cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
460
Views
0
Helpful
5
Replies

Cisco works alerts

ilnaiduccna
Level 1
Level 1

Hi all,

I have Cisco works LMS 2.6 and I am new with this.

My manager want whenever if any one login into the device (one of the core switch) / made some changes then we need to get an Email.

Can somebody help out me.

Regards,

Naidu.

5 Replies 5

Joe Clarke
Cisco Employee
Cisco Employee

Your best bet is to configured a Change Audit automated action to send email on configuration changes. These actions can be configured under RME > Tools > Change Audit > Automated Actions. Choose All for Application, Mode, and User, and CONFIG_CHANGE for category.

Whenever RME detects a config change, an email can then be sent. By using Change Audit, you'll know when configuration changes were made directly on the device as well as through RME.

Hi Joe,

Thanks for your quick respond, here I have small doubts upon that

1. Shall we no need to do anything like any configuration in device?

2. When email comes is it contains all change configuration or just like info.

I need all type of alert notification even if some user loggin & logoff also, Your guide will helps me a lot.

Regards,

Naidu.

If you go with Change Audit automated actions, there is nothing additional that needs to be configured on the device.

The emails will only list a small set of details about the event. For full information (e.g. exactly what changed in the config) you will need to run a Change Audit report from within RME.

Login and logff notifications are not possible with Change Audit. For those, you can use Syslog Automated Actions. You will have to configure the following on the devices:

log on-success log

log on-failure log

That will log login messages only. That will cause the device to generate a message such as:

Dec 31 01:06:47 EST: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: cse] [Source: 172.18.123.99] [localport: 23] at 01:06:47 EST Wed Dec 31 2008

When one logs in. You can then match on this message using RME Syslog automated actions to generate an email. Syslog automated actions can be configured under RME > Tools > Syslog > Automated Actions.

Hi Joe,

I did all the steps & changes as per your suggested but still no go, no eMails coming even some change done also.

Regards,

Naidu.

How were the changes done? Are you sending syslog messages from your devices to LMS?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: