cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
530
Views
0
Helpful
3
Replies

sysloganalyzer LMS 3.2 limited number of emails

greenphp1
Level 1
Level 1

we have setup sysloganalyzer in LMS 3.2 and alert us via email when certain syslog messages are received.

However our email are flooded with tonnes of email. Is there any way to place a limit say 3 alerts from sysloganalyzer. The switches will still generate similar syslog message, however, we want LMS 3.2's sysloganalyzer to only send 3 emails. This is to prevent our email from flooded.

thanks

3 Replies 3

Joe Clarke
Cisco Employee
Cisco Employee

No, there is no way to rate limit emails from RME using the built-in email action.  However, if you are comfortable with scripting, you could set the action type to script, then build a script which can do the rate limiting, then send the email only if the number of messages is below your desired threshold.

Thanks for the update.

Is there an example script to rate-limit the emails send from SyslogAnalyzer?

Can advise how to code this script? Using Perl?

I do not know of any such scripts.  Yes, I would think using Perl would be easiest, but any scripting language would work.  From a high level, you would have some kind of database (a flat file would probably do) which tracks the last time an email was sent for a specific message.  If another message arrives within the supression time, then you skip sending the email.  Else, you send the new email, and reset the last sent time.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: