On Fri, 2008-08-29 at 11:00 -0700, Aleksey Tsalolikhin wrote: > On 8/29/08, Mag Gam <magawake at gmail.com> wrote: > > Hello, > > > > I know centos does not use syslog-ng, but I have installed it at my > > university. My intention is if a particular string appears in my > > /var/log/messages I would like to get an email alert. > > Check out SWATCH: http://swatch.sourceforge.net/ Expanding on that, here is a way that I know works in CentOS 5: In syslog-ng.conf add the following or similar 'destination': destination d_swatch { program("/usr/bin/swatch --config-file=/etc/swatch.conf --script-dir=/var/run/swatch --read-pipe= \"cat /dev/fd/0\""); }; I got that from http://www.campin.net/syslog-ng/faq.html a long time ago. --Tim