Event logs/Email notification

[chrisv]

If this question has been already answered I apologize for repeating the question again.

Is there an easy way to automatically email the contents of the event logs on an IDS?

In other words, for audit purposes, I would like to receive email notifications (once per day) containing a list of shuns executed by the IDS.

If there is another way to do this please let me know.

Thank you in advance.

[yusuff]

If you are using Cisco Secure Policy Manager (CSPM) to manage the IDS, then following document will you through step-by-step instructions on how to configure Email notification.

http://www.cisco.com/warp/public/707/idsemailcspm_6155.html

BTW, the email notification is trigger for alarms that it receives from an IDS and does not provide shunning report.

HTH

R/Yusuf

[chrisv]

Thank you Fahim,

I am successful in creating alarm notifications. I just wanted to have a neat shunning report as well. I know I can view the event logs on the IDS. However, it would be nice to have such a report emailed. Has anyone been successful in doing this?

Thank you,

Chris