Action - E-mail message

This feature is only available in the licensed version.

This action will send an e-mail message to the recipients specified whenever a Syslog message is received that matches the filters set.

Details from the Syslog message received and other Syslog statistics can be included in the e-mail subject or message body. In effect this program can be used as a Syslog to e-mail converter.

Firstly, ensure that you have set the SMTP server and format of the Email (HTML/Plain text) options via the e-mail options.

Specify the e-mail recipient's address in the E-mail recipient field. More than one address can be specified. Each address must be separated by a comma.

Specify the From address in the E-mail From field. Make sure that when you use secured mailing(SSL/TLS), the from address keyed in 'Email setup' and 'Email message' Action are same.

Specify the e-mail subject in the E-mail subject field. (Single line only). The Max subject length option can be used to ensure that only a limited number of characters are sent in the subject line.

Specify the e-mail message in the E-mail message field. (Multiple lines may be used). If this message is intended for an e-mail to pager gateway, then the message body part of the e-mail may not be used. In this case you can just leave it blank. Most paging systems only have limited space so they only use the subject part of the message. The Max message length option can be used to limit the amount of data sent in the message body. If you have used the variable %MsgText in the message body and a large syslog message arrives, it may be too large to send via e-mail. You can limit the message body length to a more manageable length.

The Test button will send a test e-mail message to the specified recipients. The content of the test message can be modified by pressing the Test Setup button.

Insert message content or counter

To pass program variables, counters, script fields and statistics into the message or subject, click on the Insert message content or counter link and choose an option from the popup menu. More details on the values can be found here.

This option allows you to choose a variable from a popup menu. The variable is then replaced with the current value before the message is sent. For example %MsgText is replaced with the text of the current syslog message. Just position your cursor in the subject or message text line and click the hyperlink. A popup menu will be displayed so you can choose the variable you want.

Example subject field: Syslog Alert from %MsgHost

Example message body field: Message from Host %MsgHost at %MsgTime on %MsgDate Message: %MsgText

To set Kiwi Syslog Server to act as a Syslog message to e-mail converter use the %MsgAll keyword in the message body text to pass all of the received Syslog message information into the e-mail message.

Be aware, that if you are getting a lot of messages, then you could cause congestion on your e-mail server.

The e-mail buffer will hold 1000 messages before a message is lost, this will help when many Syslog messages are received at once and the mail server is busy.

E-mail is queued for a minute before sending. This is more efficient than having to reconnect to the mail server each time a message needs to be sent. The messages are queued for a minute and then delivered in a batch.

E-mail Delivery Options

This option allows the importance, priority and sensitivity flags of the e-mail message to be specified.  The e-mail recipients will recieve the messages with the various importance/priority/sensitivity levels set accordingly.

Importance:        Unspecified (Default) / High / Normal / Low

Priority:        Unspecified (Default) / Normal / Urgent / Non-Urgent

Sensitivity:        Unspecified (Default) / Personal / Private / Confidential

Expand <013><010> in message

This option will expand any carriage return and line feed characters that have previously been replaced with <013> and <010>.

If the replace non printable characters with ASCII value option is set, any CR and LF characters appearing in the syslog message are replaced. It is sometimes useful to have them expanded back again when forwarded via e-mail as it makes the text more readable.