【shell脚本】Graylog服务状态异常监测与告警

#!/bin/bash
LOCK_FILE=/var/log/graylog-server_record.log
# 钉钉机器人 Webhook URL
WEBHOOK_URL="https://oapi.dingtalk.com/robot/send?access_token=b672dc14ee9a965d75a1fe9XXXXXXXXXX09586594572abf8f41cf"

# 记录异常状态的文件路径
STATUS_FILE="/tmp/graylog-server_status.txt"
NORMAL_STATUS_FILE="/opt/graylog-server_normal_status.txt"
#echo "Active: active (running)" > /opt/graylog-server_normal_status.txt
# 获取当前时间
current_time=$(date +"%Y-%m-%d %H:%M:%S")

# 获取当前 graylog-server 状态
current_status=$(/usr/bin/systemctl status graylog-server | grep Active | awk -F "since" '{print $1}' | sed 's/^ *//;s/ *$//')
# 读取上次记录的状态
previous_status=$(cat "$STATUS_FILE")
# 正常graylog-server 状态
#Active: active (running)
normal_status=$(cat "$NORMAL_STATUS_FILE")

# 判断当前状态是否与上次记录的状态不一致

if [[ "$current_status" == "$normal_status" && "$previous_status" != "$normal_status" ]]; then
    # 发送恢复正常告警到钉钉机器人
    echo "--------------------------------"  >> ${LOCK_FILE} 2>&1
    echo `date +"%Y-%m-%d %H:%M:%S"`  >> ${LOCK_FILE} 2>&1
    echo "服务状态已恢复运行，发送dingding告警"  >> ${LOCK_FILE} 2>&1
    recovery_message="【告警通知】：graylog-server 状态已恢复正常。\n\n【时间】：$current_time \n\n【graylog-server状态】：<font color=#67C23A>$current_status</font>"
    echo $recovery_message  >> ${LOCK_FILE} 2>&1
    curl -s -H "Content-Type: application/json" -d "{\"msgtype\":\"markdown\",\"markdown\":{\"title\":\"告警通知\",\"text\":\"$recovery_message\"}}" "$WEBHOOK_URL"
    
    # 将当前状态记录到文件
    echo "$current_status" > "$STATUS_FILE"  
    echo "--------------------------------" >> ${LOCK_FILE} 2>&1
elif [[ "$current_status" != "$previous_status" ]]; then
    # 发送异常告警到钉钉机器人
    echo "--------------------------------"  >> ${LOCK_FILE} 2>&1
    echo `date +"%Y-%m-%d %H:%M:%S"`  >> ${LOCK_FILE} 2>&1
    echo "服务状态异常，发送dingding告警"  >> ${LOCK_FILE} 2>&1
    alert_message="【告警通知】：graylog-server 状态异常告警！\n\n【时间】：$current_time \n\n 【graylog-server状态】：<font color=#FF0000>$current_status</font>"
    echo $alert_message >> ${LOCK_FILE} 2>&1
    curl -s -H "Content-Type: application/json" -d "{\"msgtype\":\"markdown\",\"markdown\":{\"title\":\"告警通知\",\"text\":\"$alert_message\"}}" "$WEBHOOK_URL"
    # 将当前状态记录到文件
    echo "$current_status" > "$STATUS_FILE"
    echo "--------------------------------" >> ${LOCK_FILE} 2>&1
fi

touch /tmp/graylog-server_status.txt
touch /opt/graylog-server_normal_status.txt
echo "Active: active (running)" > /opt/graylog-server_normal_status.txt

crontab -e
* * * * * /opt/check_graylog_status.sh 

systemctl stop graylog-server

systemctl stop graylog-server