tw_baseline

The tw_baseline utility enables you to audit your appliance for existing state, inventory, and relationships between configuration items.

Recommendation

Use the BMC Discovery user interface to perform the functionality provided by the tw_baseline command line utility (see Baseline configuration). If you choose to run the utility, read the documentation in this section to learn its usage and to understand the risks and potential impact on your environment.

Options in the utility specify how the baseline properties can be performed or displayed, or determine what action to take. To use the utility, type the following command at the $TIDEWAY/bin/ directory:

tw_baseline [options] 

where options are any of the options described in the following table and the common command line options described in Using command line utilities.

 

Command Line Option

Description

--conditional

Specifies to check for missing data and baselines only that data.

--config=FILE

Specifies to baseline a configuration file, where FILE is the name of the file.

--csvfile=FILE

Specifies to baseline a CSV output file, where FILE is the name of the file.

--filter=PATTERN

Limits which checks are run, where PATTERN must match the check to run. For example, to check the CMDB synchronization balckout windows, use the following option:
--filter=cmdb_sync.blackout_windows

You can find a list of all the checks available using the --list-checks option.

--interactive

Specifies to run a baseline check in interactive mode, whereby you are prompted to respond Yes (Y) or No (N) to run specific checks until there are no further checks available. For checks that you request to run, results are displayed after you have responded to all checks. Checks that you have declined to run are skipped, and no further actions are run.

--list-checksDisplay a list of all baseline checks together with a brief description.

--no-actions

Specifies to run all baseline checks and perform no subsequent action after the checks are complete.

--no-checks

Specifies to run the baseline and performs no subsequent checks.

--no-display

Specifies to run the baseline without displaying results.

--no-highlight

Specifies to run the baseline with no terminal highlighting.

--rebaseline

Specifies to rebaseline the check data.

--statusfile=FILE

Specifies to rebaseline a status output file, where FILE is the name of the file.

--verbose

Specifies to run the baseline and display information messages for checked data.

 

User example

In the following example, type the commands on a single line. Line breaks are provided to make the example easier to read.

Running a manual tripwire check

By default, Tripwire is run hourly and the output is written to the tw_tripwire.txt file. If a deviation from the baseline has been detected, the tw_tripwire.txt file is updated with the details. The monitor which sets the appliance status in the user interface checks the tw_tripwire.txt file hourly and sets certain restrictions if configured.
If you have rebaselined the Tripwire database, you should run the following commands (as the tideway user) to ensure that the correct status is shown in the user interface.

sudo /usr/tideway/tripwire/sbin/tripwire --check > /usr/tideway/var/tw_tripwire.txt
/usr/tideway/bin/tw_baseline

The appliance status is updated.

For more information about using Tripwire and baseline configuration, see Baseline configuration.

Was this page helpful? Yes No Submitting... Thank you

Comments