plugin_syslog
plugin_syslog copied to clipboard
[Feature request] - When syslog threshold is in use have an option only to return one record
Hey All.
Currently when using the Syslog threshold Syslog will eventually send an open ticket request However, it will list a single record that led to the count so if you have a threshold of 300 there will 300 of the messages stored in the message variable
Below is an example of a threshold set to 10 for a message test you see that the message puts the same message for each occurrence of the message
2022-11-16 16:05:25 - SYSTEM SYSLOG NOTICE: Executing '/tmp/test.sh --desc 'test, test, test, test, test, test, test, test, test, test' --host '1.2.3.4' --items 'test, test, test, test, test, test, test, test, test, test'
It would be nice to either change the behaviour to only send the message once or have the ability to turn this off