Resource Type: nimsoft_logmon_watcher

Defined in:

lib/puppet/type/nimsoft_logmon_watcher.rb

Providers:

nimsoft

Overview

The ‘nimsoft_logmon_watcher` type describes a watcher rule of the `logmon` probe. A watcher rule described a pattern that can appear in a logfile and describes the message that will be sent, if such a message appears. A watcher rule does always belong to exactly one profile.

Example:

nimsoft_logmon_watcher { 'system log/failed root login'
  ensure   => present,
  active   => yes,
  match    => '/FAILED su for root by (.*)/',
  message  => 'Possible breakin attempt detected: ${msg}',
  severity => 'warning',
}

The name of the resource must be of the for ‘profile_name/watcher_name`

Properties

• active

  Set to ‘yes’ if the watcher should be active and ‘no’ if the watcher rule should be inactive

  Supported values:

  • yes
  • no
• ensure (defaults to: present)

  The basic property that the resource should be in.

  Supported values:

  • present
  • absent
• match

  The pattern that has to match. This can be a simple glob or a regular expression

• message

  The messagetext of the outgoing message

• severity

  The severity of the outgoing message

  Supported values:

  • clear
  • info
  • warning
  • minor
  • major
  • critical
• source

  The source of the outgoing message

• subsystem

  The subsystem of the outgoing message. This can either be a string or a subsystem id

• suppkey

  The suppression key of the outgoing message. This can be useful if you have good and bad messages and you want to clear the bad message after you recognize that the problem has been solved

Parameters

• name (namevar)

  The name of the watcher rule.

• provider

  The specific backend to use for this ‘nimsoft_logmon_watcher` resource. You will seldom need to specify this — Puppet will usually discover the appropriate provider for your platform.