VMS Security Monitor Event Rules - Email Script Question

h-schupp · ‎02-15-2008

Reference: "Configure E-mail Notifications with Scripts for IDS Alerts Using CiscoWorks Monitoring Center for Security"

http://www.cisco.com/en/US/customer/products/hw/vpndevc/ps4077/products_configuration_example09186a00801fc770.shtml#fivesensor

Good day all -

I have created the Email Notification process as desribed in the linked article. The script runs as expected when a High severity alert is triggered but does not fill in the variables within the email body. I have double-checked that I have the right version of the script for the sensors that we are using. Has anyone else been working with this (or some other) scripting solution and maybe have a suggestions on what to try next?

irisrios · ‎02-21-2008

Try the configuration available at the URL http://cisco.com/en/US/docs/security/security_management/vms/security_monitor/2.2/user/guide/ch05.html.

h-schupp · ‎02-21-2008

This one solved itself and the notifications now contain all the variable data expected. Don't know what fixed the issue but the server running VMS was restarted later that day at some point after I sent the post for this problem. Since the reboot it has been working fine. hps