I am trying to setup email notifications with syslog in RME, when syslog messages 0-3 are sent to the syslog collector.
I want to filter the messages LINK-3-UPDOWN, so i setup a Drop message filter with that message. The filter is enabled, but it is not taking effect. I am still receiving LINK-3-UPDOWN email notifications.
Am I missing a step? Or is there a bug?
This is happening with LMS 2.5.1 under windows 2003.
Two things. First, it looks like you've subscribed the same analyzer to this collector twice. The second subscription is set to keep all messages. I would shutdown SyslogCollector, then remove the filters.dat file, then restart SyslogCollector. Assuming you only have one subscription showing up on the Collector Status page, that should resolve this first problem.
Second, your filters will only supress LINK-3-UPDOWN messages for GigabitEthernet and FastEthernet interfaces. If you want to match on all interfaces, you will need to adjust your filters.