Introduction > Notifications, Alarms, and Data Buffering > OnSite Alarm Notifications

OnSite Alarm Notifications
The OnSite administrator can configure the OnSite to send alarm notifications about events detected in messages sent by devices connected to serial ports. For sending alarms generated from devices connected to serial ports, notifications can be configured to be sent to an OnSite administrator by one of the following methods:
syslog-ng allows administrators to set up alarm triggers to filter messages based on the messages’ facility, level, or contents.
Alarm triggers must be specified in the following format:
function(“ one_or_more_criteria_connected_by_operators ”);
Supported operators are “and,” “or,” and “not.”
The following line shows the syntax for a match function.
match(“ regular_expression_matching_a_text_string ”);
The following line shows the syntax for two match functions connected by the not operator:
match(“ regular_ expression ”) and not match(“ regular_ expression ”);
The following example shows the two match functions filtering for logins and excluding messages that have the user name francisco; the functions are connected by the not operator:
For more information, see syslog-ng v1.6 reference manual at http://www.balabit.com/products/syslog-ng/reference-1.6/syslog-ng.html.
See the following sections for how administrative users can configure notifications and alarms and email:

Introduction > Notifications, Alarms, and Data Buffering > OnSite Alarm Notifications