1.配置操作历史写入系统日志并且history命令显示ip用户名
#!/bin/bash
cat >> /etc/profile << \EOF
USER_IP=$(who i am 2>/dev/null|awk '{print $NF}'|sed -e 's/[()]//g')
if [ ! $USER_IP ];
then
USER_IP=$(hostname)
fi
HISTTIMEFORMAT="[%F %T] [${USER_IP}] [`whoami`]: "
HISTFILESIZE=100000
HISTSIZE=100000
export HISTTIMEFORMA
export PROMPT_COMMAND='{
msg=$(history 1 | {
read x y; echo $y; });logger "[euid=$(whoami)]":$(who am i) [pwd] "$msg";}'
EOF
2.zabbix监控进程数量脚本需要zabbix模板配合
#!/bin/bash
if [ $# -ne 1 ];
then
echo "使用方法:将要监控的进程特征词放入参数传入该脚本,每个特征词请用空格隔开。"
echo "例子: $0 \"zabbix bash\""
echo "上面的例子是监控zabbix和bash关键字的进程"
exit
else
process_list=$1
echo '{"data":['>/etc/zabbix/process_list.txt
echo $process_list|awk '{for(i=1;i<=NF;i++){printf "{\"{#PROCESSNAME}\":\"";printf $i;printf "\"}";if(i<NF)printf ",";printf "\n"};}'>>/etc/zabbix/process_list.txt
echo ']}'>>/etc/zabbix/process_list.txt
echo "UserParameter=PROCESS_LIST,cat /etc/zabbix/process_list.txt">/etc/zabbix/zabbix_agentd.d/userparameter_process.conf
service zabbix-agent restart
fi
zabbix自动发现模板