Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Change audit - config alterations

I have Ciscoworks LMS2.5 on a windows 2k server. I would like all config changes to be emailed once a week. I have snmp enable traps config & logging syslog facility pointing to my Ciscoworks sever.

Where does Ciscoworks show these logs/changes and how can I automate the email delivery of these logs? RME>reports>Change audit and syslog seems to be the closest thing. Any advice is much appreciated.

Thanx in advance.

4 REPLIES
Bronze

Re: Change audit - config alterations

You can manage report jobs using the Reports job browser. You can also view the output of completed jobs, stop running jobs or delete jobs if required.Refer the following URL

http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/cw2000/cw2000e/e_4_x/4_0/u_guide/reports.htm

Silver

Re: Change audit - config alterations

Indeed what you should use is the change audit report.

it has an option to limit it to config changes only.

It can be scheduled, but in their infinite wisdom the ciscoworks developers have deciced to close a security breach and therefore you can no longer send reports via mail.

So what you get is a url to the report so you will have to log on before seeing the report.

Cheers,

Michel

New Member

Re: Change audit - config alterations

Thanks for the reply Michel.

I have created a report from change audit, selected the standard report, selected all devices then chose the CONFIG_CHANGE catergory. When I get the results emailed to me I cant view the files it says "file cant be opened as this could be a binary file".

Also, how detailed is the config change audit? I say this as the test I implemeneted produced a lot of results for such a small period of time - 24 hrs??

Any advice?

Silver

Re: Change audit - config alterations

Yes there is a vlan.dat file that changes very often. You may need to make RME stop monitoring those changes.

Under RME -> Admin -> ChangeAudit -> Config Change Filter

I guess the file changes whenever a counter in the VTP goes up so it's not a relevant, change but I haven't been able to get an answer from cisco on this.

I think it should show a page where you can do a diff with the previous config version.

Cheers,

Michel

174
Views
12
Helpful
4
Replies
CreatePlease login to create content