Watched File Table

The Watched File Table lists all the files being monitored by the module. This table displays some of the more commonly used attributes at the top level and other hidden attributes in a lower level. For more information on hidden attributes, refer to Hidden File Attributes.

File changes can only be noticed once the file has been detected as existing. If a file does not exist or is nonexistent, the module detects that the file does exist with a size bigger than 0. For example, if a file has two records, the module is not able to notice those two records. However, the module notices all future modifications.

This table is initialized with the following seven system files:

/etc/hosts 
/etc/aliases 
/etc/nsswitch.conf 
/etc/inittab 
/etc/vfstab 
/etc/passwd 
/etc/rmtab

Displayed File Attributes

The Watched File Table displays information about each file and provides the data on the attributes listed in the following table.

Table 3–1 Watched File Table

Field	Description
File	Name of the file.
Full Path	Path to file and the real name.
File Size	Size of the file in bytes.
File Owner	The owner of the file.
File Group	The group the file belongs to.
File Permissions	Permissions on the file.
File Timestamp	Time when the file was last updated.
Validation Script	The path to the validation script used to validate the file when its timestamp changes. Save the script in /var/opt/SUNWsymon/ SysMgmtPack/filewch/scripts and provide a relative path. The value for script is optional. For more information, see Validation Script.
Exit Code	Displays the exit code of the last execution of the validation script.
Event Monitoring	Displays the state of the file watch mode for each file. For more information, see To Disable Event Monitoring.

Hidden File Attributes

The following is a list of attributes that are hidden, and that are accessible from the Row Editor window. To open this window, press mouse button 3 on any row and choose Edit Row from the pop-up menu.

Table 3–2 Hidden File Attributes

Field	Description
Delimiter	Delimiter between columns.
Comment char	Type of the character that delimits a comment line.
Number of fields	Number of fields in each file entry.
Num key field	Number of fields composing the key. The key is assumed to be at the beginning of the record. A key is an identifier for the record. For example, in the passwd file, the key for each record is the first field: user name. The key is unique for each record.
Field names	Names of the different columns in the file entries.
Hide values flag	One of the following values:  FALSE = Display the value that changed TRUE = Do not display changed values
Addition Severity	Possible values: Info, Warning, Error, None.
Deletion Severity	Possible values: Info, Warning, Error, None.
Change Severity	Possible values: Info, Warning, Error, None.
Record Format	Format of the record. Refer to Record Format for more information.

Watched File Table Alarms

You can use the Attribute Editor to set a regular expression alarm threshold on Exit Code. There is no default alarm threshold.

If the file to be monitored does not exist, File Watch generates an information alarm. However, the module still adds the file to the Watched File Table but does not display any other information about this file.

If the file to be monitored, such as a directory, exists but cannot be opened, the file is added to the Watched File Table. No other information about this file is displayed.