Email immediately on recept of syslog messages configured in alert

[Kevin_Krumm]

@CDawson1

he polling interval shouldn’t apply I’d think as syslog is being received constantly. As such, I’m keying on a specific syslog message for my rule, not a state change discovered from a poll. Our polling interval has been reduced to two minutes anyway to better improve some things, but I don’t like the event log.

Let me setup another test and should that have the same issue, I’ll fire up the rule in question.

Polling dose apply because that’s when the alert rules are being ran against the devices and syslog.