ClamAV

Scan files and content for viruses using a ClamAV clamd daemon. Free operations: Scan File, Scan Content, Get Stats. Premium operations (license key required): Batch Directory Scan, Real-time Monitor.

Actions5

Real-time Monitor (Premium)

AI-generated

Summary

Watch a directory recursively for file-system changes and scan each reported file with ClamAV. Requires a valid LowWatt Labs license key in the ClamAV credentials.

Inputs

  • Directory Path (required) — Absolute path to the directory the clamd process can access.
  • Monitor Duration (seconds) — How long to watch before returning results; defaults to 30 seconds. The runtime enforces a minimum of 1 second.
  • Options → Connection Timeout (ms) — TCP connection and read timeout for clamd requests; defaults to 30000 ms.
  • Options → Continue on Fail — When enabled, catches operation errors and emits an item with the operation and error message so processing can continue; defaults to false.

Output shape

A list of items, one per detected change, or one summary item if no changes are detected.

Each change item includes operation, timestamp, changeType, file path, and parsed ClamAV scan fields (path, status, and where applicable virus, errorMessage, and raw). If no events are detected, the item includes a message and eventsDetected: 0. The watcher uses recursive fs.watch; it scans paths reported for changes, and per-file scan errors are recorded as ERROR results.

Links

Discussion