On Mon, 08 Oct 2007 16:49:36 +0800, Wilson Lai said:

Would there be any tool to check the severity of the log message and alert me by mail once

receiving the event log message with "error" severity?

We use tools like logwatch and swatch to do this sort of thing: http://www.logwatch.org http://swatch.sourceforge.net/ Both of these are regexp based, and would probably need work to flag stuff specifically based on the syslog priority. Though it wouldn't be too hard to say 'log all error and higher to a specific file", and then point one of those two at that file, and tell them to match ^.*$ (and your problem is solved). You'll probably find out that a good number of programs don't use 'error' to flag errors (one of the reasons we went with regexp based tools - the first setup to get them all the regexps to get rid of all the noise was *huge* (some of our servers blatted out 87M-sized e-mails the first few times till we ignored the right stuff)....