Go造运维之文件系统监控

# 通过sysctl -a 获取内核参数, max_user_watches>=8192 ,max_queued_events>=16384fs.inotify.max_queued_events = 16384fs.inotify.max_user_instances = 128fs.inotify.max_user_watches = 8192
#也可以访问 /proc/sys/fs/inotify 路径查看

package main
import (    "fmt"    "log"    "os"    "time"
    "github.com/fsnotify/fsnotify")
func main() {    monitorDir()}
func monitorDir() {    watcher, err := fsnotify.NewWatcher()
    if err != nil {        log.Fatal(err)    }
    defer watcher.Close()
    go func() {        for {            select {            case event := <-watcher.Events:                fmt.Printf("New watch File: %s
", event.Name)                switch event.Op {                case fsnotify.Create:                    log.Printf("Create File:%s
", event.Name)                case fsnotify.Write:                    log.Printf("Write File:%s
", event.Name)                case fsnotify.Remove, fsnotify.Rename:                    log.Printf("Remove or Delete File:%s
", event.Name)                    //重新添加watch                    log.Printf("Add Watch File:%s
", event.Name)                    // 文件被remove后会丢失描述符,需要重新watcher才能重新获取                    err = watcher.Add(event.Name)
                    if err != nil {                        log.Fatal(err)                    }                case fsnotify.Chmod:                    log.Printf("Chmod File:%s
", event.Name)                }            case err := <-watcher.Errors:                log.Println(err)            }        }    }()
    // log.Printf("Add New Watch File:%s")    // 对/etc/shadow /etc/passwd 文件进行watcher    fileArray := [2]string{"/etc/shadow", "/etc/passwd"}
    for _, f := range fileArray {        fmt.Printf("Add Watch FIle:%s
", f)        watcher.Add(f)    }
    // waiting    select {}}