We have the Syslog service setup and it's logging messages, emailing, etc.
Added a new rule yesterday to send all syslogs from 4 ip addresses and email these people. moved it to the top and the messages must be hitting my default email me rather then the first rule.
How do I trouble shoot this issue?
Which of the Syslog Servers are you using? Toolset, Kiwi, Orion, etc?