Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

Event Rules for postofficed application

Hi,

If you look in Event viewer, there is alarms sent by packetd but also by postofficed (Have Traffic, Route Up...). Is there a way to define an event rule for postofficed event (like sending an email ????)

thx

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: Event Rules for postofficed application

PostOffice alarms have SigId's as follows:

993 - Missed packets (sensor is usually oversubscribed)

994 - Seeing traffic on monitoring interface

995 - No traffic on monitoring interface

996 - Route Up

997 - Route Down

998 - Daemon Down

999 - Daemon Unstartable

3 REPLIES
Cisco Employee

Re: Event Rules for postofficed application

Actions like sending an email are handled on the management application side. So either CSPM, Unix Director, or Security Monitor (VMS) would have to be configured to execute the action. Each of these management applications treats the postoffice generated alarms just like the packetd generated alarms. If you base the action on severity of the alarm then that severity packetd alarm and postoffice alarm will trigger the action. If you base the action off the Signature ID (supported in Security Monitor) then you simply use the signature IDs of the postoffice alarms.

NOTE: I have tested this with CSPM and Unix Director, but not Security Monitor, but I would assume it works the same.

Community Member

Re: Event Rules for postofficed application

Well,

there is two problems:

* Either you use the severity (high) and of course this will flood your mail server for all alarms generated by packetd application at high level

* Either you use the SigId... but there isn't SigId for postofficed alarms...

Cisco Employee

Re: Event Rules for postofficed application

PostOffice alarms have SigId's as follows:

993 - Missed packets (sensor is usually oversubscribed)

994 - Seeing traffic on monitoring interface

995 - No traffic on monitoring interface

996 - Route Up

997 - Route Down

998 - Daemon Down

999 - Daemon Unstartable

95
Views
0
Helpful
3
Replies
CreatePlease to create content