On 2008-08-29T00:53:10, Mag Gam wrote:
> Thanks all for the responses. It seems I am going to the syslog-ng
> way, however I am having trouble setting up the email alerts.
> I have written a script to email me but I am not sure how to set this
> up in syslog-ng

Here is what I use:

filter alert {
        not (
                program("^/USR/SBIN/CRON$")
                and (
                        match("^[^:]+: \\(postgres|root|www-data\\) CMD ")
                )
                or
                ...
        )
);

destination email {
        program("/usr/local/bin/stdin2sendmail -s 'syslog: aeol' root");
};

log {
        source(input);
        filter(alert);
        destination(email);
};


/Allan
-- 
Allan Wind
Life Integrity, LLC
http://lifeintegrity.com


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to