LogAlert.mikrotik.script

LogAlert.mikrotik.script

:global lastTimeLogingFailure;

:local varEmail "[email protected]";
:local varEmailSubj "failure login";
:local Hostname [/system identity get name];
:local filter "login failure";

:local varDate [/system clock get date];
:local varMonth [:pick $varDate 0 3];
:local varDay [:pick $varDate 4 6];
:local varYear [:pick $varDate 7 11];
:local varDateTime ([$varYear]."-".[$varMonth]."-".[$varDay]."-".[/system clock get time]);

:local currentBuf [ :toarray [ /log find message~[$filter] ] ] ;
:local currentLineCount [ :len $currentBuf ] ;
:local currentTime [ :totime [/log get [ :pick $currentBuf ($currentLineCount -1) ] time ] ];

:local message "";

:local subject ([/system identity get name] . " - " . [$varEmailSubj] . " - " . [$varDateTime]);
:local body [/log get [ :pick $currentBuf ($currentLineCount-1) ] message];

:if ( $lastTimeLogingFailure = "" ) do={
	:set lastTimeLogingFailure $currentTime ;
	/tool e-mail send to=[$varEmail] subject=[$subject] body=[$body];
} else={
	:if ( $lastTimeLogingFailure != $currentTime ) do={
		:set lastTimeLogingFailure $currentTime;
		/tool e-mail send to=[$varEmail] subject=[$subject] body=[$body];
	}
}