analyse pam failure

log-failure.sh

#!/bin/bash
#description:log failure information
#2014-11-?
#2014-11-21 change:just send today log,not the whole log
cat /var/log/auth.log | grep failure  >> /home/log/pam.failure
cat /var/log/auth.log | grep failure  >  /tmp/log/pam.failure
test=`cat /tmp/log/pam.failure`
if [ -n "$test" ];then
	mutt -s "ECS-pam failure" [email protected]	< /tmp/log/pam.failure
fi