Trace on Crontab job.

[harry_7]

Dear All,

Do some one have any script to monitor the cron job. Where you can see any modification in the crontab file. Means some one has added or removed the entries.

I am trying to do this way

#!/usr/bin/ksh
. ~/.profile
###############################################
#
#
###############################################
TO=harpreet_singh@ctl.creative.com
LOGDIR=/usr/local/bin/perf-monitor
SUBJ="New Entry Found in the Crontab"
LOGFILE="${LOGDIR}/crontab_`hostname`.`date +'%d%m%y'`"

#crontab -l > master_cron_list
crontab -l > $LOGFILE
diff master_cron_list $LOGFILE > diff.txt

(
cat << !
cat $LOGFILE/diff.txt
echo "Some changes has been made in Crontab"
date
To : ${TO}
Subject : ${SUBJ}
Cc : ${CC}
Bcc : ${BCC}
!
) | /usr/lib/sendmail -f ora_sysadmin@ctl.creative.com ${TO} ${CC} $BCC
echo "No Problem"
------------

Here I can send the mail, but recipient’s name, subject is also missing.
How I can show the diff.txt file in email
How I can attach diff.txt file in email.

Regards, Harry

[Steven E. Protter]

Try putting a set -x right after the shell in the actual script cron calls.

SEP

[RAC_1]

Put an entry though cron through root user. This script will check crontab file size at defined interval and will execute diff on it. (May be also file size change) and if finds something it will email it to you.

Something like follows.

#!/usr/bin/ksh

file_to_watch=/var/spool/cron/crontab/user_name
cp ${file_to_watch} /some_location/.
new_file=/some_location/file_name
size=$(ll /var/spool/cron/crontab/user_name|awk '{print $5}')
new_size=$(ll /var/spool/cron/crontab/user_name|awk '{print $5}')
if [[ ${new_size} -gt ${size} ]]
then
changes=$(diff $file_to_watch $new_file)
echo $changes | mailx -s "Change in Cron" xxx@dd.com
fi

[Victor Fridyev · Accepted solution]

Hi,

Try something like this:
diff master logfile > diffile
if [ -s diffile ]; then
mailx -s "cron has been changed" harry@yourdomain < diffile
fi


HTH

[harry_7]

Dear all,

Thanks for the reply. I got the answer.

Regards

Harry.