[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [hobbit] File monitoring.

I left it with the .*.gz to look acuratly for the files I want to monitor - and ys you are right I need to switch the contition for mtime round.

The tip og using the full file path made it work.

Jerry Yu wrote: 
to my surprise, * actually works on my Hobbit-4.2rc1-20060712 server.

what's your test condition? You want it to alert when your oldest file is less than 2-hour old ? More commonly, people want to test if their oldest file is older than 2-hour old (mtime >7200 instead of mtime < 7200).

To further troubleshoot: on your client, check the logfetch.ClientNameHere.cfg under ~hobbit/client/tmp/. Also check msg.ClientNameHere.txt therein to see whether it has a [file:/ftp/input/oldestFileName.gz] section.


On 1/11/07, *Jerry Yu* <jjj863 (at) gmail.com <mailto:jjj863 (at) gmail.com>> wrote:

    both are ok,since .* is not greedy as in PERL's. The former is
    preferred since it provides more exact match.


    On 1/11/07, * Thomas* < tlp-hobbit (at) holme-pedersen.dk
    <mailto:tlp-hobbit (at) holme-pedersen.dk>> wrote:

        Do you mean like this ?

        FILE %/ftp/input/.*.gz RED mtime<7200 or

        FILE %/ftp/input/.* RED mtime<7200

        Jerry Yu wrote:
        > For wildcard, you want '.*' to represent any character
        instead of '*'
        > alone.  I have a handful of this kind of FILE checks.
        >
        > On 1/11/07, *Thomas * <tlp-hobbit (at) holme-pedersen.dk
        <mailto:tlp-hobbit (at) holme-pedersen.dk>
        > <mailto: tlp-hobbit (at) holme-pedersen.dk
        <mailto:tlp-hobbit (at) holme-pedersen.dk>>> wrote:
        >
        >     hi all,
        >
        >     Trying to get file monitoring to work. Works find with
        fixed filenames
        >     but I need to match a pattern in a directory and find the
        oldest file.
        >     If more than say 7200 sec old in mtime then generate an
        alert.
        >
        >     in client-local.cfg I have
        >
        >     file:`ls -t /ftp/input/* | tail -1`
        >
        >     which produces the oldest file name on the web page.
        >
        >     I have the following in hobbit-clients.cfg
        >
        >        FILE %/ftp/input/*.gz RED mtime<7200
        >
        >     but I get no alarms.
        >
        >     Any ideas ?
        >
        >
        >     To unsubscribe from the hobbit list, send an e-mail to
        >     hobbit-unsubscribe (at) hswn.dk
        <mailto:hobbit-unsubscribe (at) hswn.dk> <mailto:
        hobbit-unsubscribe (at) hswn.dk <mailto:hobbit-unsubscribe (at) hswn.dk>>
        >
        >
        >


        To unsubscribe from the hobbit list, send an e-mail to
        hobbit-unsubscribe (at) hswn.dk <mailto:hobbit-unsubscribe (at) hswn.dk>