Here is the full confi The first if works but then the next if do not. If the variables clear I'm sure this is what is happening then.
$ModLoad ommail $ActionMailSMTPServer 192.168.1.25 $ActionMailFrom CH-RSYSLOG01 $ActionMailTo adminsyslog $template mailSubject,"A syslog alert at %timegenerated% from %hostname%" $template mailBody,"RSYSLOG Alert\r\nmsg='%msg%'" $template mailBody1,"RSYSLOG Alert\r\nmsg='%msg%'" $ActionMailSubject mailSubject if $msg contains 'Login' then :ommail:;mailBody & if $msg contains 'Configured' then :ommail:;mailBody1 if $msg contains 'flapping' then :ommail:;mailBody if $msg contains 'SPAN' then :ommail:;mailBody1 -- View this message in context: http://rsyslog-rsyslog-users.1305293.n2.nabble.com/Multiple-Email-messages-filter-tp7581205p7581219.html Sent from the rsyslog -- rsyslog-users mailing list archive at Nabble.com. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

