[rsyslog-notify] Forum Thread: Re: Create threshol in rules - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24563#p24563

Message: 
----------
Yes it is possible, replace the write to a file with an action of the type
ommail see <!-- w --><a class="postlink"
href="http://www.rsyslog.com/doc/ommail.html">www.rsyslog.com/doc/ommail.html</a><!--
w --> for how to configure that

where you put these filters in the file doesn't matter unless you have stop
statements in the file (~ is the old syntax for stop). If you do have stop
statements, you need to make sure you don't filter out the messages you
want to alert on before you get to the logic to do the alerting.