Notifications & Remote Syslog
This module is responsible for activating/deactivating and handling notifications and the remote syslog.
Notifications on the WebAdmin Dashboard are also handled here.
Notification & Remote Syslog settings can be found in the System -> Notifications menu of the WebAdmin
Notifications & Filter
Any line starting with “#” is a comment, which means that it will not pre processed by the system.
Early Custom Rules: Define syslog filters which run before the system rules. This is needed if an ‘ACCEPT’ rule of the system rules would swallow a log line that needs to be caught. If the system rule should still match please use CONTINUE here.
System Rules: This syslog filter catches important events and sends them to the notification subsystem. This leads to notifications on the dashboard.
Custom Rules: Define syslog filter and notifications.
Syslog filter rules are always processed from top to bottom!
| ACCEPT | Will send the log line to the specified target. No further actions on this line are possible. |
| CONTINUE | Same as ‘ACCEPT’ but the processing of this log line does not end here. This is especially useful for the early custom rules. |
| DROP | Every line that matches will be ignored. Use * (star) to drop all messages not catched until here. |
Filter rules must have a target:
| No target specified | The log message will be sent to the remote syslog server specified in the Remote Syslog section. |
| Remote Syslog | A specific remote syslog server for a single rule. |
| Email Address | The filtered log line will be sent to an email address instead of a remote syslog server. |
| NOTIFY | This keyword means that the log message is send to the notification subsystem. The message will be shown on the dashboard. |
Remote Syslog
By default the remote syslog is deactivated. To activate it only an IP/FQDN and the Port is required.