12-29-2009 05:31 AM
I want syslog to send me an email message when a user enter priviledge mode.
Ive enable syslog on my switch (3560-8PC)
logging on
logging (CW serverIP>
logging facility local7
logging trap
service timestamps log datetime msec localtime show-timezone.
I can see the logging history on the switch.
Ive automated syslog action on CW
Name: | syslogcapture |
Devices: | <Switch IP> |
State: | Enabled |
Parameters: | TO=john.smith@gmail.com, SUB=syslog capture on CW, TEXT= |
Action Type: | |
Messages: | MGMT-*-7-*:LOGINPASS MGMT-*-6-*:ENABLEPASS |
WHy it isnt working?
Thanks you in advance for your guidance.
12-29-2009 06:31 AM
It's because "logging trap" defaults to "logging trap informational". Changing it to "logging trap debugging" should do the trick, assuming your RME Automated Actions are otherwise already working fine on "informational" syslogs.
12-29-2009 09:04 AM
Hi,
No, the RME automated action for info sylog doeswnt work either. Is there anything else I need to setup on CW?
In my syslog portal, it says " No data is available"
What else can I check? thanks for your help
12-29-2009 10:29 AM
Where is this "syslog portal" you were referring to? Is it at RME -> Tools -> Syslog -> Syslog Collector Status ( http://server-name:1741/rme/SyslogCollectorStatus.do )? If not, what does Syslog Collector Status show currently?
What version of RME are you using? What OS is LMS on?
What "process state" are SyslogAnalyzer and SyslogCollector in, at Common Services -> Server -> Admin -> Processes ( http://server-name:1741/cwhp/processMgt.do )?
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: