We currently have several system how send a syslog when a specific update fails.
A specific system can send such message serval times a day, till manual action has been taken.
What I would like to do, on each syslog message open an automatic support ticket.
When a ticket is open for this device suppress the syslog for 24h, only for this source. So we won’t have 100 tickets a day for 1 source.
Would this be possible (I hope so)?