Hamdy Abou El Anein

I had to modify the code on CentOS 7

MONTH=$(date +%b) DAY=$(date +%e) #HOUR_AGO=`TZ=GMT+4 date "+%H:%M:%S"` HOUR_AGO=`date -d '1 hour ago' "+%H:%M:%S"` HAS_FAILED_LAST_HOUR=`sudo grep "$MONTH" /var/log/secure | grep "$DAY" | grep "Failed password" | awk -v h="$HOUR_AGO"'BEGIN{c = 0;}{if($3 > h) c = c + 1;}END{print c;}'` if [ $HAS_FAILED_LAST_HOUR -eq 0 ]; then FINAL_STATUS="OK - No failed logins in last hour|failed=0" RETURN_STATUS=$STATE_OK else RECENT_ATTEMPTS=`sudo grep "$MONTH" /var/log/secure | grep "$DAY" | grep "Failed password" | awk -v h="$HOUR_AGO" '{if($3 > h) for(i=1;i

Reviewed 6 years ago