Due to the ever changing nature of Cisco SYSLOG, and newer event messages on
newer platforms etc.., we have gone another route on managing syslog alerts.
We are using a logging server to capture syslog, and created a forwarding trap
events via sysedge to spectrum. This may or may not work in all environments,
but this has certainly helped us in the following ways:
= less snmp events being sent and handled to our spectrum server
= allows for broader filter definitions
= allows specific filter definititions
= simpler management of syslog alerts
Depending on your specific logging/alerting requirements for SYSLOG this may be
a viable option.
________________________________
From: Tabarzadi, Shahla [mailto:[email protected]]
Sent: 2009, August, 31 10:17 AM
To: spectrum
Cc: spectrum spectrum
Subject: RE: [spectrum] Can any one help:I need your thoughts and eys.
Yes, but I filter 0x21001a and 0x21001b. As you know both of these events are
syslog traps and they carry different info. I just want to get rid of port
discard and supervisor error
________________________________
From: Christian Schneider [mailto:[email protected]]
Sent: Monday, August 31, 2009 10:14 AM
To: Tabarzadi, Shahla
Cc: spectrum spectrum
Subject: Re: [spectrum] Can any one help:I need your thoughts and eys.
You can filter it with the filtersettings in your OC..
Regards
Christian Schneider
Enterprise Service Specialist
4-tune GmbH
Sägereistrasse 29
CH-8152 Glattbrugg
Tel +41 71 930 07 00
Fax +41 71 930 07 01
Mob +41 79 418 45 42
Mail <mailto:[email protected]> [email protected]
Am 31.08.2009 um 15:53 schrieb "Tabarzadi, Shahla"
<[email protected]>:
I don't want to display this alarm in my alarm browser but I don't want
to disable 0x21001a and 0x21001b because if I do that, I would lose critical
syslog info.
I did the followings:
bash-3.00# pwd
/opt/spectrum/SS/CsVendor/Cisco_Router
bash-3.00# more Rtr.txt | more
SYS 4 SYS-4-SUPERVISOR_ERR 0xffff0065
SYS 3 SYS-3-PORT_OUT_DISCARD 0xffff0060
bash-3.00# more /opt/spectrum/custom/Events/EventDisp
0xffff0065 E 20
0xffff0060 E 20
bash-3.00# pwd
/opt/spectrum/custom/Events/CsEvFormat
bash-3.00# ls -al | grep Eventffff0060
-rw-rw-rw- 1 root root 80 Aug 28 12:34 Eventffff0060
bash-3.00# ls -al | grep Eventffff0065
-rw-rw-rw- 1 root root 80 Aug 28 13:06 Eventffff0065
bash-3.00# more Eventffff0065
{d "%w- %d %m-, %Y - %T"} - %{S 1}-{T T1_210017 2}-{S 3}:
{S 4}. (event [{e}])
------------------------------------------------------------------------------------------------------
Shahla Tabarzadi
Network & Unified Communications
U.S. House of Representatives
202-226-6266
* --To unsubscribe from spectrum, send email to
<mailto:[email protected]> [email protected] with the body: unsubscribe spectrum
[email protected]
* --To unsubscribe from spectrum, send email to [email protected] with the
body: unsubscribe spectrum [email protected]
_______________________________________________________________________
This e-mail may be privileged and/or confidential, and the sender does not
waive any related rights and obligations.
Any distribution, use or copying of this e-mail or the information it contains
by other than an intended recipient is unauthorized.
If you received this e-mail in error, please advise me (by return e-mail or
otherwise) immediately.
Ce courrier électronique est confidentiel et protégé. L'expéditeur ne renonce
pas aux droits et obligations qui s'y rapportent.
Toute diffusion, utilisation ou copie de ce message ou des renseignements qu'il
contient par une personne autre que le (les) destinataire(s) désigné(s) est
interdite.
Si vous recevez ce courrier électronique par erreur, veuillez m'en aviser
immédiatement, par retour de courrier électronique ou par un autre moyen.
---
To unsubscribe from spectrum, send email to [email protected] with the body:
unsubscribe spectrum [email protected]
