I have an eem script that i want to alert on a syslog event and then send an email. The script is:
event manager applet syslog-alert
event syslog pattern “.*%IDS-6-.*”
action 1.0 mail server "192.168.1.2" to "xuser1@domain.com" from "xuser2@domain.com" subject "IDS Alert"
action 1.1 syslog msg "IDS alert has been sent to email server!"
I get the below error when ran:
*Apr 6 15:38:27.222 CST: %HA_EM-6-LOG: ids-alert : DEBUG(smtp_lib) : smtp_connect connect fail 260
*Apr 6 15:38:27.222 CST: %HA_EM-6-LOG: ids-alert : DEBUG(smtp_lib) : fh_smtp_connect callback timer is awake
*Apr 6 15:38:27.222 CST: %HA_EM-3-FMPD_SMTP: Error occurred when sending mail to SMTP server: 192.168.1.2 : timeout error
*Apr 6 15:38:27.694 CST: %HA_EM-6-LOG: ids-alert : DEBUG(smtp_lib) : smtp_connect connect fail 260
*Apr 6 15:38:27.694 CST: %HA_EM-6-LOG: ids-alert : DEBUG(smtp_lib) : fh_smtp_connect callback timer is awake
*Apr 6 15:38:27.694 CST: %HA_EM-3-FMPD_SMTP: Error occurred when sending mail to SMTP server: 192.168.1.2 : timeout error
*Apr 6 15:38:28.838 CST: %HA_EM-6-LOG: ids-alert : DEBUG(smtp_lib) : smtp_connect connect fail 260
*Apr 6 15:38:28.838 CST: %HA_EM-6-LOG: ids-alert : DEBUG(smtp_lib) : fh_smtp_connect callback timer is awake
*Apr 6 15:38:28.838 CST: %HA_EM-3-FMPD_SMTP: Error occurred when sending mail to SMTP server: 192.168.1.2 : timeout error
*Apr 6 15:38:29.142 CST: %HA_EM-6-LOG: ids-alert : DEBUG(smtp_lib) : smtp_connect connect fail 260
*Apr 6 15:38:29.142 CST: %HA_EM-6-LOG: ids-alert : DEBUG(smtp_lib) : fh_smtp_connect callback timer is awake
*Apr 6 15:38:29.142 CST: %HA_EM-3-FMPD_SMTP: Error occurred when sending mail to SMTP server: 192.168.1.2 : timeout error
Can this be done to a mail server that requires authentication? Or do i have to have one that doesn't do authentication?
