I'm not familiar with sending things to scripts like this, but in general
when something isn't working the way you think it should, the way to start
the debugging is to fire up rsyslog with debug enabled. usually the
startup messages tell you what it's not able to parse.
looking at this, shouldn't it be
:msg, contains, "warning"
instead of
:msg, content "warning"
David Lang
On Thu, 16 Dec
2010, Mark Olliver wrote:
Hi All,
I am trying to get rsyslog to alert me on certain patterns in the log. At
the moment i have built a small config with the following sections However,
nothing is the Alert script is not being triggered as far as i can tell. I
have tested the alert script and it works ok.
#/etc/rsyslog.d/55-alert.conf
$template Alert, "'Rsyslog Alert' %msg%"
local5.info
:msg, content "warning"
^/var/c+i/bin/mail_alert Alert
I am testing the above by running the following command on the cli.
echo "warning: test message" | logger -t puppet -p local5.info
This does correctly log into my local.5 log in /var/logs .
Any ideas would be welcome.
Thanks
Mark
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
