Hi Jochen I cannot create exceptions alerts via email, because in the messages, that I get from the Cisco switch there is no source IP.
This is a user's access to the Cisco switch: 23] at 09:20:08 CET Tue May 10 2016 *Thank you so much for your support* *Seba* On Friday, May 6, 2016 at 11:47:14 AM UTC+2, Seba wrote: > > *Dear all,* > > > > > *How can I set a streaming rule, in order to not send a notification, when > access to the switch is not coming from known IP’s? My Cisco Catalyst 3750X > doesn’t add the source IP in the notification for logins, but it does when > somebody modifies the settings.* > > > > *I have been trying to find a solution for the last few days without > success. * > > > > *Thank you so much for your support* > > *Seba* > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/1fe54897-873a-4221-8a81-5b1eff84102c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
