On Mon, 2 Mar 2015, Rainer Gerhards wrote:
2015-03-02 18:51 GMT+01:00 David Lang <[email protected]>:
On Mon, 2 Mar 2015, Ehua_Kassi wrote:
I don't understand your issue. Outputs (like ommail) don't care what
input
the message arrived through.
I can agree with you at the exception that we can find in official
documentation of ommail a note about imfile
To be more precise :
http://www.rsyslog.com/doc/v8-stable/configuration/modules/ommail.html
"Please note that ommail is especially well-suited to work in tandem with
imfile to watch files for the occurence of specific things to be alerted
on.
So its scope is far broader than forwarding syslog messages to mail
recipients."
This is the only place where i can read about this. So it seems to me
that ommail can be triggered through the files watched by imfile. I
don't
know how, and this is the first reason why i came here. But after all you
said it seems that this functionnality is not implemented or i just miss
understood this part of the documentation.
There is nothing special about imfile that triggers ommail any differently
than other inputs. I don't understand why that statement is in the
documentation.
I wrote this. My intent was to say that you can watch files with rsyslog
and send email on occurrence of interesting events. Many folks -at least at
those days- thought that rsyslog can process syslog messages, only.
Any better rewording?
I think this is an idea that needs to be pushed at a much higher level. Having
this in this one output (with the word 'especially') is a source of confusion.
Having a statement up in the first page (and with the diagram showing all the
inputs and outputs) that says that rsyslog is not limited to traditional syslog
data, it can process data from many sources (specifically including windows logs
and data in files) would be a better place for this idea.
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
