Hi
I have a scheduled task running on a Linux server that exports the current Allow list for UFW to a text file.
I've then configured a rule on Zabbix that does the following
{Template OS Linux:vfs.file.md5sum[/tmp/ports.txt].diff(0)}>0
and alerts if the MD5sum of the file changes, or at least thats the idea, the problem i'm having is that before Zabbix can alert, it updates the known md5 check from the last check, so the rule becomes resolved automatically, even though the file has changed.
How can I stop this? Ideally i'd like to avoid having to store the md5 of a file in the rule.
Thanks
I have a scheduled task running on a Linux server that exports the current Allow list for UFW to a text file.
I've then configured a rule on Zabbix that does the following
{Template OS Linux:vfs.file.md5sum[/tmp/ports.txt].diff(0)}>0
and alerts if the MD5sum of the file changes, or at least thats the idea, the problem i'm having is that before Zabbix can alert, it updates the known md5 check from the last check, so the rule becomes resolved automatically, even though the file has changed.
How can I stop this? Ideally i'd like to avoid having to store the md5 of a file in the rule.
Thanks