Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

"custom event creation"

Hi all

I would like to recieve a mail everytime the user pnadmin logs in (that is not just any admin but pnadmin).

I can not find an event type under "info/misc/cs-mars" matching this.

Is it possible to create (or modify an existing) a custom eventtype in Mars?

How is this done?

looking forward to any answer

/JanV - Infrastructure

2 REPLIES
Cisco Employee

Re: "custom event creation"

Jan;

  To generate an incident for just successful pnadmin user logins it would be most effective to create a rule based on a keyword query limited to your CS-MARS as the reporting device.  If you are interested in any pnadmin activity, you could use just 'pnadmin' as the keyword; this should catch both successful and failed logins.  If you want to restrict it to successful pnadmin logins, you could use two keywords ANDed together; 'pnadmin' and 'login successful'.  By making this a rule you can assign the email action to be alerted when this rule fires.

Scott

New Member

Re: "custom event creation"

Scott - your answer was very helpfull!

Thanx a lot! ! !

/Jan - KS-Infrastructure

Denmark

342
Views
4
Helpful
2
Replies