[hobbit] RE: **Caution-External**: RE: [hobbit] monitoring files and messages-newbie

Josh Luthman josh at imaginenetworksllc.com
Wed Nov 14 07:43:24 CET 2007


Sorry, extremely tired tonight...

ls -ld (you will need the d to make it ls -l /var itself and not list the
contents of it)

On 11/14/07, Perumal, Santoshbabu <santoshbabu_perumal at platts.com> wrote:
>
>  *bash-2.03$ ls -l /var
> *total 90
> drwxr-xr-x   2 root     root         512 Jul  6  2005 TT_DB
> drwxrwxr-x   9 root     sys          512 Nov 11 03:10 adm
> drwxr-xr-x   8 root     bin          512 Jul  6  2005 apache
> drwxr-xr-x   2 root     sys          512 Jul  6  2005 audit
> drwxr-xr-x   3 root     root         512 Jul  6  2005 crash
> drwxr-xr-x   2 root     sys          512 Aug 13  2006 cron
> drwxr-xr-x   5 root     sys          512 Jul  6  2005 dmi
> drwxrwxr-x   6 root     root         512 Feb  4  2007 dt
> drwxr-xr-x   2 root     sys          512 Jul  6  2005 inet
> drwxr-xr-x   3 root     bin          512 Nov 12 10:35 ld
> drwxr-xr-x   2 root     sys          512 Jul  6  2005 ldap
> drwxr-xr-x   2 root     sys          512 Nov 11 03:10 log
> drwx------   2 root     root        8192 Jul  6  2005 lost+found
> drwxrwxr-x   3 lp       lp           512 Jul  6  2005 lp
> drwxrwxrwt   3 root     mail         512 Nov 13 21:09 mail
> drwxr-xr-x   2 root     bin          512 Jul  6  2005 news
> drwxr-xr-x   2 root     bin          512 Jul  6  2005 nfs
> drwxr-xr-x   2 root     sys          512 Jul  6  2005 nis
> drwxr-xr-x   3 root     sys          512 Jul  6  2005 ntp
> drwxr-xr-x   3 root     sys          512 Jul  8  2005 opt
> drwxrwxrwt   3 root     bin          512 Oct 27  2005 preserve
> lrwxrwxrwx   1 root     other          8 Jul  8  2005 rap -> /nsr/rap
> drwxr-xr-x   4 root     sys          585 May 24 13:18 run
> drwxr-xr-x  11 root     sys          512 Feb  4  2007 sadm
> drwxr-xr-x   3 root     bin          512 Jul  6  2005 saf
> drwxr-xr-x   3 root     sys          512 Feb  4  2007 snmp
> drwxr-xr-x  10 root     bin          512 Jul  6  2005 spool
> drwxr-xr-x   4 daemon   daemon       512 Jul  6  2005 statmon
> drwxrwxrwt   4 root     sys         1024 Nov 13 21:08 tmp
> drwxr-xr-x   7 uucp     uucp         512 Jul  6  2005 uucp
> drwxr-xr-x   3 root     bin          512 Jul  6  2005 yp
> *bash-2.03$ ls -l /var/log/
> *total 544
> -rw-------   1 root     sys            0 Jul  6  2005 authlog
> -rw-r--r--   1 root     other        604 Nov 11  2005 sysidconfig.log
> -rwxrwxrwx   1 root     other      14500 Nov 13 21:09 syslog
> -rw-r--r--   1 root     other      32465 Nov 10 21:09 syslog.0
> -rw-r--r--   1 root     other      32259 Nov  3 21:09 syslog.1
> -rw-r--r--   1 root     other      32443 Oct 27 21:08 syslog.2
> -rw-r--r--   1 root     other      33041 Oct 20 21:08 syslog.3
> -rw-r--r--   1 root     other      32161 Oct 13 21:11 syslog.4
> -rw-r--r--   1 root     other      31945 Oct  6 21:07 syslog.5
> -rw-r--r--   1 root     other      31492 Sep 29 21:08 syslog.6
> -rw-r--r--   1 root     other      32281 Sep 22 21:08 syslog.7
> *bash-2.03$ ls -l /var/log/syslog.7*
> -rw-r--r--   1 root     other      32281 Sep 22 21:08 /var/log/syslog.7
> *ls -ld /var*
> drwxr-xr-x  32 root     sys          512 Jul  8  2005 /var
> all files are owned by root but others have read permission on all the
> files.
>
> Thanks
>   santhosh.p
>
>  ------------------------------
> *From:* Josh Luthman [mailto:josh at imaginenetworksllc.com]
> *Sent:* Wednesday, November 14, 2007 1:21 AM
> *To:* hobbit at hswn.dk
> *Subject:* Re: [hobbit] RE: **Caution-External**: RE: [hobbit] monitoring
> files and messages-newbie
>
> As an alternative to namei you can do...
>
> ls -l /var
> ls -l /var/log
> ls -l /var/log/syslog7
>
> and then give me the print outs.  This will confirm the theory to see if
> your hobbit can read the /var/log/syslog7 file or not.
>
> On 11/14/07, Perumal, Santoshbabu <santoshbabu_perumal at platts.com> wrote:
> >
> >  hi,
> >    i can get output when i execute namei -m command on linux.out client
> > machine is solaris.when i ecexute your command on client i am getting
> > command not found error.do we need to have this commad on clientside to
> > view file contents using hobbit?
> >
> > Thanks in advance
> >
> > Thanks
> >    santhosh.p
> >
> >  ------------------------------
> > *From:* Perumal, Santoshbabu
> > *Sent:* Wednesday, November 14, 2007 1:03 AM
> > *To:* hobbit at hswn.dk
> > *Subject:* **Caution-External**: RE: [hobbit] monitoring files and
> > messages-newbie
> >
> >
> >  namei -m /var/log/syslog7
> > bash: namei: command not found
> >
> >   i bit confused .is there any command called namei.when i excute i got
> > the above commad not found result.
> >
> > Thanks
> >   santhosh.p
> >
> >  ------------------------------
> > *From:* Josh Luthman [mailto:josh at imaginenetworksllc.com]
> > *Sent:* Wednesday, November 14, 2007 12:55 AM
> > *To:* hobbit at hswn.dk
> > *Subject:* Re: [hobbit] monitoring files and messages-newbie
> >
> > Can you please do an namei -m /var/log/syslog7 and then give us the
> > print out?
> >
> > On 11/14/07, Perumal, Santoshbabu < santoshbabu_perumal at platts.com>
> > wrote:
> > >
> > >  thanks for your replies
> > >
> > >     i can see the  file on the gui right now.but cann not view the
> > > contents of the file.if i click it is saying that unknown
> > > filetype(opens small window).can anyone help me on this
> > >
> > >    my hobbit-client.cfg file
> > >        HOST=tower
> > >         DISK / 93 98
> > >         PROC cron 1 -1 yellow
> > >         PROC Xvnc 1 120 yellow
> > >         PROC defunct  0 0  red
> > >         LOG /var/adm/messages  WARNING COLOR=yellow
> > >         LOG /var/log/syslog   WARNING COLOR=yellow
> > >         DIR %^/var/log TRACK
> > >         FILE /bin/su md5=c80fc747e24fa8bfa099cbef0bfb926f
> > >         FILE %^/var/log/syslog.* TRACK=maillog
> > >
> > > my client-local.cfg file
> > >
> > >     [tower]
> > >    file:/bin/su:md5
> > >    file:`ls -t -1 /var/log/syslog.*|head -1`
> > >
> > > In the gui i can see /var/log/syslog7 if i click on the file getting
> > > unknown filetype error.cannot able to view the file.please advise if
> > > my entries wrong
> > >
> > > Thanks
> > >    santhosh.p
> > >
> > >
> > >  ------------------------------
> > > *From:* Josh Luthman [mailto:josh at imaginenetworksllc.com]
> > > *Sent:* Tuesday, November 13, 2007 10:12 PM
> > > *To:* hobbit at hswn.dk
> > > *Subject:* Re: [hobbit] monitoring files and messages
> > >
> > > I'm still amazed at how little this command hasn't gotten around - it
> > > is a real beautiful tool!
> > >
> > > Try doing a namei -m /var/adm/sa/sar12 and see if the hobbit user has
> > > the necessary access to read the file (and can execute directories up to
> > > it!)
> > >
> > > On 11/13/07, Paul Ehrenreich <paulehr at gmail.com> wrote:
> > > >
> > > > does the hobbit user have access to the logs and the files?
> > > >
> > > > On Nov 13, 2007 4:53 PM, Steve Holmes <sholmes42 at mac.com> wrote:
> > > > > Have you also added the required lines to client-local.cfg?
> > > > > Steve.
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > On Nov 13, 2007 3:48 PM, Perumal, Santoshbabu
> > > > > <santoshbabu_perumal at platts.com > wrote:
> > > > > >
> > > > > >
> > > > > >
> > > > > > Hi,
> > > > > >        can anyone help me to monitor files and procs
> > > > > >
> > > > > >   in the Hobbit-client.cfg file i have mentioned the following
> > > > entries
> > > > > >
> > > > > >   HOST=tower
> > > > > >   FILE  /var/adm/sa/sar12
> > > > > >   LOG /var/log/syslog   WARNING COLOR=yellow
> > > > > >
> > > > > >
> > > > > > but i could not able to see anything on the gui.i can see white
> > > > icon if i
> > > > > click on this i see no files checked status and if i click msg
> > > > icon i cann
> > > > > see only /var/adm/messages i coild not see /var/log/sulog.how can
> > > > i resolve
> > > > > this problem.please help me on this
> > > > > >
> > > > > > Thanks in advance
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > >
> > > >
> > > > To unsubscribe from the hobbit list, send an e-mail to
> > > > hobbit-unsubscribe at hswn.dk
> > > >
> > > >
> > > >
> > >
> > >
> > > --
> > > Josh Luthman
> > > Office: 937-552-2340
> > > Direct: 937-552-2343
> > > 1100 Wayne St
> > > Suite 1337
> > > Troy, OH 45373
> > >
> > > Those who don't understand UNIX are condemned to reinvent it, poorly.
> > > --- Henry Spencer
> > >  ------------------------------
> > >
> > > The information contained in this message is intended only for the
> > > recipient, and may be a confidential attorney-client communication or may
> > > otherwise be privileged and confidential and protected from disclosure. If
> > > the reader of this message is not the intended recipient, or an employee or
> > > agent responsible for delivering this message to the intended recipient,
> > > please be aware that any dissemination or copying of this communication is
> > > strictly prohibited. If you have received this communication in error,
> > > please immediately notify us by replying to the message and deleting it from
> > > your computer.  The McGraw-Hill Companies, Inc. reserves the right, subject
> > > to applicable local law, to monitor and review the content of any electronic
> > > message or information sent to or from McGraw-Hill employee e-mail addresses
> > > without informing the sender or recipient of the message.
> > >  ------------------------------
> > >
> >
> >
> >
> > --
> > Josh Luthman
> > Office: 937-552-2340
> > Direct: 937-552-2343
> > 1100 Wayne St
> > Suite 1337
> > Troy, OH 45373
> >
> > Those who don't understand UNIX are condemned to reinvent it, poorly.
> > --- Henry Spencer
> >
>
>
>
> --
> Josh Luthman
> Office: 937-552-2340
> Direct: 937-552-2343
> 1100 Wayne St
> Suite 1337
> Troy, OH 45373
>
> Those who don't understand UNIX are condemned to reinvent it, poorly.
> --- Henry Spencer
>



-- 
Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373

Those who don't understand UNIX are condemned to reinvent it, poorly.
--- Henry Spencer
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20071114/47e2e109/attachment.html>


More information about the Xymon mailing list