All invalid rules will be ignored.
Process Checking Rules for Sensor:   
 [HOST_NAME] (SID: [SID] )


Rules should be in the form: alert_level;process_regex;min;max;comment_or_description;regen_cmd;regen_user
 
alert_level Options: red or yellow
The level of alert that will be generated if this process falls outside of specified parameters.
process_regex

The string or simple regex that will match the process you wish to monitor.
ie: named or httpd.*conf (which would match "httpd -DSSL -f /usr/local/www/conf/httpd.conf")

min The minimum number of processes that should match process_regex. If the actual number falls below the minimum number, the specified alert_level will be generated.
Default is 1.
max The maximum number of processes that should match process_regex. If the actual number goes above the maximum number, the specified alert_level will be generated.
Default is 0 (unlimited).
comment_or_description Optional comment or description that will appear if this file/directory is modified. (ie: "System Configuration Files")

regen_cmd (optional)

"regen_cmd" (Regeneration Command) is the command that should be run if the number of matching processes fall below the min number specified. In order for this command to be executed, a matching command MUST be in the "regen.cmds" file in the "/usr/local/demarc/conf" directory on the host in which this command will be executed. This is for your safety, as commands have the potential to be run as root. Please see the documentation for a more thorough discussion on this topic.

NOTE: this command will be executed as stated, and the perl script will wait 10 seconds for control to return to the program, if control is not restored, the script will attempt kill the process.
Moral: if this command does not automatically background itself, add a "&" to the end of it.

regen_user (optional) "regen_user" (Regeneration User) is the user that the command specified in "regen_cmd" should be run as.