Yep, my regexp was even without ^ sign, just /Configured/, but no luck with an alert to work. SYSLOG messages are correctly shown on the device's tab. What I've noticed - even after pressing Rebuild on the Syslog Rules page, MySQL table 'syslog_rules_assoc' stays empty. Can I debug it somehow? Thanks! -- Best, Sergey понедельник, 18 июля 2016г., 16:23 +0300 от Adam Armstrong < adama@memetic.org> :
Hi Sergey, The current setup only alerts on the message, not the "program" field. You probably want to match /^Configured/ I need to extend it to also match the program field, but I'm not sure how best to handle that at the moment! Adam. Sent from BlueMail
On 18 Jul 2016, at 15:09, "Сережка Хомяков" < xomka686@mail.ru > wrote:
Hello! Thanks for higly awaited feature with SYSLOG alerting! Just playing with it, I was unable to make it working (of course, with knowledge of PCRE). The example of my test Alert was based on *SYS-5-CONFIG_I:Configured* message from IOS router. Can you advice on how the regexp should look like and how does SYSLOG Alerter work - on a poll or triggered on a log receipt? -- Best, Sergey
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium