It's probably just me, and my lack of understanding how to make it work...
But I am trying to alert on some keywords in the Syslog messages. The lines vary. For instance the ones I'm particularly interested in are the ones that say "[WARN]", including the brackets. Or others that may say "OFFLINE". Thinking I could hit on just WARN, I've tried a couple different variations.
So I'm sure it's my lack of Regex experience, but can someone help me realize why these notifications aren't working?
BTW: Up/Down notifications are.. so I'm confident that email is set up and working like it needs to be.
Syslog Setup: https://imgur.com/a/aa41d8O
Log Message: https://imgur.com/a/baxsEio