I have a filter rule that sends off an email when the following syslog message is captured in syslog
if $msg contains 'Pool /Common/storeportal member /Common/10.95.68.183:80 monitor status down' then :ommail:;mailBody1 The requirements for this message have changed and now they are to include Ip address 10.95.68.180-184 in the message and with string monitor status up in addtion to the monitor status down. how can I include in the message 10.95.68.18[0-4] monitor status up|down' then :ommail:;mailBody1 ? thanks in advance _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
