Zabbix日志关键字监控(指定日志文件)
监控日志文件
/var/log/auth.log
dockerstop23716e66a822(暂停dockeragent)
vi/etc/zabbix/zabbix_agentd.conf
UserParameter=LogAuthErrStatus,sudo/bin/bash/etc/zabbix/LogAuthErrStatus.sh
systemctlrestartzabbix-agent
vi/etc/zabbix/authLogAuthErrStatus.sh
#!/bin/ba