What did you send to syslog-ng? The entire message body? Did you have
to do any pre-processing?
--
Don Faulkner
dfaulk...@pobox.com
On Jun 11, 2009, at 5:19 PM, Andersen, Kurt wrote:
I’ve done this by pulling the mail with fetchmail sending through
procmail (or equivalent) and then logging to syslog via syslog-ng
with a pipe forking the info into SEC or just letting SEC watch the
log file. That way you don’t have to do anything special with SEC.
--Kurt
From: Don Faulkner [mailto:dfaulk...@pobox.com]
Sent: Thursday, June 11, 2009 15:04
To: Simple-evcorr-users@lists.sourceforge.net
Subject: [Simple-evcorr-users] email messages as an input?
I know this isn't the best way to do things, but...
Has anyone had any success throwing email messages at SEC? how did
you do it?
I have some devices that prefer to send me mail when interesting
events occur. I'd like SEC to "read" the mail from those systems and
do the right thing, either emailing me about real problems, or
taking other actions as necessary.
My first thought is to pull the mail via some mechanism (pop3, imap,
etc.), and have procmail push the messages from my devices into a
flat file that SEC would use as an input. I don't know how this
would work as that file grows. Eventually, it will have to rotate,
which I assume I could just handle with standard Linux/Solaris log-
rotation tools.
Ideally, the interesting lines in the email would end up in syslog
or some such place for uniformity as well.
Am I going down the right path?
--
Don Faulkner
dfaulk...@pobox.com
------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing
server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
