.N Sendmail_BrokenPipe_Messages 	#Policy Name
.L 2 	#Policy structure
.D This policy detects sendmail broken pipe error messages sent to syslog. 	#Policy Description
.V 1015487038 	#Policy revision number
.Z 361 	#Policy ID
.Z 361 	#Policy ID
.R Sendmail_BrokenPipe_Detected 	#Rule Definition
..D This rule generates an event when sendmail broken pipe error messages are sent to syslog. 	#Rule Description
..Z 360 	#Rule ID
..V 90 	#Rule Value
..S 	#Select Clause(s)
...B Flag 	#Flag(S)
....I 381	#ID list
....F 381,{Flag Count}=5	#Flag list
....Z 382 	#ID of the clause
..A  	#Action Clause(s)
...E Record to Event Viewer 	#Record Event
....Z 378 	#ID of the clause
.R Sendmail_BrokenPipe_Flag 	#Rule Definition
..D This rule generates a flag when sendmail broken pipe error messages are sent to syslog. 	#Rule Description
..Z 379 	#Rule ID
..V 0 	#Rule Value
..S 	#Select Clause(s)
...G System Message 	#System Message
....T *data written to a pipe* 	#Regular text
....T *sendmail*250*@*Broken pipe* 	#Regular text
....C 0 	#Case sensitivity
....Z 380 	#ID of the clause
..A  	#Action Clause(s)
...B Sendmail_Detected 	#Raise Flag
....L 60 	#Lifetime of flag
....Z 381 	#ID of the clause