Thanks for you help ! Could ! please anyone put this in the documentation. I mean If it is already in it my apologies. Additional please put it in a big red frame.
Greetings Till -----Ursprüngliche Nachricht----- Von: rsyslog [mailto:[email protected]] Im Auftrag von David Lang Gesendet: Mittwoch, 8. August 2018 07:06 An: Lennard Klein via rsyslog <[email protected]> Betreff: Re: [rsyslog] [EXTERNAL] Re: rsyslog subject.template mailSubject you cannot redefine a template, if you try, only one version will take effect (I think the last one evaluated in the file) David Lang On Mon, 6 Aug 2018, Lennard Klein via rsyslog wrote: > Hi, > > I don't exactly understand your latest mail, but looking at your > original mail I would suggest defining 2 templates rather than 1, > instead of trying to redefine the template. I've typed up the general > idea below. > > On 08/06/2018 10:14 AM, Till Brinkmann wrote: > ... >> >> -----Ursprüngliche Nachricht----- >> Von: rsyslog [mailto:[email protected]] Im Auftrag >> von Till > Brinkmann >> Gesendet: Donnerstag, 2. August 2018 16:36 >> An: eSX <[email protected]>; [email protected] >> Betreff: [rsyslog] rsyslog subject.template mailSubject >> >> module(load="ommail") >> >> template (name="mailBody" type="string" string="RSYSLOG Alert > nmsg='%msg%'") > template (name="mailSubject" type="string" > string="%hostname%") <<<< > HOSTNAME STILL THE SAME BUT TEXT WILL CHANGE OF EVENT IF > > Instead, use this: > > template (name="mailSubjectINVALID" > type="string" > string="%hostname% INVALID CRED") template > (name="mailSubjectSUCCESS" > type="string" > string="%hostname% USER LOGIN SUCESS") > >> >> if $msg contains "Invalid Credentials" then { >> action(type="ommail" server="localhost" port="25" >> mailfrom="[email protected]" >> mailto="[email protected]" >> subject.template="mailSubject" <<<<<<<< WOULD LIKE >> TO USE > TEXT AND THE %HOSTNAME% VAR HERE %HOSTANME INVALID CRED. >> body.enable="on" >> template="mailBody") > if $msg contains "Invalid Credentials" then { > action( ... > subject.template="mailSubjectINVALID" > ... > } > >> >> } >> if $msg contains "SUCCESS" then { >> action(type="ommail" server="localhost" port="25" >> mailfrom="[email protected]" >> mailto="[email protected]" >> subject.template="mailSubject" <<<<<<<< WOULD LIKE >> TO USE > TEXT AND THE %HOSTNAME% VAR HERE %HOSTNAME% USER LOGIN SUCESS >> body.enable="on" >> template="mailBody") >> >> } > if $msg contains "SUCCESS" then { > action( ... > subject.template="mailSubjectSUCCESS" > ... > } > > regards, > Lennard > This email is from Equinix (EMEA) B.V. or one of its associated > companies in the territory from where this email has been sent. This > email, and any files transmitted with it, contains information which > is confidential, is solely for the use of the intended recipient and > may be legally privileged. If you have received this email in error, > please notify the sender and delete this email immediately. Equinix > (EMEA) B.V.. Registered Office: Amstelplein 1, > 1096 HA Amsterdam, The Netherlands. Registered in The Netherlands No. > 57577889. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE > WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
