Submit a ticketCall us

Solarwinds & Cisco Live! Barcelona
Join us from the 29th of January to the 2nd of February at Cisco Live 2018 in Barcelona, where we will continue to show how monitoring the network with SolarWinds will keep you ahead of the game. At our booth (WEP 1A), we will demonstrate how SolarWinds network solutions can help. As a bonus, we are also hosting a pre-event webinar - Blame the Network, Hybrid IT Edition with our SolarWinds Head Geek™, Patrick Hubbard on January 24th - GMT (UTC+0): 10:00 a.m. to 11:00 a.m. There's still time to RSVP.

Home > Success Center > Kiwi Syslog Server > Kiwi Syslog Server Getting Started Guide > Create rules to process messages > How rules work

How rules work

Table of contents
Kiwi Syslog Server Getting Started Home

Rules determine what actions Kiwi Syslog Server takes when it receives a message. For example, you can create rules to:

  • Log all messages to a file.
  • Send an email if the message has a high priority level.
  • Run a script if the message includes specific words or phrases.

Rules consist of the following elements:

  • Filters determine which messages are acted on. If a rule does not include any filters, all messages are acted on.
  • Actions determine what happens when a message passes all of the filters.

You can define up to 100 rules. Each rule can include up to 100 filters and 100 actions. When a message is received, rules are applied to the message in order, starting with the rule at the top of the list.

When a rule is applied to a message:

  1. The message is matched against each filter in that rule, starting with the filter at the top of the list.
    • If the message passes a filter (all conditions in the filter return TRUE), it is matched against the next filter in that rule.

    • If the message does not pass a filter, processing stops for that rule and Kiwi Syslog Server applies the next rule.

      File:Success_Center/Reusable_content_-_InfoDev/Kiwi_Syslog_Server_GSG/GS_MT/030/010/gs-rules-processing-flow.png

  2. If the message passes all filters, each action is performed. Actions are performed in order, starting with the action at the top of the list.

    When all actions within that rule have been performed, Kiwi Syslog Server applies the next rule.

    File:Success_Center/Reusable_content_-_InfoDev/Kiwi_Syslog_Server_GSG/GS_MT/030/010/gs-rules-processing-flow2.png

Learn more

To learn more about configuring rules, see the examples in the following topics. You can add rules to:

Last modified

Tags

Classifications

Public