Search 85,928 posts and 653 resources contributed by 43,536 members or post a topic.

Already Joined? Sign in
Syslog Alert does not work

Page 1 of 1 (2 items) | RSS

rated by 0 users
Not Answered This post has 0 verified answers | 1 Reply | 2 Followers | 425 Views


2 Posts
Points 6
marie12 posted on Sat, Dec 27 2008 10:29 AM
rated by 0 users

 

I need some help, i want to generate an alert based on this syslog message:

%ASA-3-713902: IP = 72.55.11.44, Removing peer from peer table failed, no match!

 

I have tried the following syslog alert, setup, but the alert does not trigger:

Rule is enabled, Source: *, DNS Hostname: *

Message:

Message Type Pattern: *713902*
Syslog Message Pattern: *
(also tried reverse)

Severity/Facility: Everything is checked

 

Please help!

 

 

All Replies


772 Posts
Points 2,440
Thwack MVP
bleearg13 replied on Tue, Dec 30 2008 1:35 PM
rated by 0 users

Is this the first rule listed in the alert configuration dialog box?  Normally, if an alert isn't being triggered, it's because either the match parameters are not being met, or the message is hitting a rule further up in the alerts and getting matched on by that rule instead.

Your patterns look good - you can try setting the Message Type Pattern to ASA-3-713902 and seeing if that works.  Also, check to make sure that the syslog service is running (obvious, I know).  If you move this rule to the top of the list and do the other suggestions, try restarting the syslog service itself to see if that works.

  • | Post Points: 1
Page 1 of 1 (2 items) | RSS

© 2003 - 2010 SolarWinds, Inc. All Rights Reserved.

Who is SolarWinds?

SolarWinds is rewriting the rules for how companies manage their networks. Guided by a global community of network engineers, SolarWinds develops simple and powerful network management software and network monitoring software for networks of all sizes. SolarWinds also offers a network certification program to become a SolarWinds Certified Professional (SCP).

What is thwack?

thwack, SolarWinds online community site, was designed by network engineers, for network engineers. thwack is a vibrant, growing community of more than 30,000 IT pros who share a passion for technology.

Explore Resources, Answers, Templates, and Advice

Download Free Networking Tools

Learn More About SolarWinds Products