Submit a ticketCall us

Putting Your Logs Where They Belong with the New SolarWinds Log Manager for Orion

The new SolarWinds® Log Manager for Orion® finally puts your log data right where it belongs, in the heart of your Orion console. Gain insight into the performance of your infrastructure by monitoring your logs in a unified console allowing you to see a wealth of information about the health and performance of your network and servers.

Reserve a Seat for Wednesday May 23rd 11am CDT | Reserve a Seat for Tuesday May 22nd 10:30am GMT | Reserve a Seat for Tuesday May 22nd 1pm SGT / 3pm AEST

Home > Success Center > Kiwi Syslog Server > Kiwi Syslog Server Getting Started Guide > Create rules to process messages > How rules work

How rules work

Table of contents
Kiwi Syslog Server Getting Started Home

Rules determine what actions Kiwi Syslog Server takes when it receives a message. For example, you can create rules to:

  • Log all messages to a file.
  • Send an email if the message has a high priority level.
  • Run a script if the message includes specific words or phrases.

Rules consist of the following elements:

  • Filters determine which messages are acted on. If a rule does not include any filters, all messages are acted on.
  • Actions determine what happens when a message passes all of the filters.

You can define up to 100 rules. Each rule can include up to 100 filters and 100 actions. When a message is received, rules are applied to the message in order, starting with the rule at the top of the list.

When a rule is applied to a message:

  1. The message is matched against each filter in that rule, starting with the filter at the top of the list.
    • If the message passes a filter (all conditions in the filter return TRUE), it is matched against the next filter in that rule.

    • If the message does not pass a filter, processing stops for that rule and Kiwi Syslog Server applies the next rule.

      File:Success_Center/Reusable_content_-_InfoDev/Kiwi_Syslog_Server_GSG/GS_MT/030/010/gs-rules-processing-flow.png

  2. If the message passes all filters, each action is performed. Actions are performed in order, starting with the action at the top of the list.

    When all actions within that rule have been performed, Kiwi Syslog Server applies the next rule.

    File:Success_Center/Reusable_content_-_InfoDev/Kiwi_Syslog_Server_GSG/GS_MT/030/010/gs-rules-processing-flow2.png

Learn more

To learn more about configuring rules, see the examples in the following topics. You can add rules to:

Last modified

Tags

Classifications

Public