duplicate syslog

Unanswered Question
Mar 3rd, 2008
User Badges:

Hi, all


Now we use LMS2.6,RME 4.0.5 to send out syslog mail. In common case, it works well. But when some syslog consecutively sent out from devices, we will also get syslog mail full of our mailbox. Especially, if some incident happens in the evening, we have to wait a long time to receive the mails in the next morning. mail body like below:

1.

Dear CW2k User,

Syslog message generated from device SIA-DT-28-CS2960-2: Feb 29 11:22:40 139.24.209.3 222: 000220: Feb 29 11:19:46.449: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 000f.1faa.ed8b on port FastEthernet0/13.

2. Syslog message generated from device SIA-DT-28-CS2960-2: Feb 29 11:22:40 139.24.209.3 223: 000221: Feb 29 11:19:51.767: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 000f.1faa.ed8b on port FastEthernet0/13.

3. Syslog message generated from device SIA-DT-28-CS2960-2: Feb 29 11:22:40 139.24.209.3 224: 000222: Feb 29 11:19:57.010: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 000f.1faa.ed8b on port FastEthernet0/13.


such information is helpful for us, so we have to send such syslog in mail, but we just want one mail for it, it's enough, any idea?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Joe Clarke Mon, 03/03/2008 - 20:09
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

RME doesn't do any de-duplication of syslog messages. All the messages sent from the device will spawn the automated actions.


I do agree that this feature would be useful to have. You should ask your account team to open a product enhancement requesting this feature.

ly633 Mon, 03/03/2008 - 21:11
User Badges:

thanks a lot for your confirmation

Actions

This Discussion