MonitorWare Knowledge Base

I've been looking for a way to apply multiple rulesets and I read this faq. I don't agree that this is an uncommon set up. I'd like to configure Winsyslog to log events of priority 5 and lower to a database where I can analyse them at a later time. At the same time I'd like critical events priority 2 and lower to be emailed to me so I can take immediate action. Unless I can configure 2 rulesets, I don't see a way to do this with winsyslog. Is this an uncommon request? Can this be added to a future version? Thanks.

http://www.winsyslog.com/en/FAQ/Setup-W ... -MySql.asp

oops, I meant this url -

http://www.winsyslog.com/en/FAQ/Why-mor ... uleset.asp

HI,

You dont even need to define two different rule sets. You can achieve what you want by just defining a single Rule Set with 2 different rules. (One Rule Set can have as many rules as you like). As you know that for each rule you can define 2 things: Filter Condition and Action(s). Following are the two Rules that you should make to achieve the desired functionality

Rule 1:
******
Filter Condition: Priority <= 5
Action: Log to database

Rule 2:
******
Filter Condition: Priority <= 2
Action: Send Email

Hope this will solve your problem. If you have any other query, feel free to post it as well.

Best Regards,
Wajih-ur-Rehman
Adiscon

We have just recorded a quick video sequence on a similar scenario. You may want to have a look at this:

http://www.winsyslog.com/Common/en/SeminarsOnline/Sem-WinSyslog42-WriteFileEMailAlert.asp

Rainer Gerhards
Adiscon

just came back to this. I viewed the video and I see it now. That Ruleset, Add rule option is hidden pretty well. What's confusing is that "Add Rule" is greyed out in some conditions. I got it now though.

Thanks for the good feedback. Indeed, there is a *big* usability issue in regard to this. I have already created a work item to have this fixed. I expect a minor update to be available within the next 2 to 3 weeks as part of a brushup of the current version.

Thanks for helping us improve the product.

Rainer Gerhards
Adiscon