On 21/04/2015 15:24, tzwaj wrote:

> What is the easiest way to alert on certain events in the message file?
> For example "Accepted keyboard-interactive/pam for xxxx"
> It is ok to e-mail when it happens.

Which version of SUSE Linux Enterprise Server (SLES) are you running?
Please post the output from "cat /etc/*release".

There are a few options though some depend on the version of SLES. One
option could be to use syslog-ng (SLES11 and earlier), another is Nagios
or some other monitoring system.

SUSE Knowledge Partner

If you find this post helpful and are logged into the web interface,
please show your appreciation and click on the star below. Thanks.