Nagios Support Forum

Hello,

I am looking of how to embed the regular expression that will match a pattern which is multiple times addressed. In other words, this should find only when this pattern is found more than once. Below is an example of a web page (xml), which shows twice the "c start", so I would like to know what is the regex in order to find it?


I know how to find it by using the following regex: do you know how to embed it to the check_http plugin?

thank you.

This would do it. You need to -l to span multiple lines

scottwilkerson wrote:This would do it. You need to -l to span multiple lines

Code: Select all

 -l -r ".*c start.*c start.*"

how can I set up the check to alarm when it find multiple lines, i.e. more than once (.*c start.*c start.*)?

thank you.

Add --invert-regex to the command

scottwilkerson wrote:Add --invert-regex to the command

Code: Select all

 --invert-regex
    Return CRITICAL if found, OK if not

I should rephraise it. The following pattern should be the OK pattern, which contains several regex ".*c start.*c start.*":

Code: Select all

  
<action
  src="abc"
  system="2222">
  <param
    name="trackID"
    value="1"
    valueType="data">
  <c start="11111" end="1111111" />
</action>
<action
  src="abc"
  system="2222">
  <param
    name="trackID"
    value="1"
    valueType="data">
  <c start="11111" end="1111111" />
</action>

The alert should be triggered when it finds more that once in the <action> the regex pattern ".*c start.*c start.*

Code: Select all

  
<action
  src="abc"
  system="2222">
  <param
    name="trackID"
    value="1"
    valueType="data">
  <c start="11111" end="1111111" />
  <c start="11111" end="222222222" />
</action>
<action
  src="abc"
  system="2222">
  <param
    name="trackID"
    value="1"
    valueType="data">
  <c start="11111" end="1111111" />
  <c start="11111" end="222222222" />
</action>

I'm not a master regex builder but something like this?

scottwilkerson wrote:I'm not a master regex builder but something like this?

Code: Select all

--invert-regex -l -r '.*action.*c start.*c start.*/action.*'

Unfortunatelly, this regex doesn't get the right pattern, I mean that having more than once the pattern this cannot get the critical.

I guess a first step would be to have you create a regex that can do the match you want, then we can work to apply it to check_http

https://www.freeformatter.com/regex-tester.html