Jan Lentfer 85981472c3 new addon: swatch - Simple log file watcher ...

http://sourceforge.net/projects/swatch/

With swatch you can easily monitor (growing) log files
in realtime and create email alerts based on log file content.

e.g. with a config file like this:
watchfor /Priority\: ([1|2])/
echo=normal
mail=alerts@your.domain,subject=[SNORT] Priority $1 Alert

and a swatch command like this:
swatch --daemon -c /var/ipfire/snort/swatchrc --input-record-separator='\n\n' -t /var/log/snort/alert

you can setup email alerts for SNORT alerts.

This still needs an active MTA (e.g. dma or postfix).

2013-06-23 23:16:21 +02:00

3.2 KiB

Raw Blame History

View Raw