topic Re: Syslog actions in Operating System - HP-UX

Syslog actions

Nial Gunn — Fri, 23 Nov 2001 15:51:24 GMT

Is it possible to cause actions to be executed upon the receipt of a given string of text in the body of a syslog message. (i.e., I have a device that sends a syslog message to my HP-UX box and if the words "config change" occur in the body of the message, then I want the HP-UX box to execute a pre-defined shell script.

Re: Syslog actions

G. Vrijhoeven — Fri, 23 Nov 2001 16:06:05 GMT

Hi,

I do think it is easier to do a seach on config file and theire dates.

Start by creating a file that includes all the config files you like to monitor, use that file to compair the dates and if the are not simular, execute an script.

Gideon

Re: Syslog actions

Nial Gunn — Fri, 23 Nov 2001 16:11:29 GMT

I think I understand what you are saying but such a mecanism would mean doing some kind of regular polling of the files. I am looking for something that reacts upon the receipt of a syslog message from an external source. Some kind of interceptor utility that examines the text for a string as and when the messages are received as opposed to a periodic check, say for example,every 10 minutes.

Re: Syslog actions

Robin Wakefield — Fri, 23 Nov 2001 16:11:46 GMT

Hi Rob,

This script may do what you want, albeit simplistically:

#!/bin/ksh

tail -1f /var/adm/syslog/syslog.log | while read line ; do
echo $line | grep -q "search string" && your_script
done

Rgds, Robin.

Re: Syslog actions

G. Vrijhoeven — Fri, 23 Nov 2001 16:19:41 GMT

Hi,

Robins script will work fine. I tried to create a simular script but forgot the -1 option (tail).:-(

Have a nice weekend.

Gideon