Refactoring: Changed all check parameters starting with an 'o' to the new rulespec...
[check_mk.git] / agents / plugins / mk_logwatch.aix
blob0c7f970e4a96f944720f95f9b33e7eaa61942adb
1 #!/usr/bin/ksh
2 # Logfile monitoring for AIX via errpt
4 ## Output of errpt looks like this, newest first
5 ## (timestamp is month-day-hour-minute-year):
6 # IDENTIFIER TIMESTAMP T C RESOURCE_NAME DESCRIPTION
7 # 8650BE3F 0820122810 I H ent2 ETHERCHANNEL RECOVERY
8 # F3846E13 0820122510 P H ent2 ETHERCHANNEL FAILOVER
9 # 8650BE3F 0820104410 I H ent2 ETHERCHANNEL RECOVERY
10 # F3846E13 0820093810 P H ent2 ETHERCHANNEL FAILOVER
11 # 8650BE3F 0820090910 I H ent2 ETHERCHANNEL RECOVERY
14 MK_LOGWATCH_AIX_STATE="$MK_VARDIR/mk_logwatch_aix.last_reported"
16 echo "<<<logwatch>>>"
17 echo "[[[errorlog]]]"
19 # the last line we already reported (may be empty)
20 LINE=$(tail -n1 "$MK_LOGWATCH_AIX_STATE" 2> /dev/null)
22 if [ "$LINE" ]; then # get rid of all lines after that:
23 OUT=$(errpt | awk '/'"$LINE"'/ {exit}; (NR>1) {printf "C %s\n", $0}')
24 else # LINE is empty -> report all
25 OUT=$(errpt | awk '(NR>1) {printf "C %s\n", $0}')
28 if [ "$OUT" ]; then
29 # output data; if successful, remember most recent
30 echo "$OUT" && echo "$OUT" | head -n1 | sed 's/^C\ //' > "$MK_LOGWATCH_AIX_STATE"