hi all,
Trying to get file monitoring to work. Works find with fixed filenames but I need to match a pattern in a directory and find the oldest file. If more than say 7200 sec old in mtime then generate an alert.
in client-local.cfg I have
file:ls -t /ftp/input/* | tail -1
which produces the oldest file name on the web page.
I have the following in hobbit-clients.cfg
FILE %/ftp/input/*.gz RED mtime<7200
but I get no alarms.
Any ideas ?
For wildcard, you want '.*' to represent any character instead of '*' alone. I have a handful of this kind of FILE checks.
On 1/11/07, Thomas <tlp-hobbit at holme-pedersen.dk> wrote:
hi all,
Trying to get file monitoring to work. Works find with fixed filenames but I need to match a pattern in a directory and find the oldest file. If more than say 7200 sec old in mtime then generate an alert.
in client-local.cfg I have
file:
ls -t /ftp/input/* | tail -1which produces the oldest file name on the web page.
I have the following in hobbit-clients.cfg
FILE %/ftp/input/*.gz RED mtime<7200
but I get no alarms.
Any ideas ?
To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk
another thing I do is use /bin/ls instead of 'ls', so the file name generated by the backticks won't contain any termcap escape characters or alike.
On 1/11/07, Jerry Yu <jjj863 at gmail.com> wrote:
For wildcard, you want '.*' to represent any character instead of '*' alone. I have a handful of this kind of FILE checks.
On 1/11/07, Thomas <tlp-hobbit at holme-pedersen.dk> wrote:
hi all,
Trying to get file monitoring to work. Works find with fixed filenames but I need to match a pattern in a directory and find the oldest file. If more than say 7200 sec old in mtime then generate an alert.
in client-local.cfg I have
file:
ls -t /ftp/input/* | tail -1which produces the oldest file name on the web page.
I have the following in hobbit-clients.cfg
FILE %/ftp/input/*.gz RED mtime<7200
but I get no alarms.
Any ideas ?
To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk
Do you mean like this ?
FILE %/ftp/input/.*.gz RED mtime<7200 or
FILE %/ftp/input/.* RED mtime<7200
Jerry Yu wrote:
For wildcard, you want '.*' to represent any character instead of '*' alone. I have a handful of this kind of FILE checks.
On 1/11/07, *Thomas * <tlp-hobbit at holme-pedersen.dk <mailto:tlp-hobbit at holme-pedersen.dk>> wrote:
hi all, Trying to get file monitoring to work. Works find with fixed filenames but I need to match a pattern in a directory and find the oldest file. If more than say 7200 sec old in mtime then generate an alert. in client-local.cfg I have file:`ls -t /ftp/input/* | tail -1` which produces the oldest file name on the web page. I have the following in hobbit-clients.cfg FILE %/ftp/input/*.gz RED mtime<7200 but I get no alarms. Any ideas ? To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk <mailto:hobbit-unsubscribe at hswn.dk>
both are ok,since .* is not greedy as in PERL's. The former is preferred since it provides more exact match.
On 1/11/07, Thomas <tlp-hobbit at holme-pedersen.dk> wrote:
Do you mean like this ?
FILE %/ftp/input/.*.gz RED mtime<7200 or
FILE %/ftp/input/.* RED mtime<7200
Jerry Yu wrote:
For wildcard, you want '.*' to represent any character instead of '*' alone. I have a handful of this kind of FILE checks.
On 1/11/07, *Thomas * <tlp-hobbit at holme-pedersen.dk <mailto:tlp-hobbit at holme-pedersen.dk>> wrote:
hi all, Trying to get file monitoring to work. Works find with fixedfilenames but I need to match a pattern in a directory and find the oldest file. If more than say 7200 sec old in mtime then generate an alert.
in client-local.cfg I have file:`ls -t /ftp/input/* | tail -1` which produces the oldest file name on the web page. I have the following in hobbit-clients.cfg FILE %/ftp/input/*.gz RED mtime<7200 but I get no alarms. Any ideas ? To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk <mailto:hobbit-unsubscribe at hswn.dk>To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk
to my surprise, * actually works on my Hobbit-4.2rc1-20060712 server.
what's your test condition? You want it to alert when your oldest file is less than 2-hour old ? More commonly, people want to test if their oldest file is older than 2-hour old (mtime >7200 instead of mtime < 7200).
To further troubleshoot: on your client, check the logfetch.ClientNameHere.cfg under ~hobbit/client/tmp/. Also check msg.ClientNameHere.txt therein to see whether it has a [file:/ftp/input/oldestFileName.gz] section.
On 1/11/07, Jerry Yu <jjj863 at gmail.com> wrote:
both are ok,since .* is not greedy as in PERL's. The former is preferred since it provides more exact match.
On 1/11/07, Thomas < tlp-hobbit at holme-pedersen.dk> wrote:
Do you mean like this ?
FILE %/ftp/input/.*.gz RED mtime<7200 or
FILE %/ftp/input/.* RED mtime<7200
Jerry Yu wrote:
For wildcard, you want '.*' to represent any character instead of '*' alone. I have a handful of this kind of FILE checks.
On 1/11/07, *Thomas * <tlp-hobbit at holme-pedersen.dk <mailto:tlp-hobbit at holme-pedersen.dk>> wrote:
hi all, Trying to get file monitoring to work. Works find with fixedfilenames but I need to match a pattern in a directory and find the oldest file. If more than say 7200 sec old in mtime then generate an alert.
in client-local.cfg I have file:`ls -t /ftp/input/* | tail -1` which produces the oldest file name on the web page. I have the following in hobbit-clients.cfg FILE %/ftp/input/*.gz RED mtime<7200 but I get no alarms. Any ideas ? To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk <mailto:hobbit-unsubscribe at hswn.dk>To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk
I left it with the .*.gz to look acuratly for the files I want to monitor - and ys you are right I need to switch the contition for mtime round.
The tip og using the full file path made it work.
Jerry Yu wrote:
to my surprise, * actually works on my Hobbit-4.2rc1-20060712 server.
what's your test condition? You want it to alert when your oldest file is less than 2-hour old ? More commonly, people want to test if their oldest file is older than 2-hour old (mtime >7200 instead of mtime < 7200).
To further troubleshoot: on your client, check the logfetch.ClientNameHere.cfg under ~hobbit/client/tmp/. Also check msg.ClientNameHere.txt therein to see whether it has a [file:/ftp/input/oldestFileName.gz] section.
On 1/11/07, *Jerry Yu* <jjj863 at gmail.com <mailto:jjj863 at gmail.com>> wrote:
both are ok,since .* is not greedy as in PERL's. The former is preferred since it provides more exact match. On 1/11/07, * Thomas* < tlp-hobbit at holme-pedersen.dk <mailto:tlp-hobbit at holme-pedersen.dk>> wrote: Do you mean like this ? FILE %/ftp/input/.*.gz RED mtime<7200 or FILE %/ftp/input/.* RED mtime<7200 Jerry Yu wrote: > For wildcard, you want '.*' to represent any character instead of '*' > alone. I have a handful of this kind of FILE checks. > > On 1/11/07, *Thomas * <tlp-hobbit at holme-pedersen.dk <mailto:tlp-hobbit at holme-pedersen.dk> > <mailto: tlp-hobbit at holme-pedersen.dk <mailto:tlp-hobbit at holme-pedersen.dk>>> wrote: > > hi all, > > Trying to get file monitoring to work. Works find with fixed filenames > but I need to match a pattern in a directory and find the oldest file. > If more than say 7200 sec old in mtime then generate an alert. > > in client-local.cfg I have > > file:`ls -t /ftp/input/* | tail -1` > > which produces the oldest file name on the web page. > > I have the following in hobbit-clients.cfg > > FILE %/ftp/input/*.gz RED mtime<7200 > > but I get no alarms. > > Any ideas ? > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk <mailto:hobbit-unsubscribe at hswn.dk> <mailto: hobbit-unsubscribe at hswn.dk <mailto:hobbit-unsubscribe at hswn.dk>> > > > To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk <mailto:hobbit-unsubscribe at hswn.dk>
participants (2)
-
jjj863＠gmail.com
-
tlp-hobbit＠holme-pedersen.dk