check_clamav_scan

Project Notes

Nagios plugin for monitoring ClamAV virus scans.

Usage:

./check_clamav_scan -l <path> [options]

Examples:

# exit OK if 0 infected files detected, CRITICAL if 1 or more detected
./check_clamav_scan -l /tmp/clamav.log

# exit UNKNOWN if logfile is more than 1 hour old
./check_clamav_scan -l /tmp/clamav.log -e '1 hour'

# exit OK if 0 infected files detected, WARNING if upto 10 detected, CRITICAL if 10 or more detected
./check_clamav_scan -l /tmp/clamav.log -c 10

# exit OK if upto 4 infected files detected, WARNING if upto 5 detected, CRITICAL if 10 or more detected
./check_clamav_scan -l /tmp/clamav.log -c 10 -w 5

Options:

-l, --logfile <path> path to clamscan logfile
-e, --expiry <duration> expiry threshold for logfile
-w, --warning <number> number of infected files treat as WARNING
-c, --critical <number> number of infected files to treat as CRITICAL
-v, --verbose include the scan summary in the output
-V, --version output version
-h, --help output help information

* -e/--expiry should be a human readable duration, e.g. '1 hour', or '7 days'.
* -c/--critical takes priority over -w/--warning.

Dependencies:

* Bash
* cut, grep, rev, sed