cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
397
Views
0
Helpful
1
Replies

Unknown Devices --Query

CSCO10320953
Level 1
Level 1

Hi all,

When i have run the query ,I am geting the unknown device event instead of actual device....what would be problem.

1 Reply 1

rajett
Cisco Employee
Cisco Employee

If the device is showing up AND you are receiving events for it properly, but are still seeing unknown events for it then it's a message that MARS does not support.

If you are running 6.x code then you can use the DSF features to extend a native parser with some custom parser entries to have those messages parsed.

This feature is only available on 6.x code.