On Thu, Jul 31, 2008 at 10:18 PM, Rainer Gerhards <[EMAIL PROTECTED]> wrote: > Just one more re-confirmation: > >> What I'm looking for: >> if $msg == 'This is really bad' happens 3 times in a row then >> :ommail:;mailBody >> >> This would be nice but is not required since the 'This is really bad' >> message in my case is very unique: >> if ($msg == 'This is really bad' and $server == 'server' and $program >> == 'program') happens 3 times in a row then :ommail:;mailBody > > So you would actually use such a rule. If "this other thing is really > bad" happened three times, the rule shall not trigger. Is this right?
Yes, I would use such a rule. It would make what is already an awesome application even more awesome. :P I am also willing to test it out and run the latest development version... Which I'm doing anyway. And yes, what you just wrote is correct. - Julian _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog
