Try this
FILE /etc/passwd noexist COLOR=green TRACK
From: Scott Mohnkern [mailto:mohnkern at gmail.com]
Sent: Thursday, November 01, 2007 3:39 PM
To: hobbit at hswn.dk
Subject: Re: [hobbit] Re: New to Hobbit --- file monitoring
Well, at least its replicatable.
Scott
On 11/1/07, Scott Mohnkern < mohnkern at gmail.com
<mailto:mohnkern at gmail.com> > wrote:
Thanks for the help. I edited
/etc/hobbit/hobbit-clients.cfg so the line reads:
FILE /etc/passwd GREEN noexist
still no joy.
Is there anyone on the list that has an example of a
FILE line in their hobbit-clients.cfg file?
On 11/1/07, Hubbard, Greg L < greg.hubbard at eds.com
<mailto:greg.hubbard at eds.com> > wrote:
Try removing the TRACK keyword, and then change
NOEXIST to lower case. I think Henrik has reported that there are a few bugs in this code, and it is not always clear when case matters and when it doesn't, or when the order of the arguments matters.
From: Scott Mohnkern [mailto:mohnkern at gmail.com]
Sent: Thursday, November 01, 2007 3:10 PM
To: hobbit at hswn.dk
Subject: [hobbit] Re: New to Hobbit --- file
monitoring
When all else fails, nuke it and start
over. I did an apt-get remove hobbit, and then a dpkg -- purge. Then I removed any files I could find. Then I downloaded the Ubuntu deb file and installed it. It put the configuration files in /etc/hobbit and it started fine I edited /etc/hobbit/hobbit-clients.cfg and added the following line: PROC ntpd 1 99 green "TEXT=NTPD is up" Restarted hobbit, and in a few minutes, it started reporting as expected. Then I added: PORT "LOCAL=%(:8888)" TEXT="Gnump is up" To the same file, (/etc/hobbit/hobbit-clients.cfg) and restared hobbit. A few minutes later, the ports section started reporting, as expected. (Though I realize that its a bit off, which I need to fix) Then I added: FILE /etc/passwd GREEN NOEXIST track Reading the documentation inside hobbit-clients.cfg I edited /etc/hobbit/client- local.cfg and added the following line: file:/etc/passwd restarted hobbit, waited 5 minutes. No luck. I'm pretty convinced that either: 1. the format of the line in /etc/hobbit/client-local.cfg or /etc/hobbit/hobbit-clients.cfg is incorrect, or 2. There's something else I need to edit.