cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
537
Views
0
Helpful
3
Replies

RME syslog automate action not functioning.

baotran09
Level 1
Level 1

I want syslog to send me an email message when a user enter priviledge mode.

Ive enable syslog on my switch (3560-8PC)

logging on

logging (CW serverIP>

logging facility local7

logging trap

service timestamps log datetime msec localtime show-timezone.

I can see the logging history on the switch.

Ive automated syslog action on CW

Name:syslogcapture
Devices:<Switch IP>
State:Enabled
Parameters:TO=john.smith@gmail.com, SUB=syslog capture on CW, TEXT=
Action Type:Email
Messages:MGMT-*-7-*:LOGINPASS MGMT-*-6-*:ENABLEPASS


WHy it isnt working?

Thanks you in advance for your guidance.

3 Replies 3

yjdabear
VIP Alumni
VIP Alumni

It's because "logging trap" defaults to "logging trap informational". Changing it to "logging trap debugging" should do the trick, assuming your RME Automated Actions are otherwise already working fine on "informational" syslogs.

Hi,

No, the RME automated action for info sylog doeswnt work either. Is there anything else I need to setup on CW?

In my syslog portal, it says " No data is available"

What else can I check? thanks for your help

Where is this "syslog portal" you were referring to? Is it at RME -> Tools -> Syslog -> Syslog Collector Status ( http://server-name:1741/rme/SyslogCollectorStatus.do )? If not, what does Syslog Collector Status show currently?

What version of RME are you using? What OS is LMS on?

What "process state" are SyslogAnalyzer and SyslogCollector in, at Common Services -> Server -> Admin -> Processes ( http://server-name:1741/cwhp/processMgt.do )?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: