hi Martin,
it could be that sec is not able to find the 'mail' program, since the
directory where 'mail' resides is not in the search path.
What happens if you try absolute path, e.g., /usr/bin/mail -s '%s'
[email protected]?
kind regards,
risto
hi i configured a rule on sec , that is feeded by rsyslog , everything is
fine but i am stuck in the dumbest way - the mail sending-
>
> here is my rule:
>
> type=PairWithWindow
> ptype=RegExp
> pattern=([^\ ]*\ ){2}((\S+):)\W\3\Wnew\W\w+\W+\ \w+
> desc=No cancellation event for $3 after 10 minutes
> action=pipe '%s' mail -s '%s' [email protected]
> ptype2=RegExp
> pattern2=([^\ ]*\ ){2}((\S+):)\W\3\Wcancelled\W\w+\W+\ \w+
> desc2=event for $3 was cancelled
> action2=logonly
> window=600
>
> everything work fine , even sec reports that send the mail, here is the
> sec log :
>
> Wed Dec 28 14:14:40 2016: Feeding event 'No cancellation event for
> SOMESERVER after 10 minutes' to shell command 'mail -s 'No cancellation
> event for SOMESERVER after 10 minutes' [email protected]'
> Wed Dec 28 14:14:40 2016: Child 5513 created for command 'mail -s 'No
> cancellation event for SOMESERVER after 10 minutes'
> [email protected]'
>
> from command line i run the mail command and sends , i don´t know what i
> am doing wrong, any hint is welcome!
>
>
>
>
>
>
>
>
>
>
>
>
>
> --
>
> ::: (\(\
> *: (=' :') :*
> ... (,('')('')....
> [email protected]
> Consultoria de sistemas
>
>
>
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> _______________________________________________
> Simple-evcorr-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
>
>
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Simple-evcorr-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
