Interesting, but I don't think it will work.  I'll have a look at it and get back to you ..

Irene

[EMAIL PROTECTED]
Sent by: [EMAIL PROTECTED]

01/08/2005 16:57

Please respond to
[email protected]

To
[email protected]
cc
Subject
RE: [SA-list] Don't think this is possible, but ...





There is a file date and time check add on module for SA that is in
beta.  It is made by Michael Smith who is on this list.  It can be used
to check if a file's modification date/time is "in N last minutes", or
"file dated today".  Could you possibly use that to monitor whether the
file(s) in question have/have not changed?


-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Irene Warden
Sent: Monday, August 01, 2005 11:36 AM
To: [email protected]
Subject: [SA-list] Don't think this is possible, but ...


I have an application which should, every night, download a database
from a website and use this database to update its local information.
Most of this time this is what happens; however, sometimes the database
which is downloaded hasn't changed, so there isn't any need to update
the local information, which is also OK.  Each of these actions writes
to the server's event log, and I'm using the old Perl CheckEvt addon.

What I would really like to do is send an alert if there is *no* event
entry for the download, and if there is *no* event entries for either
the update or the 'everything's current' warning, but I don't think I
can check for missing event log entries (can I?).

I've managed to fiddle the first rule, so that it sends me an email if
the database downloads correctly (by finding the entry in the log, then
inverting the status to it doesn't show as DOWN), but I'm not really
100% happy with it as I have to check my email each morning to see if
I've received a mail, rather than getting alerted when the entry doesn't
appear in the event log .....

but I'm completely stuck with the next bit ..... the problem is that
either the update (event ID 4040) or the 'everything is up-to-date
message (event ID 31000) are both correct, so I really only want to get
an alert if *neither* one appears.  The CheckEvt documentation shows how
to flag if *both* entries appear, but since it doesn't mention a
*neither* option, I assume I can't do it.

Does this make any sense??

For the latest data on the economy and society
consult National Statistics at http://www.statistics.gov.uk

**********************************************************************
Please Note: Incoming and outgoing email messages
are routinely monitored for compliance with our policy
on the use of electronic communications
**********************************************************************
Legal Disclaimer : Any views expressed by
the sender of this message are not necessarily
those of the Office for National Statistics
**********************************************************************

The original of this email was scanned for viruses by the Government
Secure Intranet (GSi) virus scanning service supplied exclusively by
Energis in partnership with MessageLabs.

On leaving the GSi this email was certified virus-free




-------------------------

[This E-mail scanned for viruses by Declude Virus]

To unsubscribe from a list, send a mail message to [EMAIL PROTECTED]
With the following in the body of the message:
  unsubscribe SAlive

PLEASE NOTE: THE ABOVE MESSAGE WAS RECEIVED FROM THE INTERNET.

On entering the GSi, this email was scanned for viruses by the Government Secure Intranet (GSi) virus scanning service supplied exclusively by Energis in partnership with MessageLabs.

Please see http://www.gsi.gov.uk/main/notices/information/gsi-003-2002.pdf for further details.

In case of problems, please call your organisational IT helpdesk

The original of this email was scanned for viruses by the Government Secure Intranet (GSi) virus scanning service supplied exclusively by Energis in partnership with MessageLabs.

On leaving the GSi this email was certified virus-free

Reply via email to