The Watched File Table lists all the files being monitored by the module. This table displays some of the more commonly used attributes at the top level and other hidden attributes in a lower level. For more information on hidden attributes, refer to Hidden File Attributes.
File changes can only be noticed once the file has been detected as existing. If a file does not exist or is nonexistent, the module detects that the file does exist with a size bigger than 0. For example, if a file has two records, the module is not able to notice those two records. However, the module notices all future modifications.
This table is initialized with the following seven system files:
/etc/hosts /etc/aliases /etc/nsswitch.conf /etc/inittab /etc/vfstab /etc/passwd /etc/rmtab
The Watched File Table displays information about each file and provides the data on the attributes listed in the following table.
Table 3–1 Watched File Table
Field |
Description |
---|---|
File |
Name of the file. |
Full Path |
Path to file and the real name. |
File Size |
Size of the file in bytes. |
File Owner |
The owner of the file. |
File Group |
The group the file belongs to. |
File Permissions |
Permissions on the file. |
Timestamp |
Time when the file was last updated. |
Validation Script |
The path to the validation script used to validate the file when its timestamp changes. Save the script in /var/opt/SUNWsymon/ SysMgmtPack/filewch/scripts and provide a relative path. The value for script is optional. For more information, see Validation Script. |
Exit Code |
Displays the exit code of the last execution of the validation script. |
Event Monitoring |
Displays the state of the file watch mode for each file. For more information, see To Disable Event Monitoring. |
The following is a list of attributes that are hidden, and that are accessible from the Row Editor window. To open this window, press mouse button 3 on any row and choose Edit Row from the pop-up menu.
Table 3–2 Hidden File Attributes
Field |
Description |
---|---|
Delimiter |
Delimiter between columns. |
Comment char |
Type of the character that delimits a comment line. |
Number of fields |
Number of fields in each file entry. |
Num key field |
Number of fields composing the key. The key is assumed to be at the beginning of the record. A key is an identifier for the record. For example, in the passwd file, the key for each record is the first field: user name. The key is unique for each record. |
Field names |
Names of the different columns in the file entries. |
Hide values flag |
One of the following values:
|
Addition Severity |
Possible values: Info, Warning, Error, None. |
Deletion Severity |
Possible values: Info, Warning, Error, None. |
Change Severity |
Possible values: Info, Warning, Error, None. |
Record Format |
Format of the record. Refer to Record Format for more information. |
You can use the Attribute Editor to set a regular expression alarm threshold on Exit Code. There is no default alarm threshold.
If the file to be monitored does not exist, File Watch generates an information alarm. However, the module still adds the file to the Watched File Table but does not display any other information about this file.
If the file to be monitored, such as a directory, exists but cannot be opened, the file is added to the Watched File Table. No other information about this file is displayed.