1. Logwatch
①Install
|
1 |
# dnf install logwatch -y |
②Edit configuration file
|
1 2 |
# cat /usr/share/logwatch/default.conf/logwatch.conf >> /etc/logwatch/conf/logwatch.conf # vi /etc/logwatch/conf/logwatch.conf |
|
1 2 3 4 5 6 7 |
●Per line 51 Set "MailTo = root" as a comment and set the email address you want to receive notifications to the line below it. #MailTo = root MailTo = [Mail address] ●Per line 84 : Set the level of detail for log notifications #Detail = Low Detail = High |
③Output Logwatch reports
|
1 |
# logwatch --output stdout |
It will appear as follows
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 |
################### Logwatch 7.5.5 (01/22/21) #################### Processing Initiated: Wed Aug 21 10:17:56 2024 Date Range Processed: yesterday ( 2024-Aug-20 ) Period is day. Detail Level of Output: 10 Type of Output/Format: stdout / text Logfiles for Host: Lepard ################################################################## --------------------- Kernel Audit Begin ------------------------ Number of audit daemon starts: 3 Number of audit initializations: 3 **Unmatched Entries** auditd[726]: audit dispatcher initialized with q_depth=2000 and 1 active plugins: 1 Time(s) auditd[730]: audit dispatcher initialized with q_depth=2000 and 1 active plugins: 1 Time(s) auditd[713]: audit dispatcher initialized with q_depth=2000 and 1 active plugins: 1 Time(s) ---------------------- Kernel Audit End ------------------------- --------------------- Clamav Begin ------------------------ ・・・<omission >・・・ --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/rl-root 17G 7.1G 9.9G 42% / /dev/nvme0n1p1 960M 320M 641M 34% /boot ---------------------- Disk Space End ------------------------- --------------------- lm_sensors output Begin ------------------------ No sensors found! Make sure you loaded all the kernel drivers you need. Try sensors-detect to find out which these are. ---------------------- lm_sensors output End ------------------------- ###################### Logwatch End ######################### |
④Test to see if the report arrives at the address you set. Check if you receive a log report email like the one above.
|
1 |
# /etc/cron.daily/0logwatch |
2.Introduce disk usage check script
2.1 Script Creation
|
1 2 |
# cd /var/www/system # vi disk_capacity_check.sh |
Contents of disk_capacity_check.sh
|
1 2 3 4 5 6 7 8 9 10 |
#!/bin/bash #Designation of e-mail address to be notified MAIL="<your mailaddress>" DVAL=`/bin/df / | /usr/bin/tail -1 | /bin/sed 's/^.* \([0-9]*\)%.*$/\1/'` if [ $DVAL -gt 80 ]; then echo "Disk usage alert: $DVAL %" | mail -s "Disk Space Alert in `hostname`" $MAIL fi |
|
1 |
# chmod 700 disk_capacity_check.sh |
2.2 Execution Confirmation
①Check current usage rates
|
1 |
# df -h |
It appears as follows
|
1 2 3 4 5 6 7 8 9 10 11 |
Filesystem Size Used Avail Use% Mounted on devtmpfs 4.0M 0 4.0M 0% /dev tmpfs 872M 0 872M 0% /dev/shm tmpfs 349M 6.9M 342M 2% /run /dev/mapper/rl-root 17G 7.1G 9.9G 42% / /dev/loop0 128K 128K 0 100% /var/lib/snapd/snap/hello-world/29 /dev/loop3 64M 64M 0 100% /var/lib/snapd/snap/core20/2318 /dev/loop1 45M 45M 0 100% /var/lib/snapd/snap/certbot/3834 /dev/nvme0n1p1 960M 320M 641M 34% /boot /dev/loop2 105M 105M 0 100% /var/lib/snapd/snap/core/17200 tmpfs 175M 8.0K 175M 1% /run/user/1000 |
②Create a dummy file to achieve at least 80% utilization
|
1 |
# dd if=/dev/zero of=dummyfile bs=1M count=8000 |
③check again
|
1 |
# df -h |
Run it and make sure it is above 80%.
④Run check scripts
|
1 |
# /var/www/system/disk_capacity_check.sh |
You will receive an email to the email address you have set up, stating something like "Disk usage alert: 88 %".
⑤Delete "dummyfile"
|
1 |
# rm dummyfile |
⑥Periodic Execution Setting
|
1 2 |
# crontab -e 30 2 * * * /var/www/system/disk_capacity_check.sh |