Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added syslog alerter #1433

Open
wants to merge 4 commits into
base: master
Choose a base branch
from
Open

Added syslog alerter #1433

wants to merge 4 commits into from

Conversation

monwolf
Copy link

@monwolf monwolf commented Nov 25, 2017

I would like to contribute to your project with my basic syslog alerter.

Bernat Mut and others added 4 commits November 25, 2017 19:39
close handler to avoid too many open files.
Remove old handlers to avoid too many open files after a while working with a tcp syslogger alerter.
@monwolf
Copy link
Author

monwolf commented Dec 1, 2017

I don't understand why not passing the test.

@Qmando
Copy link
Member

Qmando commented Dec 5, 2017

The test failure is unrelated to your code changes. A new version of pytest or some dev dependency caused the failures. It's now been fixed in master.

@admlko
Copy link

admlko commented Sep 4, 2018

Would be nice to get this one merged. What needs to be done?

@Qmando
Copy link
Member

Qmando commented Sep 4, 2018

This can probably be merged. I'll take a look at it again.

In the meantime, you could try using command alerter + logger.

alert:
- command
command: ["/usr/bin/logger", "-t", "elastalert"]
pipe_match_json: true

@admlko
Copy link

admlko commented Sep 5, 2018

@Qmando Great news!
Thanks for the suggestion, I'm using logger currently, but I haven't figured out a way to spoof hostname in the syslog message field. I would like to be able to rewrite what I want in that.

@admlko
Copy link

admlko commented Sep 17, 2018

@Qmando any update on this?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants