tw_baseline

The tw_baseline utility enables you to audit your appliance for existing state, inventory, and relationships between configuration items.

Best Practice
Use the BMC Atrium Discovery user interface to perform the functionality provided by the tw_baseline command line utility (see Baseline configuration). If you choose to run the utility, read the documentation in this section to learn its usage and to understand the risks and potential impact on your environment.

Options in the utility specify how the baseline properties can be performed or displayed, or determine what action to take. To use the utility, type the following command at the $TIDEWAY/bin/ directory:

tw_baseline [options]

where options are any of the commands described in the following table:

Command Line Option	Description
`--conditional`	Specifies to check for missing data and baselines only that data
`--config=FILE`	Specifies to baseline a configuration file, where FILE is the name of the file
`--csvfile=FILE`	Specifies to baseline a CSV output file, where FILE is the name of the file
`--interactive`	Specifies to run a baseline check in interactive mode, whereby you are prompted to respond Yes (Y) or No (N) to run specific checks until there are no further checks available. For checks that you request to run, results are displayed after you have responded to all checks. Checks that you have declined to run are skipped, and no further actions are run.
`--no-actions`	Specifies to run all baseline checks and peform no subsequent action after the checks are complete
`--no-checks`	Specifies to run the baseline and peforms no subsequent checks
`--no-display`	Specifies to run the baseline with no terminal highlighting
`--rebaseline`	Specifies to rebaseline the check data
`--statusfile=FILE`	Specifies to rebaseline a status output file, where FILE is the name of the file
`--verbose`	Specifies to run the baseline and display information messages for checked data

User example

In the following example, type the commands on a single line. Line breaks are provided to make the example easier to read.

Running a manual tripwire check

By default, Tripwire is run hourly and the output is written to the tw_tripwire.txt file. If a deviation from the baseline has been detected, the tw_tripwire.txt file is updated with the details. The monitor which sets the appliance status in the user interface checks the tw_tripwire.txt file hourly and sets certain restrictions if configured.
If you have rebaselined the Tripwire database, you should run the following commands (as the tideway user) to ensure that the correct status is shown in the user interface.

sudo /usr/tideway/tripwire/sbin/tripwire --check > /usr/tideway/var/tw_tripwire.txt
/usr/tideway/bin/tw_baseline

The appliance status is updated.

For more information about using Tripwire and baseline configuration, see Baseline configuration.

BMC Software

tw_baseline

User example

Running a manual tripwire check