22

✏️ Editing: logs

#!/bin/bash

#BUG SHOWS LOG FILE PATH IN THE DOMAIN LIST

RED_COLOR=$'\033[31;1m'
GREEN_COLOR=$'\033[32;1m'
YELLOW_COLOR=$'\033[33;1m'
PURPLE_COLOR=$'\033[35;1m'
CYAN_COLOR=$'\033[36;1m'
DEFAULT_COLOR=$'\033[0m'

export LC_ALL=C

while (true); do

read -e -r -p $'\e[36mTimeframe(10 seconds, 5 minutes, 3 hours 1 day, ect. or none to review all entries in the logs):\e[0m ' timeframe;

if [ "$timeframe" != 'none' ]; then

time_num=$( echo $timeframe | tr -dc '0-9' )
 time_unit=$( echo $timeframe | tr -dc 'a-zA-Z' )

case $time_unit in
   
#   second | seconds)
 #   timevar="$time_num"
  #  break 2
   # ;;

minute | minutes)
    timevar=$time_num
    break 2
    ;;

hour | hours )
    timevar=$(( time_num * 60 ))
    break 2
    ;;

day | days)
    timevar=$(( time_num * 1440 ))
    break 2
    ;;

*)
    echo "incorrect timeframe. Try Again"
    ;;

esac

else

break

done

declare -a arr=()

for log in $(find /home/*/access-logs/* | sed -e "s/-ssl_log//" | uniq); do

if [ "$timeframe" = 'none' ]; then
 
  log_entries=$(cat "$log"* | wc -l)
  
 else
   
  if [ -s "$log" ]; then
   first_log_entry=$(head -n1 "$log" | cut -d [ -f 2 | cut -d ':' -f -3)
   initial_time=$(date -d -"$timevar"minutes +'%d/%b/%Y:%H:%M')
  
   if [[ "$first_log_entry" > "$initial_time" ]]; then

log_entries_non_ssl=$(cat "$log" | wc -l)
    line_num_non_ssl=1

else

minutes=$timevar
    while [ "$minutes" -gt 0 ]; do

line_num_non_ssl=$(grep -nm 1 "$(date -d -"$minutes"minutes +'%d/%b/%Y:%H:%M')" "$log" | cut -d ':' -f1)

if [ -n "$line_num_non_ssl" ]; then
    
      break

((minutes--));

if [ "$minutes" -eq 0 ]; then

(( line_num_non_ssl= $(cat "$log" | wc -l) + 1 ));
      log_entries_non_ssl=0
      break

done
     
   if [ $minutes -gt 0 ]; then
   
    log_entries_non_ssl=$(tail -n +"$line_num_non_ssl" "$log" | grep . | grep -v '==>' | wc -l)
   
   else

log_entries_non_ssl=0

fi
 fi
  else

line_num_non_ssl=0
   log_entries_non_ssl=0

if [ -s "$log"-ssl_log ]; then

first_log_entry=$(head -n1 "$log"-ssl_log | cut -d [ -f 2 | cut -d ':' -f -3)
   initial_time=$(date -d -"$timevar"minutes +'%d/%b/%Y:%H:%M')

if [[ "$first_log_entry" > "$initial_time" ]]; then
    
    log_entries_non_ssl=$(cat "$log"-ssl_log | wc -l)
    line_num_non_ssl=1
   
   else
    
    minutes=$timevar
    while [ "$minutes" -gt 0 ]; do

line_num_ssl=$(grep -nm 1 "$(date -d -"$minutes"minutes +'%d/%b/%Y:%H:%M')" "$log"-ssl_log | cut -d ':' -f1)

if [ ! -z "$line_num_ssl" ]; then

break

((minutes--));

if [ "$minutes" -eq 0 ]; then
    
      (( line_num_ssl= $(cat "$log"-ssl_log | wc -l) + 1 ));
      log_entries_ssl=0
      break

fi
    done

if [ $minutes -gt 0 ]; then

log_entries_ssl=$(tail -n +"$line_num_ssl" "$log"-ssl_log | grep . | grep -v '==>' | wc -l)

else

log_entries_ssl=0

fi
  fi
  else

line_num_ssl=0
   log_entries_ssl=0

log_entries=$((log_entries_non_ssl + log_entries_ssl))

if [ "$log_entries" -gt 0 ]; then 
  
  domain=$(echo "$log" | rev | cut -d '/' -f 1 | rev )
  user=$(echo "$log" | cut -d '/' -f 3 )
  
  if [ "$(whoami)" = 'root' ]; then

if [ "$(uapi --user="$user" DomainInfo list_domains | grep 'main_domain' | awk '{print$2}')" != "$domain" ]; then

if [ ! -z $(uapi --user="$user" DomainInfo single_domain_data domain="$domain" | grep serveralias | awk '{print $2"\n"$3"\n",$4"\n",$5}' | grep -v "www\|mail") ]; then

domain=$(uapi --user="$user" DomainInfo single_domain_data domain="$domain" | grep serveralias | awk '{print $2"\n"$3"\n",$4"\n",$5}' | grep -v "$domain\|www\|mail")

fi
   fi

else

if [ "$(uapi DomainInfo list_domains | grep 'main_domain' | awk '{print$2}')" != "$domain" ]; then

if [ ! -z $(uapi DomainInfo single_domain_data domain="$domain" | grep serveralias | awk '{print $2"\n"$3"\n",$4"\n",$5}' | grep -v "www\|mail") ]; then
  
     domain=$(uapi DomainInfo single_domain_data domain="$domain" | grep serveralias | awk '{print $2"\n"$3"\n",$4"\n",$5}' | grep -v "$domain\|www\|mail")
    
    fi
   fi
  fi

if [ "$timeframe" = 'none' ]; then 
 
   arr+=( "$(echo "$log_entries $domain $log")" )

else

arr+=( "$(echo "$log_entries $domain $log $line_num_non_ssl $line_num_ssl")" )
  
  fi  
 fi
done

printf '%s\n'  "${arr[@]}" | awk '{print$1,$2}' | sort -rh

read -e -r -p $'\e[36mWold you like to review the top IPs in the logs?(y/n)\e[0m ' ip_entries;

if [ "$ip_entries" = y ]; then

printf '%s\n' "${arr[@]}" | sort -rh | while read line; do

domain=$(echo "$line" | awk '{print$2}')
  log=$(echo "$line" | awk '{print$3}')
  line_num_non_ssl=$(echo "$line" | awk '{print$4}')
  line_num_ssl=$(echo "$line" | awk '{print$5}')
 
  printf "%sDomain: $domain%s\\n" "$RED_COLOR" "$DEFAULT_COLOR"
 
  if [ "$timeframe" = 'none' ]; then

else
   
   if [ -f "$log" ] && [ -f "$log"-ssl_log ]; then

elif [ ! -f "$log" ] && [ -f "$log"-ssl_log ]; then

fi
  fi
 done
fi

MR SKB