{ "name": "Daily System Log Summary", "nodes": [ { "parameters": {}, "type": "n8n-nodes-base.manualTrigger", "typeVersion": 1, "position": [ -288, -336 ], "id": "8453f0f1-6a5a-4780-8827-f99e5b920526", "name": "When clicking ‘Execute workflow’" }, { "parameters": { "command": "=( echo \"===== System Errors and Warnings =====\"; journalctl --system -p 4 -n 300 --no-pager --output=short-iso | grep -E 'error|fail|warn|critical' || echo 'No system issues found'; echo \"\"; echo \"===== Failed SSH Login Attempts =====\"; grep \"Failed password\" /var/log/auth.log | awk '{print $(NF-3)}' | sort | uniq -c | sort -nr | head -10 || echo 'No failed SSH attempts found'; echo \"\"; echo \"===== Successful SSH Logins =====\"; grep \"Accepted\" /var/log/auth.log | tail -10 || echo 'No successful SSH logins found'; echo \"\"; echo \"===== Kernel Warnings =====\"; dmesg | grep -iE \"error|warn|fail\" | tail -10 || echo 'No kernel warnings found'; echo \"\"; echo \"===== Network Connection Attempts =====\"; ss -tuna | grep ESTAB | head -10 || echo 'No active network connections found'; ) 2>&1" }, "type": "n8n-nodes-base.ssh", "typeVersion": 1, "position": [ -16, -336 ], "id": "4c78467b-bed0-4f24-98da-2d7db63335e0", "name": "Execute a command", "credentials": { "sshPassword": { "id": "4eVZVwyLdUXhfKPX", "name": "SSH Media Server" } } }, { "parameters": { "jsCode": "const now = new Date().toLocaleString(\"en-US\", { timeZone: \"America/Detroit\" });\nconst raw = $json.stdout || \"No logs found\";\n\n// --- Parse Sections ---\nconst cleaned = raw.replace(/\\r/g, \"\").replace(/\\n{2,}/g, \"\\n\");\nconst regex = /={3,}\\s*(.*?)\\s*={3,}\\n?([\\s\\S]*?)(?=(?:={3,}|$))/g;\nconst data = {};\nlet match;\nwhile ((match = regex.exec(cleaned)) !== null) {\n const title = match[1].trim();\n const content = match[2].trim().split(\"\\n\").filter(l => l.trim());\n const filtered = content.filter(l => !/no .*found/i.test(l));\n data[title] = filtered.length > 0 ? filtered : [];\n}\n\n// --- Render Section ---\nfunction renderSection(title, lines, color) {\n const hasData = lines && lines.length > 0;\n\n // Network table\n if (title === \"Network Connection Attempts\") {\n if (!hasData)\n return `

${title}

No data found
`;\n const headers = [\"NetID\", \"State\", \"Recv-Q\", \"Send-Q\", \"Local Address:Port\", \"Peer Address:Port\"];\n const rows = lines.map(line => {\n const cols = line.trim().split(/\\s+/).slice(0, 6);\n return `${cols.map((c, i) => `${c}`).join(\"\")}`;\n }).join(\"\");\n return `\n
\n

${title} (${lines.length})

\n
\n \n ${headers.map(h => ``).join(\"\")}\n ${rows}\n
${h}
\n
\n
`;\n }\n\n if (!hasData)\n return `

${title} (0)

No data found
`;\n\n return `\n
\n

${title} (${lines.length})

\n ${lines.map((l, i) => {\n const safeText = l.replace(/⧉`\n : \"\";\n return `
${safeText}${copyBtn}
`;\n }).join(\"\")}\n
`;\n}\n\n// --- Colors ---\nconst colors = {\n \"System Errors and Warnings\": \"#ef4444\",\n \"Failed SSH Login Attempts\": \"#3b82f6\",\n \"Successful SSH Logins\": \"#22c55e\",\n \"Kernel Warnings\": \"#f59e0b\",\n \"Network Connection Attempts\": \"#8b5cf6\",\n};\n\n// --- Count Summary ---\nconst counts = {\n errors: data[\"System Errors and Warnings\"]?.length || 0,\n failedSSH: data[\"Failed SSH Login Attempts\"]?.length || 0,\n successSSH: data[\"Successful SSH Logins\"]?.length || 0,\n kernel: data[\"Kernel Warnings\"]?.length || 0,\n network: data[\"Network Connection Attempts\"]?.length || 0,\n};\n\n// --- HTML ---\nlet html = `\n\n\n\n\nSystem Log Dashboard\n\n\n\n\n\n

System Log Dashboard

\n

Generated: ${now}

\n\n
\n
${counts.errors}
System Errors
\n
${counts.failedSSH}
SSH Failures
\n
${counts.successSSH}
SSH Logins
\n
${counts.kernel}
Kernel Warnings
\n
${counts.network}
Network Connections
\n
\n\n
\n ${renderSection(\"System Errors and Warnings\", data[\"System Errors and Warnings\"], colors[\"System Errors and Warnings\"])}\n ${renderSection(\"Failed SSH Login Attempts\", data[\"Failed SSH Login Attempts\"], colors[\"Failed SSH Login Attempts\"])}\n ${renderSection(\"Successful SSH Logins\", data[\"Successful SSH Logins\"], colors[\"Successful SSH Logins\"])}\n ${renderSection(\"Kernel Warnings\", data[\"Kernel Warnings\"], colors[\"Kernel Warnings\"])}\n ${renderSection(\"Network Connection Attempts\", data[\"Network Connection Attempts\"], colors[\"Network Connection Attempts\"])}\n
\n\n\n\n\n`;\n\nreturn [\n {\n binary: {\n data: await this.helpers.prepareBinaryData(\n Buffer.from(html, \"utf8\"),\n \"system_log_dashboard.html\",\n \"text/html\"\n ),\n },\n },\n];\n" }, "type": "n8n-nodes-base.code", "typeVersion": 2, "position": [ 272, -336 ], "id": "febdf1ca-9d8d-4f66-aeff-2fe685215060", "name": "Code in JavaScript" }, { "parameters": { "method": "POST", "url": "https://push.urls.lol/n8n", "authentication": "genericCredentialType", "genericAuthType": "httpBasicAuth", "sendHeaders": true, "headerParameters": { "parameters": [ { "name": "Title", "value": "Intruder Alert" }, { "name": "Actions", "value": "view, Open Logs Dashboard, http://192.168.1.76:5000/logs.html" } ] }, "sendBody": true, "contentType": "raw", "rawContentType": "text/html", "body": "=🚨 Attention! There was a failed SSH login attempt on your server.", "options": {} }, "id": "cdcbf666-aedd-4d8c-a113-3d23ef1bc27d", "name": "ntfy message", "type": "n8n-nodes-base.httpRequest", "typeVersion": 4.2, "position": [ 544, -192 ], "credentials": { "httpBasicAuth": { "id": "taknAGQzMCToazDX", "name": "ntfy creds" } } }, { "parameters": { "operation": "put", "path": "/logs.html" }, "type": "n8n-nodes-dav.webDav", "typeVersion": 1, "position": [ 544, -336 ], "id": "91db7d6c-8aea-47c5-9e62-94e4f035b435", "name": "Upload file", "credentials": { "davApi": { "id": "pEcdUS1P16yASJ8L", "name": "DAV account" } } }, { "parameters": { "conditions": { "options": { "caseSensitive": true, "leftValue": "", "typeValidation": "strict", "version": 2 }, "conditions": [ { "id": "288e6872-94a6-420e-b0e3-5e1e4ab1384e", "leftValue": "={{ $json[\"stdout\"].match(/===== Failed SSH Login Attempts =====\\n\\s*\\d+/) ? \"true\" : \"\" }}", "rightValue": "Failed password", "operator": { "type": "string", "operation": "notEmpty", "singleValue": true } } ], "combinator": "and" }, "options": {} }, "type": "n8n-nodes-base.if", "typeVersion": 2.2, "position": [ 272, -192 ], "id": "efdc1be0-3585-4829-bee5-3f5d5c047a8a", "name": "IF Failed Login Attempts" } ], "pinData": {}, "connections": { "When clicking ‘Execute workflow’": { "main": [ [ { "node": "Execute a command", "type": "main", "index": 0 } ] ] }, "Execute a command": { "main": [ [ { "node": "Code in JavaScript", "type": "main", "index": 0 }, { "node": "IF Failed Login Attempts", "type": "main", "index": 0 } ] ] }, "Code in JavaScript": { "main": [ [ { "node": "Upload file", "type": "main", "index": 0 } ] ] }, "IF Failed Login Attempts": { "main": [ [ { "node": "ntfy message", "type": "main", "index": 0 } ] ] } }, "active": false, "settings": { "executionOrder": "v1" }, "versionId": "42cb8b27-ebe7-4c02-833d-c79c0c84abc4", "meta": { "instanceId": "5bdcc08ad68cf4e9fe8c1a97ecded79bd057ff173d9a5b775744376d10b0b32d" }, "id": "TDEew4URSgVd0bXK", "tags": [] }