[logs] rsyslog email alerting

Jason Haar Jason.Haar at trimble.co.nz
Tue Apr 8 20:56:33 PDT 2008


Rainer Gerhards wrote:
> I promise to listen very carefully and try to implement anything that is
> doable and makes sense in the rsyslog context.
>
>   
One thing springs to mind - I think "sendmail" support is more important 
than you give it credit.

What if you've got an alert rule in rsyslog to email you when your 
network link fails - but your SMTP server is at the other end of the 
link? :-) If you used sendmail - you get requeuing and retrying for free 
- I don't think you want to have to add that to your SMTP support...

Also every Unix box in creation comes with a "sendmail-like" MTA 
installed, and everyone needs to configure it anyway to get cronjob 
reports, etc. Basically it's always there and almost always configured 
ready to go anyway.

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


More information about the LogAnalysis mailing list