2015-03-02 19:33 GMT+01:00 David Lang <[email protected]>: > On Mon, 2 Mar 2015, Rainer Gerhards wrote: > > 2015-03-02 18:51 GMT+01:00 David Lang <[email protected]>: >> >> On Mon, 2 Mar 2015, Ehua_Kassi wrote: >>> >>> >>> I don't understand your issue. Outputs (like ommail) don't care what >>>> >>>>> input >>>>>>> the message arrived through. >>>>>>> >>>>>>> >>>>>> I can agree with you at the exception that we can find in official >>> >>>> documentation of ommail a note about imfile >>>> To be more precise : >>>> http://www.rsyslog.com/doc/v8-stable/configuration/modules/ommail.html >>>> "Please note that ommail is especially well-suited to work in tandem >>>> with >>>> imfile to watch files for the occurence of specific things to be alerted >>>> on. >>>> So its scope is far broader than forwarding syslog messages to mail >>>> recipients." >>>> >>>> This is the only place where i can read about this. So it seems to >>>> me >>>> that ommail can be triggered through the files watched by imfile. I >>>> don't >>>> know how, and this is the first reason why i came here. But after all >>>> you >>>> said it seems that this functionnality is not implemented or i just miss >>>> understood this part of the documentation. >>>> >>>> >>> There is nothing special about imfile that triggers ommail any >>> differently >>> than other inputs. I don't understand why that statement is in the >>> documentation. >>> >>> >>> I wrote this. My intent was to say that you can watch files with rsyslog >> and send email on occurrence of interesting events. Many folks -at least >> at >> those days- thought that rsyslog can process syslog messages, only. >> >> Any better rewording? >> > > I think this is an idea that needs to be pushed at a much higher level. > Having this in this one output (with the word 'especially') is a source of > confusion. Having a statement up in the first page (and with the diagram > showing all the inputs and outputs) that says that rsyslog is not limited > to traditional syslog data, it can process data from many sources > (specifically including windows logs and data in files) would be a better > place for this idea. > > > for now, I just removed the wording.
Rainer _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
