CA SystemEDGE User Guide › Examples Using State Management › Monitor the Existence of Quarantined Files

Monitor the Existence of Quarantined Files

This example monitors the existence of any files quarantined by eTrust Antivirus in the %ProgramFiles%\CA\eTrustITM\Move directory every ten minutes. The example consists of two entries for the sysedge.cf file and uses the logfile parameter to monitor the entries in a directory. The 0x1808 flag specifies to monitor directories recursively and not to log any traps.

# Windows sample configuration for monitoring the existence of any files quarantined by eTrust Antivirus
watch logfile 45 0x1808 '%ProgramFiles%\CA\eTrustITM\Move' '' 'Monitor eTrust Antivirus Quarantine directory' '' 10 warning
monitor logMonitorEntry '%ProgramFiles%\CA\eTrustITM\Move' logMonitorLogFileCount 45 0x100 600 absolute > 0 'eTrust Antivirus Quarantine directory not empty' '' '' '' '' 'major'