Just had the first notification from the new rule, couple of things 1) ** Alert 1198095893.7112: mail - syslog,linuxkernel, 2007 Dec 19 20:24:53 thecla2->/var/log/messages Rule: 5130 (level 7) -> 'Monitor adsl line is down.' Src IP: (none) User: (none) Dec 19 20:24:53 thecla2 kernel: ATM dev 0: ADSL line is down
** Alert 1198095915.7357: - syslog,linuxkernel, 2007 Dec 19 20:25:15 thecla2->/var/log/messages Rule: 5131 (level 3) -> 'Monitor ADAL line is up.' Src IP: (none) User: (none) Dec 19 20:25:14 thecla2 kernel: ATM dev 0: ADSL line is up (2752 kb/s down | 448 kb/s up) Rule 5131 says ADAL instead of ADSL but in the latest update it is spelt correctly - assume this is already fixed - the event came in before I installed the latest update. 2) You have set the level for rule 5131 to 3, I think it should match the down rule, nice to see these in pairs and the up event has the connection speed which I find useful. Thanks -- Regards Martin West
