Telegraf - Track Oldest PCAP

salt/common/telegraf/etc/telegraf.conf

@@ -626,7 +626,8 @@
 [[inputs.exec]]
    commands = [
      "/scripts/redis.sh",
-     "/scripts/stenoloss.sh"
+     "/scripts/stenoloss.sh",
+     "/scripts/oldpcap.sh"
    ]
    data_format = "influx"
 {% endif %}

salt/common/telegraf/scripts/oldpcap.sh

@@ -0,0 +1,8 @@
+#!/bin/bash
+
+# Get the data
+OLDPCAP=$(find /nsm/pcap -type f -printf '%Cs %p\n' | sort | head -n 1 | awk {'print $1'})
+DATE=$(date +%s)
+AGE=$(expr $DATE - $OLDPCAP)
+
+echo "pcapage seconds=$AGE"