C Application-Specific Sample Patterns

This section describes and provides examples of how to monitor entity types for supported platforms.

Pattern Type: Indicates the pattern type. There are three types of patterns: Full path name, wildcard string, and regular expression:

• F: Full path name -- The full path name of a file or a registry key. Wildcards are only supported in the base name of a File Rule Set path (for example, c:\tmp\*.log). Within the base-name, a single wildcard is supported (as described in pattern type W, below).

• W: Single wildcard -- A string can contain at most one wild character "*". The wild character can be at the start (*B), middle (A*B) or end (A*) of a pattern. It matches zero or more characters.

• R: Multiple wildcards -- Each entity component (elements in the pattern separated by '.') follows the rules for a single wildcard, as specified above.

Table C-1 Component Rule Sets

Component Rule Set	Types	Pattern	Pattern Type	Comments	Example
File	path	path	F	same as path	/tmp/foo.txt
Process	event	process name	W	start, stop	java.exe
	resource	process name	W	resource	java.exe
	both	process name	W	start, stop, resource	java.exe
OS user	user	user	W		domain\user1
	connect type	connect type	W		ftp, IIS, telnet, etc
All DB snapshot rule sets				**See DB Snapshot table below
Active Directory	user	user name	W		joeuser
	computer	computer name	W		*WIN2K
	group	group name	W		administrators
	all	any	W	pattern matches any type	administrators
Registry	key	reg key name	F		HKEY_LOCAL_MACHINE\SOFTWARE
	value	reg value name	F
	all	any	F
All SQL Trace Monitor	user	user name	W		dbuser1
	sqltext	SQL text	-	matches any text within the SQL text (no wildcard support)	MYTABLE
	appname	application name	W		javaw.exe

Snapshot-based Monitoring Entity Types

These entity types apply to all snapshot-based database monitoring modules:

• Oracle8i

• Oracle9i/10g

• SQL Server

Table C-2 Snapshot-based Monitoring Entity Types

Types	Pattern Type	Comments	Example
Table	W		SALES_*
table.attribute	R		SALES_*.NAME
table.column	R		SALES_*.COST
table.column.attribute	R		SALES_*.COST.DATATYPE
table.constraint	W		TABLE1.MYCONST
table.constraint.attribute	R		TABLE1.MYCONST.NAME
view	W		MYVIEW
view.attribute	R		MYVIEW.NAME
view.column	R		MYVIEW.ID
view.column.attribute	R		MYVIEW.ID.DATATYPE
procedure	W		MYPROC
procedure.attribute	R		MYPROC.NAME
index	W		MYINDEX
index.attribute	R		MYINDEX.NAME
all	R	Matches any entity type whose name matches the pattern. Useful for specifying '*' so that all changes are reported	*