Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Syslog Email Alerting?

We have NPM 2023.3.0 which means the guides/posts online no longer seem valid for Syslog Email alerting as the server no longer has the Syslog viewer installed.

I asked support how to setup email alerting for Syslog and they just forwarded me to this article:

Log forwarding in LV (solarwinds.com)

I can setup custom rules within the Log Viewer but none of these are an email alert.

All I want to do is generate an email alert from a specific Syslog message to include the Node Name and Syslog message in the alert.

Is that possible?

Thanks

Find more posts tagged with

Accepted answers

All comments

anmolkumar7

Hi,

You need to add Alert action in your custom rule and in that alert you can define email action. PFB link for the same:

https://www.solarwinds.com/documentation/en/flarehelp/orionplatform/content/lm/lm-alerting.htm

Regards

TheShining

There doesn't seem to be an email action?

bobmarley

That being the case there are a few options you could use. Run and External program and send the email via your own script is one option.

Another option is to set up an 'advanced alert' and use a custom SQL query to look at the Syslog DB. Below is a similar situation where I set up one to look for SNMP Traps, setting this up for the Syslog table would be similar.

The 'advanced alerting engine' will support sending emails.

A third option would be to forward the entry to another tool that does support sending emails.

acook0411

Hello,

The way I have done this is to create an alert based on the syslog custom rule:

As you can see there is already an alert here and then you can use that alert to then have a trigger action which is to send an email:

We actually use custom rules to send messages via webhook to teams and create tickets in service-now based mainly on trap messages but you can do the same thing with syslog messages.

To get the syslog message included in the email you can use '${N=OLM.AlertingMacros;M=OLMAlertMessage.EventMessage}' that should do it.

Hope this helps.