Posting Events to the Bulletin Board

As of January 2012, Logalot is now part of Scrutinizer v9. Your Logalot license is now a Scrutinizer license. Contact support with questions.

Moderators: scottr, Moderator Team

Locked
CityofKerrville
Posts: 3
Joined: Thu Sep 11, 2008 10:05 am

Posting Events to the Bulletin Board

Post by CityofKerrville » Wed Sep 17, 2008 12:29 pm

Is there a way to set up a rate trigger to post an event to the bulletin board only when triggered and store it to history otherwise?

User avatar
tomp
Site Admin
Posts: 315
Joined: Wed Jul 27, 2005 10:53 am
Location: Sunny Sanford Maine
Contact:

Re: Posting Events to the Bulletin Board

Post by tomp » Wed Jan 07, 2009 6:19 pm

Unfortunately Logalot does not do exactly this out of the box, but I have an idea for a workaround.

Create a Notification Profile of type syslog and send to 127.0.0.1 on port 514. Use %m in your message so get the violating message and include anything else that you'd like.

Now what you could do is create a policy, sending all events to history and create a rate trigger that fires off a notification to your new profile. It will be a syslog with the message that just came in. Now from that new syslog that was just fired off and collected by logalot, create a new policy that posts it to the bulletin board.

Let me know if that does not make sense.

- Tom

Locked

Who is online

Users browsing this forum: No registered users and 1 guest