Hi,
I'm trying to update the checksum_digests silently on the client, but haven't had any luck so far.
Initially I thought {report_changes => "none"} would be the answer, but then it doesn't even update the db. The attribute naming just implied otherwise :)
I've also tried the action body reporting promises, but they had no change on the output.
Here's a contained sample of what I think should work.
body common control { bundlesequence => { "tripwire" }; }
bundle agent tripwire {
vars:
"triplist" slist => { "/tmp/foo", "/tmp/bar" };
files:
"$(triplist)"
comment => "Run twipwire against $(triplist) and silently update hashes if changes are found",
changes => tripwire,
action => report_error_only;
}
body changes tripwire {
hash => "md5";
report_changes => "all";
update_hashes => "yes";
}
body action report_error_only {
report_level => "error";
log_level => "error";
}
What ever I do, the output is always like below if the DB is touched.
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
ALERT: Hash (md5) for /tmp/foo changed!
Preceding promise: Run twipwire against /tmp/foo and silently update hashes if changes are found
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
-> Updating hash for /tmp/foo to MD5=63a8f115a36abfdbd6c939b0556693ae
I: Made in version 'not specified' of './
trip_test.cf' near line 7
I: Comment: Run twipwire against /tmp/foo and silently update hashes if changes are found
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
ALERT: Last modified time for /tmp/foo changed Tue Mar 26 11:32:53 2013 -> Tue Mar 26 11:42:28 2013
Preceding promise: Run twipwire against /tmp/foo and silently update hashes if changes are found
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Is there a way to do this without sending out alerts?
I'm using community 3.3.7.
-Tero