It's even easier than that, the functionality exists inside rsyslog. All you have to do is set up a template in /etc/rsyslog.d and point it towards a mail relay

It's even easier than that, the functionality exists inside rsyslog. All you have to do is set up a template in /etc/rsyslog.d and point it towards a mail relay... if $syslogseverity <= 3 then { action(type="ommail" server="127.0.0.1" port="25" mailfrom="rsyslog@localhost" mailto="root@localhost" subject.template="mailSubject" template="mailBody" action.execonlyonceeveryinterval="3600") } While I generally like to dump all logs into elasticsearch/opensearch, it's also really handy to have this set up for one-off machines so that critical/error logs that usually come from things breaking & restarting still get seen. https://docbot.onetwoseven.one/services/syslog/ https://docbot.onetwoseven.one/services/syslog/