check_clamav_signatures: add warning / critical thresholds
authorAdam D. Barratt <adam@adam-barratt.org.uk>
Wed, 2 Oct 2019 07:42:04 +0000 (08:42 +0100)
committerAdam D. Barratt <adam@adam-barratt.org.uk>
Mon, 7 Oct 2019 18:04:38 +0000 (19:04 +0100)
Signed-off-by: Adam D. Barratt <adam@adam-barratt.org.uk>
dsa-nagios-checks/checks/check_clamav_signatures

index 94b1f37..26525d8 100755 (executable)
@@ -15,6 +15,8 @@ CRITICAL=2
 UNKNOWN=3
 CLAM_LIB_DIR=/var/lib/clamav
 NUMERICAL_REGEX='^[0-9]+$'
+WARN_THRESHOLD=1
+CRIT_THRESHOLD=2
 
 #
 # Output version.
@@ -148,11 +150,16 @@ fi
 DAILY_VERSION_DELTA=$((CURRENT_DAILY_VERSION-INSTALLED_DAILY_VERSION))
 MAIN_VERSION_DELTA=$((CURRENT_MAIN_VERSION-INSTALLED_MAIN_VERSION))
 
-if [ $DAILY_VERSION_DELTA -gt 0 -o $MAIN_VERSION_DELTA -gt 0 ]; then
+if [ $DAILY_VERSION_DELTA -gt $CRIT_THRESHOLD -o $MAIN_VERSION_DELTA -gt $CRIT_THRESHOLD ]; then
   echo "CRITICAL: Signatures expired;" \
     "daily version: ${INSTALLED_DAILY_VERSION} (${DAILY_VERSION_DELTA} behind)," \
     "main version: ${INSTALLED_MAIN_VERSION} (${MAIN_VERSION_DELTA} behind)"
   exit $CRITICAL
+elif [ $DAILY_VERSION_DELTA -gt $WARN_THRESHOLD -o $MAIN_VERSION_DELTA -gt $WARN_THRESHOLD ]; then
+  echo "WARNING: Signatures expired;" \
+    "daily version: ${INSTALLED_DAILY_VERSION} (${DAILY_VERSION_DELTA} behind)," \
+    "main version: ${INSTALLED_MAIN_VERSION} (${MAIN_VERSION_DELTA} behind)"
+  exit $WARNING
 fi
 
 echo "OK: Signatures up to date;"\