Ok, I will try and explain as best I can how this is setup. I am receiving Syslog messages on the same Cirrus box using Orion Syslog server.
I have real time alerts enabled in Cirrus. I have a rule in the syslog server:
Message Type Pattern: %SYS-5-CONFIG_I:* (Tried with and without the *)
Alert Actions: "C:\Program Files\Solarwinds\Configuration Management\ConfigAutoDownload.exe" ${IP}
Have tried with and without quotes.. Even hardcoded the IP to the device I am testing with and no luck.. It's like the action is not firing or the alert is not working...
I can from a command prompt do C:\Program Files\Solarwinds\Configuration Management\ConfigAutoDownload.exe 10.bbb.ccc.ddd and I get a proper email alert... So what am I doing wrong?
Thanks
Try editing the properties of the "Solarwinds Syslog Service" and changing the "Log on as" information from local system to the credentials you are using when you run the command from the command prompt.
Turns out I was trying to match a string in a syslog message that started with a % As soon as I removed the % sign it worked.. Must be some sort of reserved symbol.
I am also having trouble with RTCD. I had it working for about a week, but now I get no email when I make a config change. We are 100% cisco. I am also setting this up based off of snmp traps, not syslog. I had it working by setting up my trap rule according to a suggestion from a thwck user in another forum regarding the smae topic. My trap rule looks like this:CISCO-CONFIG-MAN-MIB:ccmHistoryEventConfigDestination "is equal" to 3CISCO-CONFIG-MAN-MIB:ccmHistoryEventCommandSource "is equal" to 1
The executable is correct as well. I dont want to ype the whole thing out.
This worked for about a week. Then all of the sudden, stoped.
Then I tried another snmp trap rule that staes:SNMPv2-MIB:snmpTrapOID is equal to CISCO-CONFIG-MAN-MIB:ciscoConfigManEvent
No luck on that one. RTCD seems like a great idea,.. but I notice ALOT of SolarWinds customers are stuggeling with this (me being one of them) and SW support does not seem to be in a rush to help them out. (As the lack of any SW staff responding to the NUMEROUS threads regarding RTCD.
Mike, please submit a ticket to support so we can track this properly and gather the appropriate log files to diagnose. We're absolutely committed to getting RTCD working for you again.
hi,
sorry to hijack your thread,
i have RTCD working, but only for one device, what wildcard string can i use, so i get emails from any device?
i did have
"C:\Program Files\SolarWinds\Configuration Management\ConfigAutoDownload.exe" 10.x.x.x
and now
"C:\Program Files\SolarWinds\Configuration Management\ConfigAutoDownload.exe" ${IP}
would that be right
EDITED to add
it was, and it's working ok now :)