I posted in a different community, under perhaps the wrong subject title. So, I'm posting a message in Alert Lab linking to the solution I developed, in the hopes that more people will see the solution.
SQL: How to search syslog for specific messages
Basically, if you try to create a custom SQL alert, you have to choose the topic of the alert. When you choose a topic, it default selects certain columns and a table. Syslog is not available.
The solution to this is to select Custom SQL Node Alert and then in the custom field, join to syslog table, and enter the search parameters there. The alert won't pass the syslog data to the alert action, but in an e-mail you can create a Custom SQL entry that has SQL very similar, but slightly different than the alert, and it will then insert the syslog message text into the email (or event log). Please click on link to see the method of doing it.
This same process can work for alerting on SNMP traps, but in my experience SNMP traps don't have the information I'm looking for, where syslog does.
Feed back is welcomed on the solution (or Traps)
