SNMP and SysLog Facilities

Hi kiroc,

 

 

I don't think the syslog facility is included in the message body, so you couldn't easily do this with the default syslog-ng configuration. You could use a template to modify just the syslog4 messages to insert a string to distinguish them. You'd then need to modify the alertd configuration to trigger an snmp trap for those messages.

 

 

This post has some related info and links that might help you get started:

 

 

tmm entries for syslog

 

http://devcentral.f5.com/Default.aspx?tabid=53&view=topic&postid=30779&ptarget=30781

 

 

Can you reply here if you get stuck or figure something out?

 

 

Thanks,

 

Aaron