Welcome, Guest. Please login or register.

Author Topic: Uplinkport Check for Syslog  (Read 5466 times)

steto

  • Guest
Uplinkport Check for Syslog
« on: April 27, 2010, 03:57:55 PM »
Hello,

we now try NEDI for monitor our network, is there a function for the Syslog-Server to create incidents for the Uplinkports?

We use only Cisco switches in our network and i have read in the Forum that there is no possibility to handle such things with the SNMP traphandler.
For now we only get the message for the portstatus, but not that there is an Uplinkport down. And its not a Critical Error for NEDI.

Thx

rickli

  • Administrator
  • Hero Member
  • *****
  • Posts: 2542
    • View Profile
    • NeDi
Re: Uplinkport Check for Syslog
« Reply #1 on: April 27, 2010, 07:42:02 PM »
Link protocol changes can generate messages like this (if set in nedi.conf with notify) :

Linkchange from CDP detected on Fa0/2!

You could search for these in Messages, but automatic Emails are not supported yet. A similiar "notify" parameter like n/N would probably work :) I consider this, if time permits...
« Last Edit: April 27, 2010, 10:45:04 PM by rickli »
Please consider Other-Invoices on your NeDi installation for an annual contribution, tx!
-Remo

GuyMontag

  • Guest
Re: Uplinkport Check for Syslog
« Reply #2 on: April 29, 2010, 02:13:43 PM »
are your switches reporting to a syslog server?
if it is syslog-ng you could try:

syslog-ng.conf

set a filter (replace with your filter criteria)
Code: [Select]
filter f_extusr_invalid {
        match("External user not found");
};
or a more restrictive one
Code: [Select]
filter f_backupACS_passedAuth {
        netmask("xxx.xxx.xxx.xx/xx")
        and match("PassedAuth")
        and not match("nagios");
};

define a destination
Code: [Select]
destination d_nagios_crit_ACS {
        program("/usr/local/bin/send_syslog.sh"
        template("$HOST;syslog-acs;2;CRITICAL: $MSG\n") template_escape(no));
};
where $HOST an $MSG is a syslog variable for the sending host and received message

program is the program to execute (e.g. mail) and template defines the parameters it takes

and now put them together

Code: [Select]
log
{
        source (s_udp);
        filter (f_extusr_invalid);
        destination (d_nagios_crit_ACS);
        destination (nagios_output_filter);
};

Sry I haven't got a link with further information for syslog config as a got this things from Wolfgang Barths
Nagios: System and Network Monitoring

But I would use a "real" monitoring tool like nagios to monitor my network.

steto

  • Guest
Re: Uplinkport Check for Syslog
« Reply #3 on: April 30, 2010, 11:03:25 AM »
Hello,

no till now there is no monitoring and no syslog-server.
we want to test NEDI cause of it's features, like the autodiscovery and the device-write.

thx for your tips i will try them!

 

rickli

  • Administrator
  • Hero Member
  • *****
  • Posts: 2542
    • View Profile
    • NeDi
Re: Uplinkport Check for Syslog
« Reply #4 on: May 03, 2010, 11:38:33 PM »
1.0.6 will have new l/L notify options in nedi.conf:

# l/L   links      linkchanges, L also sends mail
Please consider Other-Invoices on your NeDi installation for an annual contribution, tx!
-Remo