I'm a beginner of RouterOS
I would like to set up a lan monitoring tool that send me the log daily.
Email is already configured.

Using netwatch i want log only if a host is down.
But how can i write a specific log only dedicated to netwatch and send it only daily by email ?
How can i "reset" the file after successful sending it ?

In log i want write a string like "PC1 is down".

I don't understand how to use "action" and "rule" of logging system to obtain a file only dedicated to netwatch message.

I don't understand how to log only netwatch log because script can write only on 4 topics.. "debug, error, info and warning".. so, how can i create a rule to filter only netwatch message ?

Thanks very clear and it works

I'm a beginner of RouterOs and after many research i found that from script i have to save any messages about topics we select (es. warning or info or..) and after (download, email..) filter it to select the messages that interest us.
In my mind, working on linux system, i would like to create a log file dedicated to each action that i want log, but in routerOs isn't possible.
Now i'm in the hell of those who study a new system xD

Some other question:
I haven't found how to check a filesize of a file.. or how to check if the mail was really sent without error.
In case of lack of connection, error on authentication etc.. a simple script (example i've found on internet, also in this forum) will not send the email and after delete in any case the log file. That's terribly wrong in my mind.

i can't help with checking send email (i didn't have to setup this). in my cases i usually setup logging to remote servers and for critical systems have telegram alerts

i can't help with checking send email (i didn't have to setup this). in my cases i usually setup logging to remote servers and for critical systems have telegram alerts

This setup work if the device is supposed to be constantly connected. If the connection stops, the message to syslog server are lost.
On server i use both, local log and remote syslog server. If the connection fail, after i can recover the local log on request or wait until the automatic send of the log by mail.
I think you use the same approach.

• Netwatch settings:
  Host: 8.8.8.8
  Interval: 00:00:02
  Timeout: 1000
• Script up:
  Code: Select all

  :local workdir "log/google/"
  :local name "GoogleDNS"
  
  :local scl [/system clock get];
  :local months {jan="01";feb="02";mar="03";apr="04";may="05";jun="06";jul="07";aug="08";sep="09";oct="10";nov="11";dec="12"};
  :set ($scl->"y") [:pick ($scl->"date") 7 11];
  :set ($scl->"mn") [:pick ($scl->"date") 0 3];
  :set ($scl->"m") ($months->($scl->"mn"));
  :set ($scl->"d") [:pick ($scl->"date") 4 6];
  :set ($scl->"H") [:pick ($scl->"time") 0 2];
  :set ($scl->"M") [:pick ($scl->"time") 3 5];
  :set ($scl->"S") [:pick ($scl->"time") 6 8];
  :set ($scl->"timestamp") (($scl->"y").".".($scl->"m").".".($scl->"d")."_".($scl->"H").".".($scl->"M").".".($scl->"S"));
  
  :local tempfile ($workdir."_".$name.".txt");
  :local output (" - UP ".($scl->"timestamp")."\r\n");
  
  :local newcontent ([/file get "$tempfile" contents].$output); :delay 1;
  /file set [/file find name="$tempfile"] contents=$newcontent;
  :log debug message=($name.": UP");
  

• Down:
  Code: Select all

  :local workdir "log/google/"
  :local name "GoogleDNS"
  
  :local scl [/system clock get];
  :local months {jan="01";feb="02";mar="03";apr="04";may="05";jun="06";jul="07";aug="08";sep="09";oct="10";nov="11";dec="12"};
  :set ($scl->"y") [:pick ($scl->"date") 7 11];
  :set ($scl->"mn") [:pick ($scl->"date") 0 3];
  :set ($scl->"m") ($months->($scl->"mn"));
  :set ($scl->"d") [:pick ($scl->"date") 4 6];
  :set ($scl->"H") [:pick ($scl->"time") 0 2];
  :set ($scl->"M") [:pick ($scl->"time") 3 5];
  :set ($scl->"S") [:pick ($scl->"time") 6 8];
  :set ($scl->"timestamp") (($scl->"y").".".($scl->"m").".".($scl->"d")."_".($scl->"H").".".($scl->"M").".".($scl->"S"));
  
  :local tempfile ($workdir."_".$name.".txt");
  :local logfile ($workdir.$name."_".($scl->"timestamp").".txt");
  :local output ($name." - DOWN ".($scl->"timestamp"));
  
  :if ([:len [/file find where size > "3072" name~$tempfile;]] > 0) do={
      :local tempcontent ([file get "$tempfile" contents]);
      /file print file="$logfile"; :delay 1;/file set [/file find name="$logfile"] contents=$tempcontent;
      /file set [/file find name="$tempfile"] contents="";
      }
  
  :if ([:len [/file find where name~$tempfile;]] > 0) do={} else={
      /file print file="$tempfile"; :delay 1; /file set "$tempfile" contents="";
      }
  
  :local newcontent ([/file get "$tempfile" contents].$output);
  /file set [/file find name="$tempfile"] contents=$newcontent;
  
  :log debug message=($name.": DOWN")
  

I'm a beginner of RouterOS
I would like to set up a lan monitoring tool that send me the log daily.
Email is already configured.

Using netwatch i want log only if a host is down.
But how can i write a specific log only dedicated to netwatch and send it only daily by email ?
How can i "reset" the file after successful sending it ?

/system scheduler
add interval=1d name="clear logs" policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=jan/21/2017 start-time=20:00:15
/system script
add name="clear logs" owner=ico policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\
    system logging action set disk disk-lines-per-file=1; :delay 5;\r\
    \n/system logging action set disk disk-lines-per-file=10000"