Security

check_prelude

Description:

This plugin gets the events logged by Prelude to a MySQL database in the last 5 Minutes and returns a status based on the specified limits.

Current Version

Last Release Date

May 28, 2009

Compatible With


Project Files
Project Notes
About ===== The Check Plugin counts events with severities medium and high during the last 5 minutes. It then produces a WARNING or an CRITICAL based on the limits given The Program uses Perl DBI for database access. Usage ===== check_prelude.pl max count severity high max count severity medium check_prelude.pl --help gives help The database accessdata and the timeoffset are hardcoded at the moment. They could be made parameters if it becomes necessary. The time bet- ween checks must be the same as the timeoffset used by the plugin for now. Too many events with severity high produce a CRITICAL Too many events with severity medium produce a WARNING The conditions are evaluated in this order. All other results produce a OK You are welcome to ask questions, give feedback and improve this plugin. Author ====== Andre Lammel License Information =================== This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
Reviews (1) Add a Review
Update needed
by benar, August 31, 2015

You'll need to operate some changes on this script if you have latest Prelude version: * Replace: use constant SEV_00 => "high"; use constant SEV_01 => "high"; with: use constant SEV_00 => "4"; use constant SEV_01 => "3"; * Replace the query with: my $QUERY = {severity} with $ref->{severity} in conditions after 'RESULT:'. Regards, Ben



Add a Review

You must be logged in to submit a review.

Thank you for your review!

Your review has been submitted and is pending approval.

Recommend

To:


From:


Thank you for your recommendation!

Your recommendation has been sent.

Project Stats
Rating
4 (1)
Favorites
0
Views
96,967