[logs] rsyslog email alerting

Clayton Dukes (cdukes) cdukes at cisco.com
Tue Apr 8 21:17:24 PDT 2008


Sorry, but I must disagree. In fact, I *just* ran into that problem the other day. The box I was on did not have sendmail installed. Sad, but true.
Ended up using perl instead ;-)


-----Original Message-----
From: loganalysis-bounces at loganalysis.org [mailto:loganalysis-bounces at loganalysis.org] On Behalf Of Jason Haar
Sent: Tuesday, April 08, 2008 11:57 PM
To: loganalysis at loganalysis.org
Subject: Re: [logs] rsyslog email alerting

Rainer Gerhards wrote:
> I promise to listen very carefully and try to implement anything that is
> doable and makes sense in the rsyslog context.
>
>   
One thing springs to mind - I think "sendmail" support is more important 
than you give it credit.

What if you've got an alert rule in rsyslog to email you when your 
network link fails - but your SMTP server is at the other end of the 
link? :-) If you used sendmail - you get requeuing and retrying for free 
- I don't think you want to have to add that to your SMTP support...

Also every Unix box in creation comes with a "sendmail-like" MTA 
installed, and everyone needs to configure it anyway to get cronjob 
reports, etc. Basically it's always there and almost always configured 
ready to go anyway.

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
_______________________________________________
LogAnalysis mailing list
LogAnalysis at loganalysis.org
http://www.loganalysis.org/mailman/listinfo/loganalysis



More information about the LogAnalysis mailing list