I have CW2k 4th ed. with RME 3.3.
In the Syslog Analysis i've been trying to create an Automated Action that runs a perl script. The problem is that nothing happens!
The filter i specify is *-*-*-* which should trigger on all mesages? I've also tried a filter with SYS-*-5-CONFIG_I which should trigger on all the config changes.
The syslog messages is inserted in the syslog.log file, but the action is not triggered.
The command line i specify is "perl x:\script\test.pl"
Can anyone help me?
Here's one that works for me. I had to add the specific path for the script because it didn't work with a path variable when called from CW2k:
I also had to add the "-sender" field because qmail refused to forward, and bounced it, without it...our email police said something about rfc compliance.
Try something besides perl to eliminate that first. Try a script/batch file that creates a file or "dir > c:\test.txt".
If you find the file, you know the event is being triggered, and you can work on the balance of the problem (perl script, pathing, etc).
I'm assuming you can see the events you are trying to trigger on coming in to CW2k and the \CSCOpx\log\syslog.log log file, right?
I did try to run a batch file, but nothing happens. The syslog.log file is updated with the correct events.
As far as I can see, the problem is the trigger/filter. I have also tried to disable and enable the actions, and restarted the sysloganalyzer.
In addtion to being in the syslog.log, is there an entry in RME syslog analyzer for that device/message?
Resource Manager Essentials->Syslog Analysis->Standard Reports
select device you are getting messages from, and generate the report. Does the syslog message show up in that report?
What OS do you use? I suppose it is Win2k. TAC has confirmed to me that there are problems with automatic actions on Win2k as the environment is not passed on properly. So some things run, others don't.
Here's 3 that work for me. Two for catalyst, one for websense not responding to pix.