On Thu, Aug 30, 2012 at 12:28 PM, Peter Eckel <lists at eckel-edv.de> wrote: > On 30.08.2012, at 11:52, C. L. Martinez wrote: > >> I am searching some lightweight tool to control when rsyslog didn't >> receive events from a >> specific host or group of hosts for x minutes/seconds. >> >> Only a simple tool to send an email when an alert is triggered, I >> don't need flat tools like zabbix or similars. > > try SEC: <http://sourceforge.net/projects/simple-evcorr/> > > SEC can do a lot more, but your requirement can be implemented in a fairly simple rule. The tool is rock-solid and I've been using it in a number of projects for years. > > Uhmm .. I am reading the docs about SEC, but it only speaks about event correlation ... How do you do to check if syslog is receiving data??