Unix Rule Engine Control File Format?
The Unix rule engine control file contains the Relator, the Rule Script and the schedule to enable the Rule to be executed on a remote Unix machine.
The file is created by the Argent Guardian supervising engine, and is then pushed out to the remote Unix machine.
The file’s name has the format of:
UNIX_RULE_ENGINE_{UNIX_HOST_NAME}.CTRL
You can see the file in both the UNIX_RE subdirectory under the Argent Guardian Windows directory, as well as the Unix or Linux /opt/Argent/UNIX directory.
The file is regenerated when the Relator is updated, or you execute a Run Now, Held or Release on the Argent Guardian History screen.
Each line of the control file has a format of:
RULE RELATOR HH:MM CRC-32 SIZE TIMEOUT
A sample of control file for a single host is listed below:
SCP_LINUX_PDT_CPU_UTIL | REL_DEMO_LINUX_1 | 08:00 | 41811 | 2310 | 60 |
SCP_LINUX_PDT_FREE_MEMORY | REL_DEMO_LINUX_1 | 08:00 | 14457 | 2473 | 60 |
SCP_LINUX_DEMO | REL_DEMO_LINUX | 09:00 | 4189 | 3111 | 60 |
SCP_LINUX_PDT_CPU_UTIL | REL_DEMO_LINUX_1 | 09:00 | 41811 | 2310 | 60 |
SCP_LINUX_PDT_FREE_MEMORY | REL_DEMO_LINUX_1 | 09:00 | 14457 | 2473 | 60 |
A sample control file for a host running Rule Scripts for another system, called ‘OFFSIDER’ is listed below:
SCP_LINUX_DEMO | REL_DEMO_LINUX | 08:00 | 4189 | 3111 | 60 | |
SCP_LINUX_DEMO | REL_DEMO_LINUX | 08:00 | 4189 | 3111 | 60 | OFFSIDER |
SCP_LINUX_PDT_CPU_UTIL | REL_DEMO_LINUX_1 | 08:00 | 41811 | 2310 | 60 | |
SCP_LINUX_PDT_CPU_UTIL | REL_DEMO_LINUX_1 | 08:00 | 41811 | 2310 | 60 | OFFSIDER |
SCP_LINUX_PDT_FREE_MEMORY | REL_DEMO_LINUX_1 | 08:00 | 14457 | 2473 | 60 | |
SCP_LINUX_PDT_FREE_MEMORY | REL_DEMO_LINUX_1 | 08:00 | 14457 | 2473 | 60 | OFFSIDER |
SCP_LINUX_DEMO | REL_DEMO_LINUX | 09:00 | 4189 | 3111 | 60 | |
SCP_LINUX_DEMO | REL_DEMO_LINUX | 09:00 | 4189 | 3111 | 60 | OFFSIDER |
SCP_LINUX_PDT_CPU_UTIL | REL_DEMO_LINUX_1 | 09:00 | 41811 | 2310 | 60 | |
SCP_LINUX_PDT_CPU_UTIL | REL_DEMO_LINUX_1 | 09:00 | 41811 | 2310 | 60 | OFFSIDER |
SCP_LINUX_PDT_FREE_MEMORY | REL_DEMO_LINUX_1 | 09:00 | 14457 | 2473 | 60 | |
SCP_LINUX_PDT_FREE_MEMORY | REL_DEMO_LINUX_1 | 09:00 | 14457 | 2473 | 60 | OFFSIDER |
Argent has a Version 2 control file, which is shorter, to improve the efficiency of Unix Rule Engines monitoring large numbers of systems.
By changing HKEY_LOCAL_MACHINE\Software\Argent\ArgentGuardian\UNIX_RE_VERSION from the default of 1 to 2 and restarting the Argent Guardian supervising engine service, the file format changes.
Example of a Version 2 control file:
HOSTS REL_LINUX_CPU_SAR REDHAT REDHAT2 SCRIPT REL_LINUX_CPU_SAR SCP__LINUX_CPU_SAR 56636 4627 60 TIME REL_LINUX_CPU_SAR 00:00 23:59 3 HOSTS REL_LINUX_CPU REDHAT REDHAT2 SCRIPT REL_LINUX_CPU SCP__LINUX_CPU_AND_PDT 30476 3401 60 TIME REL_LINUX_CPU 00:00 23:59 3