【Do家】Linux下监控日志提取特征数据并邮件报警

#!/bin/bash
#receiver mail list
export receiver_mail_address=[e-mail],[e-mail],[e-mail]

#application log file location
export applicaton_log_8081=/data/log/tomcat_logs8081/web_error.log
export applicaton_log_8088=/data/log/tomcat_logs8088/web_error.log
export collect_error_log_8081=/data/log/tomcat_logs8081/collect_error
export collect_error_log_8088=/data/log/tomcat_logs8088/collect_error

export mail_content_file=/root/can_do/mail_log.txt

export line_switch_char="<br>"
export env_identifier="Product"

export keyword4app_exception="com.cnd.base.handle.ExceptionHandle"
export keyword4sql_exception="nested exception is com.mysql.jdbc."
export keyword4jdk_exception="java.*.Exception"

# Note how an string variable is applcation to grep statement
export error_num4app_8081=`grep "$keyword4app_exception" ${applicaton_log_8081} |wc -l`
export error_num4sql_8081=`grep "$keyword4sql_exception" ${applicaton_log_8081} |wc -l`
export error_num4jdkexception_8081=`grep "$keyword4jdk_exception" ${applicaton_log_8081} |wc -l`
export error_num4app_8088=`grep "$keyword4app_exception" ${applicaton_log_8088} |wc -l`
export error_num4sql_8088=`grep "$keyword4sql_exception" ${applicaton_log_8088} |wc -l`
export error_num4jdkexception_8088=`grep "$keyword4jdk_exception" ${applicaton_log_8088} |wc -l`

#this operation is overriding
echo "【${env_identifier}】${line_switch_char}" > ${mail_content_file}
#this operation is appending

# decide whether app log 8081 has error or not
if [ ${error_num4app_8081} -gt 0 ] || [ ${error_num4sql_8081} -gt 0 ] || [ ${error_num4jdkexception_8081} -gt 0 ] 
then  
   echo "The application ${applicaton_log_8081} has $[${error_num4app_8081}+${error_num4sql_8081}+${error_num4jdkexception_8081}]  errors.${line_switch_char} The detail error as the following:${line_switch_char}" >> ${mail_content_file}
   if [ ${error_num4app_8081} -gt 0 ]
     then 
       grep "$keyword4app_exception" ${applicaton_log_8081} -A 5 >> ${mail_content_file}
   fi
   if [ ${error_num4sql_8081} -gt 0 ]
     then
       grep "$keyword4sql_exception" ${applicaton_log_8081} -A 5 >> ${mail_content_file}
   fi
   if [ ${error_num4jdkexception_8081} -gt 0 ]
     then
       grep "$keyword4jdk_exception" ${applicaton_log_8081} -A 5 >> ${mail_content_file}
   fi
   cp ${applicaton_log_8081} ${collect_error_log_8081}/web_error_`date +%Y%m%d_%H%M`.log
   echo "" > ${applicaton_log_8081}
fi

# decide whether app log 8088 has error or not
if [ ${error_num4app_8088} -gt 0 ] || [ ${error_num4sql_8088} -gt 0 ] || [ ${error_num4jdkexception_8088} -gt 0 ] 
then  
   echo "The application ${applicaton_log_8088} has $[${error_num4app_8088}+${error_num4sql_8088}+${error_num4jdkexception_8088}]  errors.${line_switch_char} The detail error as the following:${line_switch_char}" >> ${mail_content_file}
   if [ ${error_num4app_8088} -gt 0 ]
     then
       grep "$keyword4app_exception" ${applicaton_log_8088} -A 5 >> ${mail_content_file}
   fi
   if [ ${error_num4sql_8088} -gt 0 ]
     then
       grep "$keyword4sql_exception" ${applicaton_log_8088} -A 5 >> ${mail_content_file}
   fi
   if [ ${error_num4jdkexception_8088} -gt 0 ]
     then
       grep "$keyword4jdk_exception" ${applicaton_log_8088} -A 5 >> ${mail_content_file}
   fi
   cp ${applicaton_log_8088} ${collect_error_log_8088}/web_error_`date +%Y%m%d_%H%M`.log
   echo "" > ${applicaton_log_8088}
fi
# decide whether send mail to monitor or not
if [ ${error_num4app_8081} -gt 0 ] || [ ${error_num4app_8088} -gt 0 ] || [ ${error_num4sql_8081} -gt 0 ] || [ ${error_num4sql_8088} -gt 0 ] || [ ${error_num4jdkexception_8081} -gt 0 ] || [ ${error_num4jdkexception_8088} -gt 0 ]
then
  mail -s "System Monitor Log" ${receiver_mail_address}  < ${mail_content_file}
fi
#放在crontab执行以上命令脚本
#*/5 *  * * * /root/can_do/monitorApplicationAccessLog.sh

【温馨提示】
如果您觉得满意，可以选择支持下，您的支持是我最大的动力：