hi Martin,
it could be that sec is not able to find the 'mail' program, since the
directory where 'mail' resides is not in the search path.
What happens if you try absolute path, e.g., /usr/bin/mail -s '%s'
somem...@somedomain.com?
kind regards,
risto
hi i configured a rule on sec , that is feeded by rsyslog , everything is
fine but i am stuck in the dumbest way - the mail sending-
>
> here is my rule:
>
> type=PairWithWindow
> ptype=RegExp
> pattern=([^\ ]*\ ){2}((\S+):)\W\3\Wnew\W\w+\W+\ \w+
> desc=No cancellation event for $3 after 10 minutes
> action=pipe '%s' mail -s '%s' somem...@somedomain.com
> ptype2=RegExp
> pattern2=([^\ ]*\ ){2}((\S+):)\W\3\Wcancelled\W\w+\W+\ \w+
> desc2=event for $3 was cancelled
> action2=logonly
> window=600
>
> everything work fine , even sec reports that send the mail, here is the
> sec log :
>
> Wed Dec 28 14:14:40 2016: Feeding event 'No cancellation event for
> SOMESERVER after 10 minutes' to shell command 'mail -s 'No cancellation
> event for SOMESERVER after 10 minutes' somem...@someserver.com'
> Wed Dec 28 14:14:40 2016: Child 5513 created for command 'mail -s 'No
> cancellation event for SOMESERVER after 10 minutes'
> somem...@someserver.com'
>
> from command line i run the mail command and sends , i don´t know what i
> am doing wrong, any hint is welcome!
>
>
>
>
>
>
>
>
>
>
>
>
>
> --
>
> ::: (\(\
> *: (=' :') :*
> ... (,('')('')....
> mar...@etcheverri.com
> Consultoria de sistemas
>
>
>
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> _______________________________________________
> Simple-evcorr-users mailing list
> Simple-evcorr-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
>
>
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
