Re: syslog and email

[Allan Wind <allan_wind@lifeintegrity.com>]

On 2008-08-29T00:53:10, Mag Gam wrote:
> Thanks all for the responses. It seems I am going to the syslog-ng
> way, however I am having trouble setting up the email alerts.
> I have written a script to email me but I am not sure how to set this
> up in syslog-ng

Here is what I use:

filter alert {
	not (
		program("^/USR/SBIN/CRON$")
		and (
			match("^[^:]+: \\(postgres|root|www-data\\) CMD ")
		)
		or
		...
	)
);

destination email {
        program("/usr/local/bin/stdin2sendmail -s 'syslog: aeol' root");
};

log {
        source(input);
	filter(alert);
	destination(email);
};


/Allan
-- 
Allan Wind
Life Integrity, LLC
http://lifeintegrity.com