Logwatch > Gmail > parse script > alert

[techmum]

At the moment I have a bunch of Fedora servers on which logwatch runs every day with the Logwatch report mailed to my Gmail account.

I am wondering if anyone has any ideas about a script that could be run to parse my Gmail mailbox to check for things such as:

1. [Most importantly] all the servers that were supposed to have sent a Logwatch report have in fact sent the report; e.g. I have setup cron jobs so that all reports are sent before 7:00am each day. Hence the check would verify against a list of expected senders that on the current date, a Logwatch report had been received.

2. [Ideal] Would also be nice that a script could parse each of the Logwatch emails looking for certain key words.

3. Raise an email alert based on certain conditions.

I'm not much of a script hack, so any ideas welcome.

[Lascolb]

I believe that a good program may do what you need without even using Logwatch of which I find to be to open fore adjustments by each server.

I cant think of one off hand,
But I do use some server tools found in the repository so you could check them out.

[techmum]

Originally Posted by Lascolb

But I do use some server tools

If you can advise some names would be wonderful.

Note that any tools will need to be multi step, for example:

1. Step 1 - analyze a machine

2. Step 2 - email a report

3. Step 3 - confirm that all reports that were meant to be received have in fact been received

4. Step 4 - raise alert if any reports have not been received by a due time