I currently monitor Exchange Server White Space by using Windows Log Forwarder to Orion Syslog Server. This monitors Event ID 1221 and sends me an email everytime the Exchange maintenance routine runs. I'd like to cut down on receiving an alert everytime and instead use a syslog rule to only alert if the White space falls below a given value (MB's).
The message i have to work with is as follows;
05/04/2013 06:00 :
Apr 05 06:00:00 MyServer.mydomain.local MSWinEventLog 6 Application 3 Fri
Apr 05 06:00:00 2013 1221 MSExchangeIS Mailbox Store N/A Information MyServer.MyDomain.local 6 The
database "First Storage Group\Mailbox Database" has 8343 megabytes of free space after online defragmentation has terminated.
I'm presuming Syslog server can do this but struggling to find any good articles or knowledge bases.
Any help/advice would be greatly received.