This morning a "Cisco Configuration Management Trap" email message was generated:
EVENT ID = 0002VPH
ALERT ID = 00002ZT
TIME = Wed 20-Aug-2008 08:35:38 CEST
STATUS = Active
SEVERITY = Informational
MANAGED OBJECT = 6506switch.domain.local
MANAGED OBJECT TYPE = Switches and Hubs
EVENT DESCRIPTION = InformAlarm::Component=6506switch.domain.local: Cisco Configuration Management Trap;
CUSTOMER IDENTIFICATION = All devices
CUSTOMER REVISION = 1
When I try to isolate this message in ACS server or in a CW change audit report, no results pop-up.
Also when I run a Syslog Analyzer Configuration Changes Report, no results for that specific time (08:35:38) seem to be there (see attachment).
I can not explain this message, I edited the switch name and username, but all the rest is genuine.
How is this possible, is this a bug in CW or could this be some kind of virus or else that configures the switch? Please help me out here, 1000 thankx ;-))