I want to be able to view the events selected under Notification Services --> Event Sets.

I only recieve Informational. I don't recieve Critical or warnings.

This is the only info message I get--

ALERT ID = 00000UE

TIME = Fri 04-Apr-2008 10:52:17 PST

STATUS = Active

SEVERITY = Informational

MANAGED OBJECT = 10.10.0.1

MANAGED OBJECT TYPE = Switches and Hubs

EVENT DESCRIPTION = 10.10.0.1: Cisco Configuration Management Trap:InformAlarm; 10.10.0.1: Authentication Failure:MinorAlarm;

I see the info in Cisco works for:

13. 10.10.0.1 10.10.0.1 Apr 04 2008 10:34:41 EC 5 UNBUNDLE Interface GigabitEthernet1/4 left the port-channel Port-channel2

What am I missing to get critical and warnings sent to me.

As I said, DFM does not do anything with syslog messages. You will never see "EC 5 UNBUNDLE Interface GigabitEthernet1/4 left the port-channel Port-channel2" in DFM.

If you're not seeing Critical or Warning alerts/events in DFM, then there is probably nothing wrong with the devices, or your thresholds have not been tuned correctly.

See http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_device_fault_manager/3.0/user/guide/Events.html for a list of the events DFM can generate, and figure out if any of those events are currently relevant. If so, what events should you be receiving which you are not?

So we tested and unresponsive email does respond when the switch it shutdown.

I wish there was somthing clearer on setting up Syslog errors being sent to email.

I could use a example..... :-(

Thanks for all the help!

It's very easy. Go to RME > Tools > Syslog > Automated Actions. Click Create. Select the specific devices you care about, or keep the default of "All devices". Then give your AA a name, and click the Select button to choose the syslog messages you care about. If you do not see your message in the list, cancel the select pop-up, and click the Add button.

If you have to use the Add button, fill in the various fields, using a '*' to indicate match anything. For example, for a %EC-5-UNBUNDLE message, fill in the following:

Facility : EC

Sub-facility : *

Severity : 5

Mnemonic : UNBUNDLE

Description : *

Finally, configure your AA to be an E-mail action, and specify the recipient address(es). You can use variables $D and $M in the body of the message to represent the device and the message respectively. For example, your body could be:

Syslog messages received from $D:

$M

Joseph,

I tried the $D and $M variables, but I think it does not work. Please see enclosed file.

The $M and $D have not worked for a long time.  Please start a new thread with your specific version of LMS.