Howto alert in case a machine could nor push logs

z_haseeb · 12-31-2019, 04:10 AM

ENVIRONMENT
OS = Version 8

QUERY
Rsyslog is working fine. I want email alert in case a machine could not push logs (failed to push logs) on rsyslog server

dc.901 · 12-31-2019, 07:28 AM

So, basically you need a monitoring service to regularly check to see if a server and service and a port is up.
You can use third party software (many available, some opensource and some are pay-for).
You can also write a script and run it via scheduled task as frequently as you like.

z_haseeb · 12-31-2019, 08:08 AM

I can understand. Let me more clear my query. Suppose the client is UP but due to any reason the logs at Rsyslog server are 1 day or 2 days old then I want to trigger an email.

scasey · 12-31-2019, 10:26 AM

Scan the logs on the rsyslog server and send an email if the condition exists?
(note this is not different than dc.901's answer: look for the condition you're concerned about and report it when it occurs)

Do you have shell scripting skills?