Monitoring and collecting data from Cron

How it works

The cron plugin will parse your cron logs and insert them as events into CoScale. The event is called “Cron plugin event”. For every cron job that runs on your server we log the following data:

  • start time
  • stop time
  • command executed
  • exit code
  • execution time
  • user

There is also a wrapper script available that gives more fine control over the event name and attributes, but requires more manual work to set up.


We currently do not support Redhat < 6.0, you can still use the cron-wrapper for these systems.


The plugin needs to be installed together with a CoScale agent, instructions on how to install the CoScale agent can be found here. If you want to monitor Cron inside Docker containers using CoScale, check out the instructions here.


Enabling cron logs

This is done by uncommenting the cron.* line in /etc/rsyslog.d/50-default.conf

cron.*                         /var/log/cron.log

Restart the rsyslog service.

Increasing the log level

By default only the start of a cron job is logged. The log level has to be increased for the plugin to work correctly.

Level Description
1 The start time of all cron jobs is logged.
2 The stop time of all cron jobs is logged.
4 Failed jobs (exit code != 0) are logged.
8 The process number of all cron jobs is logged.

Edit /etc/init/cron.conf and add the loglevel to the exec cron line.

exec cron -L 15

Restart the cron service.

Installing the plugin

The cron plugin only needs the path of your cron log. This is /var/log/cron.log by default.