快捷導(dǎo)航

Python腳本實(shí)現(xiàn)Zabbix多行日志監(jiān)控過(guò)程解析

更新時(shí)間：2020年08月26日 09:09:17 作者：Zabbix_Z大叔

這篇文章主要介紹了Python腳本實(shí)現(xiàn)Zabbix多行日志監(jiān)控過(guò)程解析,文中通過(guò)示例代碼介紹的非常詳細(xì)，對(duì)大家的學(xué)習(xí)或者工作具有一定的參考學(xué)習(xí)價(jià)值,需要的朋友可以參考下

通過(guò)使用zabbix 日志監(jiān)控我發(fā)現(xiàn)一個(gè)問(wèn)題例如oracle的日志有報(bào)錯(cuò)的情況，通常不會(huì)去手動(dòng)清理這樣的話當(dāng)?shù)诙斡腥罩緦?xiě)進(jìn)來(lái)的時(shí)候 zabbix的機(jī)制是回去檢查全部日志，這樣的話之前已經(jīng)告警過(guò)的錯(cuò)誤日志,又會(huì)被檢查到,這樣就會(huì)出現(xiàn)重復(fù)告警，而且zabbix的日志監(jiān)控只能讀到匹配當(dāng)前行關(guān)鍵字的數(shù)據(jù)，感覺(jué)不太靈活, 比如我想要匹配到的關(guān)鍵字之后再當(dāng)前關(guān)鍵字的下N行再去匹配另一個(gè)關(guān)鍵字這個(gè)時(shí)候就比較麻煩,在這里給大家推薦一個(gè)有效,便捷解決的方式。

通過(guò)Python腳本實(shí)現(xiàn)日志監(jiān)控要求 1 記錄腳本檢查日志位置,避免下次觸發(fā)腳本的時(shí)候出現(xiàn)重復(fù)告警 2 關(guān)鍵字匹配支持正則 3 支持多個(gè)關(guān)鍵字查詢，例如第一個(gè)關(guān)鍵字匹配到當(dāng)之后在這個(gè)關(guān)鍵字的下N行再去匹配第二個(gè)關(guān)鍵字具體傳參格式
python3 npar.py /u03/z.txt '(ORA-|REEOR)，(04030|02011)' 2

第一個(gè)參數(shù)是日志路徑第二個(gè)參數(shù)是關(guān)鍵字第三個(gè)參數(shù)為匹配到第一個(gè)表達(dá)式這種的關(guān)鍵字后再去地 N(2)行去匹配第二個(gè)關(guān)鍵詞（04030|02011）具體腳本實(shí)現(xiàn)如下

import os
import sys
logtxt = "logtxt.txt"
def read_txt(files, start_line):
	data = []
data.append("")
with open(str(files) + "", "r",
		encoding = 'UTF-8') as f:
	for line in f.readlines():
	line = line.strip('\n')# 去掉列表中每一個(gè)元素的換行符
data.append(line)
# 記錄本次的行數(shù)
wirte_log(len(data) - 1)
if len(data) > start_line:
	return data[start_line - 1: ]
else :
	print("開(kāi)始行數(shù)大于文本文件總行數(shù)！")
def wirte_log(lines):
	global logtxt
with open(logtxt, "w") as file: #”w "代表著每次運(yùn)行都覆蓋內(nèi)容
file.write(str(lines))
def read_log():
	global logtxt
if not os.path.exists(logtxt):
	with open(logtxt, "w") as file: #”w "代表著每次運(yùn)行都覆蓋內(nèi)容
file.write(str(1))
with open(logtxt + "", "r", encoding =
		'UTF-8') as f:
	s_lines = f.readlines()
print("從第" + str(s_lines[0]) + "行開(kāi)始")
return s_lines[0]
def deal_read_log(files, keyword,
		interval_line):
	keywords = keyword.replace("(", "").replace(
		")", "").replace("'", "").replace('"',
		'"').split(',')
start_keywords = keywords[0].split("|")
end_keywords = keywords[1].split("|")
start_line = read_log()
lines_data = read_txt(files, int(
	start_line))
for_line = 1
while (for_line < len(lines_data)):
	#print(for_line)
# print(lines_data[for_line])
#
if end_keywords in lines_data[for_line]:
	#print(lines_data[for_line])
# print("-------------------")
# for_line = for_line + 1
#
else :
	isexist = 0
for sk in start_keywords:
	if sk in lines_data[for_line]:
	isexist = 1
break;
if isexist == 1:
	#if start_keywords[0] in lines_data[
		for_line] or start_keywords[1] in
	lines_data[for_line]:
	#當(dāng)前行有end_keywords
isexist2 = 0
for sk in end_keywords:
	if sk in lines_data[for_line]:
	isexist2 = 1
break;
if isexist2 == 1:
	#print("行數(shù)=" + str(start_line - 1 +
		for_line) + "-" + str(start_line - 1 +
		for_line))
print(lines_data[for_line])
else :
	#當(dāng)前行沒(méi)有end_keywords。 往下interval_line行去尋找
# 標(biāo)記當(dāng)前行數(shù)
flag_line = for_line
count = 1
for_line = for_line + 1
while (for_line < len(lines_data)):
	isexist3 = 0
for sk in end_keywords:
	if sk in lines_data[for_line]:
	isexist3 = 1
break;
if isexist3 == 1:
	#print("行數(shù)=" + str(start_line - 1 +
		flag_line) + "-" + str(start_line -
		1 + for_line))
for prin in range(flag_line, for_line +
		1):
	print(lines_data[prin])
break;
for_line = for_line + 1
if count == int(interval_line):
	break;
count = count + 1
for_line = for_line - 1
for_line = for_line + 1
if name == 'main':
	files = sys.argv[1]
if '.log' in files:
	logtxt = files.replace(".log",
		"_log.txt")
else :
	logtxt = files.replace(".txt",
		"_log.txt")
# files = "ora.txt"
keywords = sys.argv[2]
# keywords = "'((04030|04000)，ORA-)'"
#上下關(guān)聯(lián)行數(shù)
interval_line = int(sys.argv[3])
# interval_line = 10
deal_read_log(files, keywords,
	interval_line)

接下來(lái)就是添加監(jiān)控了

在agent的conf 文件里面添加UserParameter