On 21/04/2015 15:24, tzwaj wrote:

> What is the easiest way to alert on certain events in the message file?
> For example "Accepted keyboard-interactive/pam for xxxx"
> It is ok to e-mail when it happens.


Which version of SUSE Linux Enterprise Server (SLES) are you running?
Please post the output from "cat /etc/*release".

There are a few options though some depend on the version of SLES. One
option could be to use syslog-ng (SLES11 and earlier), another is Nagios
or some other monitoring system.

HTH.
--
Simon
SUSE Knowledge Partner

------------------------------------------------------------------------
If you find this post helpful and are logged into the web interface,
please show your appreciation and click on the star below. Thanks.
------------------------------------------------------------------------