECT + INTEGRITY + TEAMWORK + EXCELLENCE
</pre>
</body>
</html>