hi,
i am attempting to check the dsm.opt file for a include statement in the path where TSM resides. TSM sometime is installed on the C or D drive. how can i tell it to check either C or D drive. any ideas?
exist line whose (it contains “INCLUDE c:\windows\system32\winevt\logs\security.evtx Security_Logs”) of file “C:\Program Files\Tivoli\TSM\baclient\dsm.opt”
You should be able to add an “OR” to the above query and paste the same query after that, but change the path to d:\
You can use a plural form to check multiple files:
exists lines whose (it contains "INCLUDE c:\windows\system32\winevt\logs\security.evtx Security_Logs") of files "dsm.opt" of folders ("C:\Program Files\Tivoli\TSM\baclient";"D:\Program Files\Tivoli\TSM\baclient")
(I’m curious - can TSM handle Event Logs separately from System State?)
You should take a look at this, which does read a bunch of stuff from the dsm.opt file: https://bigfix.me/analysis/details/2994591
The analysis doesn’t address the question of reading it from multiple drives, but it is very useful otherwise.
To build on @JasonWalker 's answer:
exists lines whose (it contains "INCLUDE c:\windows\system32\winevt\logs\security.evtx Security_Logs") of files "dsm.opt" of folders "Tivoli\TSM\baclient" of (folders "Program Files"; folders "Program Files (x86)") of (folders "C:";folders "D:")
You mean that you wouldn’t want to restore the event log when you restore other files on a system? That would make sense. I do think you can be selective. I barely used TSM when I wrote the bigfix integrations, and I haven’t used it in quite a long time.
thanks for the input, getting an “error” when using this. I have tried modifying with out success, any thoughts on what this needs
exists lines whose (it contains “INCLUDE
c:\windows\system32\winevt\logs\security.evtx Security_Logs”) of files
"dsm.opt" of folders “Tivoli\TSM\baclient” of (folders “Program Files”;
folders “Program Files (x86)”) of (folders “C:”;folders “D:”)