audit.ini [AlertRule_chain_broken] #

The block [AlertRule_chain_broken] of settings/audit.ini, with 4 setting(s).

Never edit settings/audit.ini itself: an update replaces it. Put the settings you change in an override, which wins over the shipped file:

• settings/override/audit.ini.append.php for every siteaccess,
• settings/siteaccess/<siteaccess>/audit.ini.append.php for one siteaccess,
• extension/<extension>/settings/audit.ini.append.php in an extension (read when the extension is active).

Class #

Default: match.

<?php /* #?ini charset="utf-8"?
# settings/override/audit.ini.append.php
[AlertRule_chain_broken]
Class=match
*/ ?>

Event #

Default: system.audit.chain.broken.

<?php /* #?ini charset="utf-8"?
# settings/override/audit.ini.append.php
[AlertRule_chain_broken]
Event=system.audit.chain.broken
*/ ?>

Severity #

Default: alert.

<?php /* #?ini charset="utf-8"?
# settings/override/audit.ini.append.php
[AlertRule_chain_broken]
Severity=alert
*/ ?>

Sinks #

Default: a list of 2: syslog, mail.

<?php /* #?ini charset="utf-8"?
# settings/override/audit.ini.append.php
[AlertRule_chain_broken]
# an empty "Sinks[]" first replaces the shipped list; without it the items are added
Sinks[]
Sinks[]=syslog
Sinks[]=mail
*/ ?>

Related #

• All blocks of audit.ini
• All INI files
• The settings page

Generated by ./console exp:help:examples from settings/audit.ini. Do not edit this page: change the source and generate again (how). Free documentation: GFDL 1.3 or later.