<html>
<head>
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
</style>
</head>
<body class='hmmessage'>
But I think as per the example the syslog will just send the log if it match specific string like ( attackalert ) in the example, But I want it send all new logs from this IP when comming without matching a specific string or word, Can you help in this ?<br><br><hr id="stopSpelling">From: reakyrok@hotmail.com<br>To: syslog-ng@lists.balabit.hu<br>Date: Wed, 1 Jul 2009 15:49:42 +0300<br>Subject: Re: [syslog-ng] Send a specific log by email<br><br>
<style>
.ExternalClass .EC_hmmessage P
{padding:0px;}
.ExternalClass body.EC_hmmessage
{font-size:10pt;font-family:Verdana;}
</style>
Ohh Sorry <img src="http://gfx2.hotmail.com/mail/w3/ltr/emoticons/smile_embaressed.gif" alt="" height="19" width="19"> I didn't note it, Thanks so much dear friend<br><br>Best Regards<br>Bassam Muhammad<br><br>> Date: Wed, 1 Jul 2009 14:26:18 +0200<br>> From: Siem.Korteweg@qnh.nl<br>> To: syslog-ng@lists.balabit.hu<br>> Subject: RE: [syslog-ng] Send a specific log by email<br>> <br>> Hi,<br>> <br>> the example script is in the same section of the page. Store it in the path of your destination -> program. Edit it and change the contents of the variable $TO to indicate the destination and check whether your system knows /usr/sbin/sendmail.<br>> <br>> regards,<br>> <br>> Siem Korteweg<br>> <br>> -----Oorspronkelijk bericht-----<br>> Van: syslog-ng-bounces@lists.balabit.hu namens Reaky Rok<br>> Verzonden: wo 1-7-2009 14:21<br>> Aan: syslog-ng@lists.balabit.hu<br>> Onderwerp: Re: [syslog-ng] Send a specific log by email<br>> <br>> <br>> This's great<br>> But what about the perl escript, Could you please provide anexample for it, As I'm not good in programming.<br>> Thanks for your help<br>> <br>> Best Regards<br>> Bassam Muhammad<br>> <br>> > Date: Tue, 30 Jun 2009 19:04:55 +0200<br>> > From: Siem.Korteweg@qnh.nl<br>> > To: syslog-ng@lists.balabit.hu<br>> > Subject: RE: [syslog-ng] Send a specific log by email<br>> ><br>> > Hi Reaky,<br>> ><br>> > define a new source with your specific IP and define a destination using "program" in stead of "file" (http://www.campin.net/newlogcheck.html "Email certain logs"). Finally you combine both in a new log-definition.<br>> ><br>> > regards,<br>> ><br>> > Siem Korteweg<br>> ><br>> ><br>> > -----Oorspronkelijk bericht-----<br>> > Van: syslog-ng-bounces@lists.balabit.hu namens Reaky Rok<br>> > Verzonden: di 30-6-2009 11:20<br>> > Aan: syslog-ng@lists.balabit.hu<br>> > Onderwerp: [syslog-ng] Send a specific log by email<br>> ><br>> ><br>> > Hi friends<br>> > I have syslog-ng installed in RHEL5 server, I make it as CEntral log for all servers in my network, Filtered by IP<br>> > Now What I want to do is make it send to me an email for a specific log for one of my server, In other word when any log sent from this IP (192.168.1.1 ) For example to send me email with this new log value to myemail@mydomain.com<br>> > The following is the part of configuration for my syslog-ng.conf that related with remote servers.<br>> > =============================================<br>> ><br>> > source s_remote {<br>> > tcp(ip(0.0.0.0) port(514));<br>> > udp(ip(0.0.0.0) port(514));<br>> > };<br>> ><br>> > destination d_separatedbyhosts {<br>> > file("/var/log/syslog-ng/servers/$HOST/$FACILITY.log" owner("root") group("root") perm(0640) dir_perm(0750) create_dirs(yes));<br>> > };<br>> ><br>> > log { source(s_remote); destination(d_separatedbyhosts); };<br>> > ===============================================<br>> ><br>> > Thanks<br>> > Best Regards<br>> > Reaky<br>> ><br>> > _________________________________________________________________<br>> > Invite your mail contacts to join your friends list with Windows Live Spaces. It's easy!<br>> > http://spaces.live.com/spacesapi.aspx?wx_action=create&wx_url=/friends.aspx&mkt=en-us<br>> ><br>> <br>> _________________________________________________________________<br>> Drag n' drop-Get easy photo sharing with Windows LiveT Photos.<br>> <br>> http://www.microsoft.com/windows/windowslive/products/photos.aspx<br>> <br><br><hr>What can you do with the new Windows Live? <a href="http://www.microsoft.com/windows/windowslive/default.aspx">Find out</a><br /><hr />See all the ways you can stay connected <a href='http://www.microsoft.com/windows/windowslive/default.aspx' target='_new'>to friends and family</a></body>
</html>