How do you create a flex connector that reads multiple files in the same directory?

[brett.pladna@hp]

I noticed that the siteminder connector reads multiple files in the same folder. I am trying to create a flex for a platform that uses multiple files in the same folder. I noticed this in the siteminder agent.properties file:

agents[0].smaccess=
agents[0].smaccess_Acct=
agents[0].smaccess_Adm=
agents[0].smaccess_Auth=
agents[0].smaccess_Az=
agents[0].smps=

I took out the file locations but each of those has the exact same path. Each has a different file name, of course. What is .smaccess triggering? Do I need a special script for the flex connector I want to create?

[Till]

You probably can't just replicate that mechanism from the siteminder connector.

I would asume that a real-time folder reader is the way to go.

Do all the files have the same format? Can you cover then with a single parser?

[brett.pladna@hp]

They are all.log files. I can tell the file reader agent.properties file to look at all .log files right? (i.e *.log?)

[Till]

sure. But do they all have the same format?

[brett.pladna@hp]

yes they do because they were using a folder reader flex. I just tried the /*.log and it can't read it. it's literally looking for *.log. Did I do something wrong?

[randylle1]

Did you ever get your answer? I am having the same issue?

[ianfitz]

Are you guys using multi folder follower connectors?  If so you can just set the folder path, and for each entry in the list of folders, specify the appropriate wildcard in agent.properties to read the file that you are interested in.  You can configure each folder/file to be handled by the same flex parser.

HTH,

Ian,

[brett.pladna@hp]

I will give it a try.

Thanks,

Brett Pladna

[randylle1]

Ian

What does the entry look like inside the properties file to tell which parser to use. I have it where it is able to read all files with .txt and rename it to .processed when it is done. The issue is that it is not using my custom parser since all the information is being dumped into the message field.

Any ideas?

v/r

Randy

[brett.pladna@hp]

We got this to work. Thanks for all the help.

Thanks,

Brett Pladna

[ianfitz]

Randy:

For a general syslog style file, you could use something like this (for some reason the file has double /'s) which will use the system subagent for syslog events:

agents[0].foldertable[0].configfile=syslog/syslog.subagent

agents[0].foldertable[0].configfolder=/full/path/to/current/user/agent//flexagent/

agents[0].foldertable[0].configtype=sdkrfilereader

...

agents[0].foldertable[0].folder=/var/log

...

agents[0].foldertable[0].mode=PersistFile

...

agents[0].foldertable[0].processingmode=realtime

...

agents[0].foldertable[0].wildcard=messages

...

Regards,

Ian.

[randylle1]

Thank you

I will try this and hope to get it working.

Thanks again

Randy