Syslog Alerts

Iotellect Network Manager provides a set of pre-configured alerts for Syslog messages as described below.

Syslog alert triggers contain at most three conditions joined with logical AND (conjunction) operations. They check if the message:

  • contains a certain string
  • has facility equal to a certain value
  • has severity equal to a certain value.

The following table describes Syslog alerts and their trigger conditions.

Name

Description

Trigger Condition

Message contains

Facility

Severity

syslogFailedLogin

Failed Login

FAILED LOGIN

Security (4)

Notice (5)

syslogKernelAlert

Kernel Alert


Kernel (0)

Alert (1)

syslogKernelEmergency

Kernel Emergency


Kernel (0)

Emergency (0)

syslogMailCritical

Mail Critical


Mail (2)

Critical (2)

syslogMailEmergency

Mail Emergency


Mail (2)

Emergency (0)

syslogSecurityOrAuthorizationAlert

Security Or Authorization Alert


Security (4)

Alert (1)

syslogSecurityOrAuthorizationEmergency

Security or Authorization Emergency


Security (4)

Emergency (0)

syslogFtpLogOut

FTP Log-Out

FTP session closed

FTP (11)

Informational (6)

syslogFtpLogIn

FTP Log-In

FTP LOGIN FROM

FTP (11)

Informational (6)

syslogSuperuserLoginSuccess

Superuser Successful Login

opened

Security (4)

Notice (5)

syslogUserLoginSuccess

User Successful Login

session opened

Security (4)

Informational (6)

syslogDaemonAlert

Daemon Alert


Daemons (3)

Alert (1)

syslogDaemonEmergency

Daemon Emergency


Daemons (3)

Emergency (0)

syslogUserLevelAlert

User-Level Alert


User (1)

Alert (1)

syslogUserLevelEmergency

User-Level Emergency


User (1)

Emergency (0)

Custom alerts for Syslog messages can be easily created by users for their specific needs using the described alerts as examples.

Was this page helpful?