[syslog-ng] Email Alerts from Syslog-ng

[Nate Campi]

On Wed, Feb 08, 2006 at 04:43:14AM -0000, Stuart Burgis wrote:
> I am having lots of problems getting syslog-ng to send email alerts
> based upon certain text based filters. I am running RedHat 9.0 with
> syslog-ng-1.6.2-1 installed from the rpm, I have configured the
> syslog-ng.conf file correctly to enable filtering with a match
> statement for a specific IP address in the logs and this works when
> using ?destination file { file("/etc/syslog-ng/test.log"); };? but
> when I point this to the perl script that I have got off of this URL
> HYPERLINK
> "http://www.campin.net/newlogcheck.html"http://www.campin.net/newlogcheck.html
> I get nothing. Please see below the destination statement and perl
> script that I have created with executable permissions.
> 
> Syslog-ng.conf
> 
> destination email { program("/etc/syslog-ng/mail.pl"); };
> 
>             filter f_test {
> 
>         match(192.168.1.1);
> 

Try host instead of match, let us know if it fixes it.
-- 
Nate

"The will to win is not nearly as important as the will to prepare to
win." - BOBBY KNIGHT