Roger that Rainer. Thanks, Julian
On Thu, Jul 31, 2008 at 11:58 PM, Rainer Gerhards <[EMAIL PROTECTED]> wrote: > OK, that greatly simplifies things. Actually, it now boils down to > "execute an action only on the n-the time the filter evaluates to true". > I think this is quite easy to implement, but I must verify that... > > Rainer > >> -----Original Message----- >> From: Julian Yap [mailto:[EMAIL PROTECTED] >> Sent: Friday, August 01, 2008 11:03 AM >> To: Rainer Gerhards >> Cc: [email protected] >> Subject: Re: Re: [rsyslog] Alert when multiple repeated lines are > found >> >> On Thu, Jul 31, 2008 at 10:18 PM, Rainer Gerhards >> <[EMAIL PROTECTED]> wrote: >> > Just one more re-confirmation: >> > >> >> What I'm looking for: >> >> if $msg == 'This is really bad' happens 3 times in a row then >> >> :ommail:;mailBody >> >> >> >> This would be nice but is not required since the 'This is really >> bad' >> >> message in my case is very unique: >> >> if ($msg == 'This is really bad' and $server == 'server' and >> $program >> >> == 'program') happens 3 times in a row then :ommail:;mailBody >> > >> > So you would actually use such a rule. If "this other thing is > really >> > bad" happened three times, the rule shall not trigger. Is this > right? >> >> Yes, I would use such a rule. It would make what is already an >> awesome application even more awesome. :P I am also willing to test >> it out and run the latest development version... Which I'm doing >> anyway. >> >> And yes, what you just wrote is correct. >> >> - Julian > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog
