Generate Email on Sup failover link downs etc..

Unanswered Question
Feb 17th, 2009


New to Mars and starting to understand the framework. Has anyone had success looking for linkup link down just on Gig or portchannel links? Or looking for sup failovers to generate events to email? Also I am trying to see how I can look at the graph for resources of CPU/Mem & interface and can seem to find them. I am running 6.x code.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
rajett Tue, 02/17/2009 - 07:25

Getting those messages depends on the logging level. If it's too high, you won't see the link up/down messages. You may need to adjust the logging levels on the device to get the appropriate logs sent to MARS.

Run a query on raw messages from that specific device and look for the link up/down messages you seek. Once you find them with a query successfuly you can create a rule. Define an action on that rule to send an email when it fires.

Just be careful to construct the rule so it fires on the link up/down messages you want and not all of the link up/down messages generated by the device. Also make sure to specify the device you want and not just look at all link up/down events from all devices. If you have edge switches reporting to MARS you do not need to know everytime a workstation reboots or powers off/on. ;)

moles3144 Tue, 02/17/2009 - 08:05

Tthanks for the response I assume the same methodology applies to sup failover? Also is there anyway to look at the resource stuff per device?

rajett Tue, 02/17/2009 - 09:00


MARS will alert you to problems if it's a supported device for monitoring health information - CPU/Memory utilization, etc - but it's not a full blown link monitor.

Yes, force a failover and check the raw logs from the devices for the message that is sent. Create a rule to fire when that message is seen.

If that message is an unknown event you'll need to extend the native parsing with custom parsing entries. This capability is available in the 6.x software set.

moles3144 Mon, 02/23/2009 - 12:32

Can you tell me if the 6509 should be entered in as a device of Cisco 12.2 Switch or Cisco IOS 12.2


This Discussion