Documentation forKiwi Syslog Server

How Kiwi Syslog Server rules work

This snippet is used for legacy 9.8.3 topics that link to a KSS NG topic of the same name.

Rules determine what actions Kiwi Syslog Server takes when it receives a message. For example, you can create rules to:

  • Log all messages to a file.
  • Send an email if the message has a high priority level.
  • Run a script if the message includes specific words or phrases.

Rules consist of the following elements:

  • Filters determine which messages are acted on. If a rule does not include any filters, all messages are acted on.
  • Actions determine what happens when a message passes all of the filters.

You can define up to 100 rules. Each rule can include up to 100 filters and 100 actions.

Apply rules in the order you want the Kiwi Syslog Server to receive them. When a rule applies to a message, Kiwi Syslog Server matches the message against each filter in the rule, starting with the top filter.

  • If each condition in the filter returns TRUE, Kiwi Syslog Server matches the message against the next filter in that rule.

  • If a condition in the filter returns FALSE, processing stops for that rule and Kiwi Syslog Server applies the next rule to the message.

If the messages passes all filters within a rule, Kiwi Syslog Server performs each action in order, starting with the action at the top of the list. When Kiwi Syslog Server completes the actions within a rule, and then applies the next rule.

To learn more about configuring rules, see the examples in the following topics. You can add rules to: