check_clamav_scan

Project Notes

Nagios plugin for monitoring ClamAV virus scans.

Usage:

./check_clamav_scan -l [options]

Examples:

# exit OK if 0 infected files detected, CRITICAL if 1 or more detected
./check_clamav_scan -l /tmp/clamav.log

# exit UNKNOWN if logfile is more than 1 hour old
./check_clamav_scan -l /tmp/clamav.log -e ‘1 hour’

# exit OK if 0 infected files detected, WARNING if upto 10 detected, CRITICAL if 10 or more detected
./check_clamav_scan -l /tmp/clamav.log -c 10

# exit OK if upto 4 infected files detected, WARNING if upto 5 detected, CRITICAL if 10 or more detected
./check_clamav_scan -l /tmp/clamav.log -c 10 -w 5

Options:

-l, –logfile path to clamscan logfile
-e, –expiry expiry threshold for logfile
-w, –warning number of infected files treat as WARNING
-c, –critical number of infected files to treat as CRITICAL
-v, –verbose include the scan summary in the output
-V, –version output version
-h, –help output help information

* -e/–expiry should be a human readable duration, e.g. ‘1 hour’, or ‘7 days’.
* -c/–critical takes priority over -w/–warning.

Dependencies:

* Bash
* cut, grep, rev, sed