/usr/local/zabbix/bin/mysql_session.sh
#!/bin/bash
#this script is used to sort mysql malicious action
#mysql session
metric=$1
case $metric in
mini)
output=$(mysql -uroot -pxxxxxx -e "select * from huiyewang.snto_session;"|awk -F"|" '{print $1}'|awk '{print $9}'|awk '{++S[$NF]}END{for(a in S) print a,S[a]}'|awk '/mini/{print $2}')
if [ "$output" == "" ];then
echo 0
else
echo $output
fi
;;
login)
output=$(mysql -uroot -pxxxxxx -e "select * from huiyewang.snto_session;"|awk -F"|" '{print $1}'|awk '{print $9}'|awk '{++S[$NF]}END{for(a in S) print a,S[a]}'|awk '/login/{print $2}')
if [ "$output" == "" ];then
echo 0
else
echo $output
fi
;;
register)
output=$(mysql -uroot -pxxxxxx -e "select * from huiyewang.snto_session;"|awk -F"|" '{print $1}'|awk '{print $9}'|awk '{++S[$NF]}END{for(a in S) print a,S[a]}'|awk '/register/{print $2}')
if [ "$output" == "" ];then
echo 0
else
echo $output
fi
;;
ajax_showcart)
output=$(mysql -uroot -pxxxxxx -e "select * from huiyewang.snto_session;"|awk -F"|" '{print $1}'|awk '{print $9}'|awk '{++S[$NF]}END{for(a in S) print a,S[a]}'|awk '/ajax_showcart/{print $2}')
if [ "$output" == "" ];then
echo 0
else
echo $output
fi
;;
init)
output=$(mysql -uroot -pxxxxxx -e "select * from huiyewang.snto_session;"|awk -F"|" '{print $1}'|awk '{print $9}'|awk '{++S[
$NF]}END{for(a in S) print a,S[a]}'|awk '/init/{print $2}')
if [ "$output" == "" ];then
echo 0
else
echo $output
fi
;;
public_find_pwd)
output=$(mysql -uroot -pxxxxxx -e "select * from huiyewang.snto_session;"|awk -F"|" '{print $1}'|awk '{print $9}'|awk '{++S[$NF]}END{for(a in S) print a,S[a]}'|awk '/public_find_pwd/{print $2}')
if [ "$output" == "" ];then
echo 0
else
echo $output
fi
;;
public_session_life)
output=$(mysql -uroot -pxxxxxx -e "select * from huiyewang.snto_session;"|awk -F"|" '{print $1}'|awk '{print $9}'|awk '{++S[$NF]}END{for(a in S) print a,S[a]}'|awk '/public_session_life/{print $2}')
if [ "$output" == "" ];then
echo 0
else
echo $output
fi
;;
*)
echo -e "\e[033mUsage: sh $0 [mini|login|register|ajax_showcart|init|public_find_pwd|public_session_life]\e[0m"
esac
zabbix agent配置部分
UserParameter=mysql.session[*],/usr/local/zabbix/bin/mysql_session.sh $1