Can you tell me a way to set up an alert if a probe is changed, disabled, or the like? I've enabled auditing so it is logged but I can't figure out how to generate an alert based on that.
I do not know of a way to do this out of the box, so you might have to script it yourself. With any luck, I am wrong and someone here knows of such a capability.
The good news is that you probably do not need to script this the hard way--by checking all of the probes directly in the script. The script should be able to get what it needs from the NIS database, assuming that is where you have the audit probe saving its records (which is the default). One of the easiest ways to get information from the NIS database into a script is to write a NAS script in Lua. The NAS has built-in access to the NIS database that does not require any special credentials or anything.
You might be able to do this even more simply with something like the adogtw or sql_response probe. For one of those to work, you would have to be able to get exactly the information you need with a SQL query, whereas in a script you can do some processing after getting the results of the query. But depending on what is in the audit table and what you need in the alerts, this might work.
As Keith was saying you best option is going to be to watch the audit tables, it's possible you could check the robot cfgs directory for file changes but this won't give you when probe is stopped and such that should all be in the audit tables.
Out ofthe box, is nothing there, you have to script something, once I startet a project for my self with some sort of "probe" to do what you would like to do, but hadnt the time to go beyond a quick prototyping
Retrieving data ...