I am looking for a way to get syslog-ng to trigger an event.

To be more specific: If I recieve a syslog-message with some speciel text e.g "thingy". I want the syslog-server to send an email.

Is this something that can be done using only syslog-ng and sendmail???

I don't know if syslog-ng can do that or not. What i would do is write something in perl to parse the log file every 5-10 minutes and look for that keyword. If it is there, send the lines which contain it to an email account. If you need it i can write something for you to do just that.

Quote:I don't know if syslog-ng can do that or not. What i would do is write something in perl to parse the log file every 5-10 minutes and look for that keyword. If it is there, send the lines which contain it to an email account. If you need it i can write something for you to do just that.

 

A perl-script might do the trick, however instant action when a message arrives is what I'm working on.

Have you tried to write something to do that? If so, post it and i am sure there will be tons of help.

Hello,

 

Syslog-ng supports a directive called program() which execute a program when a message is received.

 

http://www.balabit.com/dl/html/syslog-ng-a...ination_program