[Xymon] Monitoring file ownership

[Ribeiro, Glauber]

Xymon has me stumped twice today... some kind of record, for me.


How do I monitor a file for change in ownership:

Right now, "client data" has

[file:/logs/vingate/server.log]
type:100000 (file)
mode:644 (-rw-r--r--)
linkcount:1
owner:20602 (siadmin)
group:20600 (sysint)
size:19298
clock:1528142104 (2018/06/04-14:55:04)
atime:1528130404 (2018/06/04-11:40:04)
ctime:1528130394 (2018/06/04-11:39:54)
mtime:1528130394 (2018/06/04-11:39:54)


I want it to go red if the owner changes.

Documentation says:

ownerid=OWNER
triggers a warning if the owner does not match what is listed here. OWNER is specified either with the numeric uid, or the user name.


I notice that the data has "owner" instead of "ownerid".

However, I can't seem to get it to work, either using the numeric (20602) or the text (siadmin) id.

I currently have, in analysis.cfg:

HOST=(hostname)
        FILE /logs/vingate/server.log red ownerid=20603


But it's not turning red.

Any ideas? How have you done it?

Thanks,

g