At the moment I have a bunch of Fedora servers on which logwatch runs every day with the Logwatch report mailed to my Gmail account.
I am wondering if anyone has any ideas about a script that could be run to parse my Gmail mailbox to check for things such as:
1. [Most importantly] all the servers that were supposed to have sent a Logwatch report have in fact sent the report; e.g. I have setup cron jobs so that all reports are sent before 7:00am each day. Hence the check would verify against a list of expected senders that on the current date, a Logwatch report had been received.
2. [Ideal] Would also be nice that a script could parse each of the Logwatch emails looking for certain key words.
3. Raise an email alert based on certain conditions.
I'm not much of a script hack, so any ideas welcome.