|
|
monitor log entries and send e-mail
06-01-2010
06-01-2010
echo "$EMAILMESSAGE" | /bin/mailx -s "$SUBJECT" "$RECIPIENT"
printf "%s\n" "$EMAILMESSAGE" | /bin/mailx -s "$SUBJECT" "$RECIPIENT"
#!/bin/sh -x # # # PRINTF=/usr/bin/printf EGREP=/usr/bin/egrep TAIL=/usr/bin/tail COPY=/usr/bin/cp CAT=/usr/bin/cat LOG_FILE="$1" LOG_PATH="/var/log/$1" #To check if log file to check has been given as argument when running the script if [ $# -ne 0 ] ; then $PRINTF "%s: Is the name of the log file you will be scanning. \n" $1 $PRINTF $LOG_FILE"\n" $PRINTF $LOG_PATH"\n" if [ -f $LOG_PATH ]; #if logfile exits then echo "File $LOG_FILE exists \n" $COPY $LOG_PATH ./ #create copy of original log file in current directory $CAT -n $LOG_FILE > ./tmp_log #Store a copy of original log file in a temporary log file with number index # script to check for string to search SEARCH=`$EGREP -i 'error|warning' $1` #search for strings error or warning in any form # SCAN_LOG=`$TAIL $1|[${SEARCH}]` #scanning logfile for string pattern # script to send simple email SUBJECT="Error/Warning messages in logfile" # email subject RECIPIENT="validmailid@domain.extension" # Email To ? # EMAILMESSAGE="$SCAN_LOG" # Email text/message EMAILMESSAGE="$SEARCH" # Email text/message echo "mail not sent yet" $PRINTF "%s\n" "$EMAILMESSAGE" | /bin/mailx -s "$SUBJECT" "$RECIPIENT" #send email with subject message to specified mail id echo "mail sent" else echo "File $LOG_FILE does not exists \n" fi else $PRINTF "%s: Need the name of the log that needs to be checked\n" $0 # EXIT (1) fi
> sh logmon1 log.04 log.04: Is the name of the log file you will be scanning. log.04 /../../../../log.04 File log.04 exists mail not sent yet mail sent >
06-01-2010
06-02-2010
check for which line of code is being executed
thanks for pointing that out. I will remember to take that out as it looks a bit misleading.#!/bin/sh -x # # ############# # #THE PURPOSE OF THIS SCRIPT 'logmon'? #THE SCRIPT IS INTENDEED TO MONITOR LOG FILES AND REPORT ANY ENTRIES THAT CONTAIN THE PATTERN "ERROR" OR "WARNING" IN ANY FORMAT #THE SCRIPT SENDS AN EMAIL TO THE ID MENTIONED IN THE RECIPIENT VARIABLE IF THE PATTERN IS FOUND. NOTE:- THE SCRIPT IS INTENDED #TO CHECK A LOG FILE COMPLETELY FOR THE FIRST TIME THE LOG FILE IS BEING SCANNED AND THEN CHECKS ONLY THE NEWLY ADDED LOG ENTRIES #HENCEFORTH. # ############# # #WHAT DOES THE SCRIPT REQUIRE TO EXECUTE? #THIS SCRIPT TAKES AN ARGUMENT WHICH IS THE ABSOLUTE PATH WITH THE NAME OF THE FILE THAT YOU WISH TO SCAN. # ############ #WHAT DOES MY SCRIPT DO SO FAR? #IT CHECKS IF AN ARGUMENT IS PASSED WHEN THE SCRIPT IS BEING EXECUTED. IT EXITS OUT WITH AN ERROR MESSAGE #IF THE ARGUMENT IS NOT GIVEN. WHEN THE SCRIPT IS GIVEN THE ABSOLUTE PATH OF THE FILE TO SCAN FOR STRING PATTERNS, IT FIRST GIVES #INFORMATION OF WHICH FILE IS GOING TO BE SCANNED. #FINALLY IT DISPLAYS A MESSAGE AFTER SENDING THE EMAIL TO THE ID MENTIONED IN THE RECIPIENT. #IF THE LOG FILE BEING SEARCHED IS NOT LOCATED IN THE PATH DISPLAYED EARLIER,IT DISPLAYS A FILE NOT FOUND MESSAGE AND EXITS THE SCRIPT #THE FILE NOW CREATES A TEMPORARY FILE tmp_log WHICH BASICALLY IS A COPY OF THE LOG FILE BEING SCANNED. ANOTHER FILE diff_result IS CREATED WHICH #CONTAINS UPDATED ENTRIES OF THE CURRENTLY SCANNED LOG FILE # ############ # #WHAT NEEDS TO BE DONE? #LOGIC FOR SEARCHING ONLY UPDATED ENTRIES TO THE CURRENTLY SCANNED LOG FILE IS ALMOST DONE BUT REQUIRES TUNING. #FIND HOW MANY TIMES A PARTICULAR ENTRY IS REPEATED TO GIVE LOGISTICS OF WHICH ERROR OCCURS HOW MANY TIMES. #NOTE:- TIME STAMP IS TO BE IGNORED FOR THIS SCRIPT WHEN COMPARING DUPLICATE ENTRIES. # ############ PRINTF=/usr/bin/printf EGREP=/usr/bin/egrep TAIL=/usr/bin/tail COPY=/usr/bin/cp CAT=/usr/bin/cat DIFF=/usr/bin/diff LOG_FILE_PATH="$1" # should contain the absolute path of the file to be scanned SEARCH=`$EGREP -i 'error|warning' $1` #search for strings error or warning in any form RECIPIENT="validmailid" # Email To ? #To check if log file to be scanned has been given as argument when running the script if [ $# -ne 0 ] ; then $PRINTF "%s is the log file that will be read \n" $1 if [ -f $1 ]; #check if log file exists then $PRINTF "File exists \n" # script to check for string to search # SCAN_LOG=`$TAIL $1|[${SEARCH}]` #scanning logfile for string pattern # Here am trying to grab all the updated entries in the log file with the match pattern. # So far I am not able to figure out how to do so. I have commented it as it only grabs the last # few lines that were updated in the log file. # script to send simple email SUBJECT="Error/Warning messages in logfile" # email subject # EMAILMESSAGE="$SCAN_LOG" # Email text/message EMAILMESSAGE="$SEARCH" # Email text/message if [ -z "$SEARCH" ]; #Check if any value has been added to variable that will later be passed to EMAILMESSAGE variable. This is basically to avoid sending an e-mail if nothing was found in the log matching the search pattern then $PRINTF "There is no message to send \n" else $PRINTF "%s\n" "$EMAILMESSAGE" | /bin/mailx -s "$SUBJECT" "$RECIPIENT" #send email with subject message to specified mail id $PRINTF "Mail sent to %s" $RECIPIENT fi $DIFF -b $1 ./tmp_log > ./diff_result $COPY $1 ./tmp_log # To keep track of what is updated when this log file is scanned again #Here am using diff to compare the entries updated in the current log which is being scanned with the tmp_log that contains the entries of log file before the script was run #through the log for the second time. I am still trying to perfect it. It basically outputs the result of diff in diff_result file and then I need to do a pattern match on that file #to e-mail only newly updated entries of the log file. else $PRINTF "File %s does not exist \n" $1 $PRINTF "Please place log file to be scanned in the above mentioned path \n" fi else $PRINTF "Script %s: needs the absolute path of the log that needs to be checked\n" $0 fi
sh logmon /var/log/syslog.0
/var/log/syslog.0 is the log file that will be read
File exists
logmon: test: argument expectedsh logmon /<dir>/<dir>/<dir>/log.01 /<dir>/<dir>/<dir>/log.01 is the log file that will be read File exists Mail sent to <validmailid>
if [ -z $SEARCH ];
then
$PRINTF "There is no message to send \n"
else
$PRINTF "%s\n" "$EMAILMESSAGE" | /bin/mailx -s "$SUBJECT" "$RECIPIENT" #send email with subject message to specified mail id
$PRINTF "Mail sent to %s" $RECIPIENT
fi if [ -z "$SEARCH" ];
then
$PRINTF "There is no message to send \n"
else
$PRINTF "%s\n" "$EMAILMESSAGE" | /bin/mailx -s "$SUBJECT" "$RECIPIENT" #send email with subject message to specified mail id
$PRINTF "Mail sent to %s" $RECIPIENT
fish logmon /var/log/syslog.0 /var/log/syslog.0 is the log file that will be read File exists There is no message to send
#!/bin/sh
#set -x
#
#
#############
#
#THE PURPOSE OF THIS SCRIPT 'logmon'?
#THE SCRIPT IS INTENDEED TO MONITOR LOG FILES AND REPORT ANY ENTRIES THAT CONTAIN THE PATTERN "ERROR" OR "WARNING" IN ANY FORMAT
#THE SCRIPT SENDS AN EMAIL TO THE ID MENTIONED IN THE RECIPIENT VARIABLE IF THE PATTERN IS FOUND.
# NOTE:- THE SCRIPT IS INTENDED TO CHECK A LOG FILE COMPLETELY WHEN IT IS SCANNED FOR THE FIRST TIME AND THEN CHECKS ONLY THE NEWLY ADDED LOG ENTRIES
#HENCEFORTH.
#
#############
#
#WHAT DOES THE SCRIPT REQUIRE TO EXECUTE?
#THIS SCRIPT TAKES AN ARGUMENT WHICH IS THE ABSOLUTE PATH WITH THE NAME OF THE FILE THAT YOU WISH TO SCAN.
#
############
#
#WHAT DOES MY SCRIPT DO SO FAR?
#IT CHECKS IF AN ARGUMENT IS PASSED WHEN THE SCRIPT IS BEING EXECUTED.
#IT EXITS OUT WITH AN ERROR MESSAGE IF THE ARGUMENT IS NOT GIVEN.
#ON PROPER EXECUTION, IT FIRST GIVES INFORMATION OF WHICH FILE IS GOING TO BE SCANNED.
#FINALLY IT DISPLAYS A MESSAGE OF WHETHER AN E-MAIL WAS SENT OR NOT
#IF THE LOG FILE BEING SEARCHED IS NOT LOCATED IN THE PATH DISPLAYED EARLIER,IT DISPLAYS A FILE NOT FOUND MESSAGE AND EXITS THE SCRIPT
#NOTE: THE SCRIPT CHECKS WHETHER THE CURRENTLY SCANNED LOG FILE HAS BEEN PREVIOUSLY SCANNED OR NOT. IF NOT SCANNED A TMP_LOG FILE IS CREATED
#AND CONTENTS OF THE LOG FILE IS DUMPED INTO TMP_LOG. IF SCANNED PREVIOUSLY, THEN ALL UPDATED ENTRIES ARE PLACED IN A TEMPORARY FILE AND ONLY
#THOSE ENTRIES ARE CHECKED & REPORTED FOR THE SEARCH PATTERN
#
############
#
PRINTF=/usr/bin/printf
EGREP=/usr/bin/egrep
TAIL=/usr/bin/tail
COPY=/usr/bin/cp
CAT=/usr/bin/cat
DIFF=/usr/bin/diff
REMOVE=/usr/bin/rm
#LOG_FILE_PATH="$1" # should contain the absolute path of the file to be scanned
SEARCH=`$EGREP -i 'error|warning' $1` #search for strings error or warning in any form
RECIPIENT="validmailid@domain.extension" # Email To ?
SUBJECT="Error/Warning messages in logfile" # email subject
if [ $# -ne 0 ] ; #To check if log file to be scanned has been given as argument when running the script
then
$PRINTF "%s is the log file that will be read \n" $1
if [ -f $1 ]; #check if log file to be scanned exists
then
$PRINTF "File exists \n"
if [ -f ./tmp_log ]; #To check if current log file was scanned for the first time
then
$DIFF -b $1 ./tmp_log > ./diff_result #Resource that contains only updated entries of the current log file
SEARCH_UPDATES_ONLY=`$EGREP -i 'error|warning' ./diff_result`
$REMOVE ./diff_result
EMAILMESSAGE="$SEARCH_UPDATES_ONLY" # Email text/message Contains log entries from diff_result
if [ -z "$SEARCH_UPDATES_ONLY" ];
then
$PRINTF "There is no message to send \n"
else
$PRINTF "%s\n" "$EMAILMESSAGE" | /bin/mailx -s "$SUBJECT" "$RECIPIENT" #sends email of updated log entries that match the pattern
$PRINTF "Mail sent to %s" $RECIPIENT
fi
else
EMAILMESSAGE="$SEARCH" # Email text/message #Contains log entries from actual log file
if [ -z "$SEARCH" ];
then
$PRINTF "There is no message to send \n"
else
$PRINTF "%s\n" "$EMAILMESSAGE" | /bin/mailx -s "$SUBJECT" "$RECIPIENT" #send email with all log entries that matche the search pattern
$PRINTF "Mail sent to %s" $RECIPIENT
fi
fi
$COPY $1 ./tmp_log # To keep track of what is updated when this log file is scanned again
else
$PRINTF "File %s does not exist \n" $1
$PRINTF "Please place log file to be scanned in the above mentioned path \n"
fi
else
$PRINTF "Script %s: needs the absolute path of the log that needs to be checked\n" $0
fish logmon /<dir>/<dir>/<dir>/log.01 /<dir>/<dir>/<dir>/log.01 is the log file that will be read File exists There is no message to send
sh logmon /<dir>/<dir>/<dir>/log.01 /<dir>/<dir>/<dir>/log.01 is the log file that will be read File exists Mail sent to validmailid@domain.extension>
|
|
|
|