On Thu, Aug 30, 2012 at 12:28 PM, Peter Eckel lists@eckel-edv.de wrote:
On 30.08.2012, at 11:52, C. L. Martinez wrote:
I am searching some lightweight tool to control when rsyslog didn't receive events from a specific host or group of hosts for x minutes/seconds.
Only a simple tool to send an email when an alert is triggered, I don't need flat tools like zabbix or similars.
try SEC: http://sourceforge.net/projects/simple-evcorr/
SEC can do a lot more, but your requirement can be implemented in a fairly simple rule. The tool is rock-solid and I've been using it in a number of projects for years.
Uhmm .. I am reading the docs about SEC, but it only speaks about event correlation ... How do you do to check if syslog is receiving data??