I don't think you can do this via the standard alerts function (because all log messages are grouped into the one "msg" test). However, you might be able to do what you want if you call a script and have the script examine the message content and then send the email to the proper user.
GLH
On 9/10/09, Camelia Anghel <canghel at cjh.org> wrote:
Hello,
This is how my hobbit-client.cfg and hobbit-alerts.cfg look and I would like to send the first LOG to some users and the second LOG to different users.
How do I send an alert based on a warning expression?
Hobbit-client.cfg
HOST=myhost.org
LOG /var/log/messages %failure*|%failed*|%error*|%Warning* COLOR=red
LOG /var/log/www_server_4881.log %exceeded* COLOR=red
Hobbit-alerts.cfg
HOST=myhost.org
MAIL user at something.org SERVICE=msgs REPEAT=30m COLOR=redRECOVERED
Any help, suggestion will be appreciated
Thanks,
Camelia Anghel
canghel at cjh.org
-- Disclaimer: 1) all opinions are my own, 2) I may be completely wrong, 3) my advice is worth at least as much as what you are paying for it, or your money cheerfully refunded.