This format works:
ownerid=[numeric id]
(my problem was a bad regexp for the server name). Using the text version of the ownerid does not seem to work.
g
-----Original Message----- From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Ribeiro, Glauber Sent: Monday, June 04, 2018 15:04 To: 'xymon at xymon.com' <xymon at xymon.com> Subject: [Xymon] Monitoring file ownership
Xymon has me stumped twice today... some kind of record, for me.
How do I monitor a file for change in ownership:
Right now, "client data" has
[file:/logs/vingate/server.log] type:100000 (file) mode:644 (-rw-r--r--) linkcount:1 owner:20602 (siadmin) group:20600 (sysint) size:19298 clock:1528142104 (2018/06/04-14:55:04) atime:1528130404 (2018/06/04-11:40:04) ctime:1528130394 (2018/06/04-11:39:54) mtime:1528130394 (2018/06/04-11:39:54)
I want it to go red if the owner changes.
Documentation says:
ownerid=OWNER triggers a warning if the owner does not match what is listed here. OWNER is specified either with the numeric uid, or the user name.
I notice that the data has "owner" instead of "ownerid".
However, I can't seem to get it to work, either using the numeric (20602) or the text (siadmin) id.
I currently have, in analysis.cfg:
HOST=(hostname) FILE /logs/vingate/server.log red ownerid=20603
But it's not turning red.
Any ideas? How have you done it?
Thanks,
g
Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon