RME Syslog Automated Actions with exclude Filter

Dear all,
It's possible to realise a Filter with "exclude string"?
I search how to for Create action for all Severity 2 without "FAN-FAULT" mnemonic...
Best regards

You can create a filter for the FAN-FAULT and select drop to disregard the messages. Ensure for Message Filter type, you select DROP.
http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_resource_manager_essentials/4.3/user/guide/syslog.html#wp1150419

Similar Messages

Ciscoworks RME Syslog Automation Actions

I set up RME several years ago on our Ciscoworks several running LMS 3.2 to notify us on any BGP flaps via email notification.
I noticed the last couple maintenance period where we had perform Circuit work with our ISP's. We haven't received any emails....I verified those
routers are configured to send notifications in the Device Selector and even checked the router logs.
004161: Nov 20 05:04:52 EST: %BGP-5-ADJCHANGE: neighbor X.X.X.X Down BGP Notification sent
004162: Nov 20 05:04:52 EST: %BGP-3-NOTIFICATION: sent to neighbor X.X.X.X 4/0 (hold time expired) 0 bytes
The syslog collector status appears to be normal.....is there anything I need to do the fix this?

Hi,
Are you receiving any emails from your LMS server? If not, navigate to Common Services > Server > Admin > System Preferences to enter your SMTP settings.
Identifying the syslog message is one step but there are more.
AUTOMATED ACTIONS
Set Up
By default, Automated Actions are used to notify via email, using the `sampleEmailScript.pl` as the script to run. If you do not want to use this, you could write or use your own scripts to perform the action that you really want. In this case please note that we do not provide support for any custom scripts if the problem seems to be related to the script that you are using.
You still need the following settings:
1. Select Devices
In *RME > Tools > Syslog > Automated Actions* and click on create and select the devices that you wish to use.
2. Define Message Type
Please give a name to the Automated Action and then click on add to define a message type. In here, please specify the following values:
    Facility: BGP
    Sub-facility: *
    Severity: 5
    Mnemonic: ADJCHANGE
    Description: *
3. Select Automated Action
Select the default script or the script that you wish to use. Please note that this script must be located in the *CSCOpx/files/scripts/syslog* file and needs to have only write/execute permissions for casuser/Administrator in Windows.
This way when a message matching the above is generated, the Automated Action is triggered and this will run the script that you choose and do the commands that it has specified.
Here is an example:
If you verify that your setup is correctly configured then take a look at the smtp.log found under ../CSCOpx/log.
Thanks.

Syslog Automated Action

Hi,
LMS 4.2.3
The syslog automated action work if we send to one e-mail address the messages.
Once we set two email-adresses ( comma separeted ) in "send to field", the messages are not received.
Thanks

One of the logfiles that gives understandable messages mostly. :-)
Cheers,
Michel

Automator action with dropdown to make folders with predetermined names

Is there an action/workflow that will allow me to create Folders using a dropdown menu of predetermined names for those folders?

I haven't seen one, and since no one has posted about one yet, I'll throw this out.
I modified a couple of handlers I have laying around into a Run AppleScript action that will make folders from a list of names. The list can be set in a Get Specified Text action, with the "menu" being a Choose from List action:
Tested workflow:
1) Get Specified Text (your folder names, separated by returns) for example:
Testing
Another test
My Spiffy New Folder
2) Filter Paragraphs (Return paragraphs that are not empty)
3) Choose from List (Prompt: Please choose folder names:)
4) Run AppleScript:
<pre style="
font-family: Monaco, 'Courier New', Courier, monospace;
font-size: 10px;
margin: 0px;
padding: 5px;
border: 1px solid #000000;
width: 720px; height: 340px;
color: #000000;
background-color: #FFDDFF;
overflow: auto;"
title="this text can be pasted into an Automator 'Run AppleScript' action">
on run {input, parameters}
make folders with names from a list
input: a list of names (text items)
output: a list of Finder items (aliases) created
set output to {}
set DestinationFolder to missing value -- set the destination path here if desired
try -- verify that the path is valid
set DestinationFolder to DestinationFolder as alias
on error
set DestinationFolder to (choose folder with prompt "Choose the location to make the selected folders:")
end try
repeat with AnItem in the input
GetUniqueName for AnItem from DestinationFolder -- avoid duplicates
try
tell application "Finder" to make new folder at DestinationFolder with properties {name:the result}
set the end of the output to the result as alias
end try
end repeat
return output
end run
to GetUniqueName for SomeName from SomeFolder
check if SomeName exists in SomeFolder, creating a new unique name if needed
parameters - SomeName [text]: a name.extension to check for
SomeFolder [mixed]: a folder to check
returns [text]: a unique name
set {Counter, Divider} to {"00", "_"}
set Here to -(offset of "." in ((reverse of text items of SomeName) as text)) - 1
set TheName to text 1 thru Here of SomeName
if Here is -1 then -- no extension
set TheExtension to ""
else
set TheExtension to text (Here + 1) thru -1 of SomeName
end if
set NewName to TheName & TheExtension
tell application "System Events" to tell (get name of items of folder (SomeFolder as text))
repeat while it contains NewName
set Counter to text 2 thru -1 of ((100 + Counter + 1) as text) -- leading zero
set NewName to TheName & Divider & Counter & TheExtension
end repeat
end tell
return NewName
end GetUniqueName</pre>
- the output from the Run AppleScript action is a list of aliases to the folders created, if you want that information to do something with.

LMS 4.2.5 Syslog/Automated Action/Config mgmt issue

LMS 4.2.5 on Windows
We use the server as it's own Syslog server. The Syslog collector status is fine. I see syslogs coming into the server. However, I just made some changes on a router so ran a syslog report on it, but nothing was returned. I Tested the Collector Subscription and everything was fine.
We also have Automated Actions configured on certain syslog messages (duplex mismatch for example). There is an AA configured to send my team e-mails when this event occurs. There was a device that had two days worth of syslog messages complaining about this issue. Yet, we only received about 10 e-mails from the LMS system on it.
Another issue is with Configuration Mgmt. I fixed the duplex mismatch listed above and went to check the config tree to see if or when something changed. The last config archive was pretty old and I know changes were made on the device since then. This tells me that the LMS server didn't get notified of the config change or it would have gone out and checked it.
The one thing in common on all of the above is Syslog messages. LMS will take actions based on receiving these messages and those actions don't seem to be firing.
Any ideas would be greatly appreciated.
Thanks,
Mike S.

To confirm if the device is sending the syslogs and they are being received by LMS server properly, check the $NMSROOT/log/syslog.log and see it has the syslog from the device.
Unless syslog is there on syslog.log, we don't expect LMS to react on any AA.
For configuration backup, try to sync the device config by initiating a manual job to update the latest configuration from device. Even if there is no Automated Action working, you should still have a reoccurring/scheduled job configured to archive configuration backup periodically.
Following is a document I created for Syslog troubleshooting :
Ciscoworks LMS : Syslog in a Nutshell!
-Thanks
Vinod
**Encourage Contributors. RATE Them.**

Syslog automated action is not working

Hi,
I set the automated actions for EIGRP NBRCHANGE message ( DUAL-5-NBRCHANGE )
I would like to get email notifications from CW but it is not working. I've checked that syslog messages arrived to CW.
Other e-mail funtions ar working like DFM and RME job email notifications.
how can i troubleshoot what happened?
Regards,

What version of RME are you using? Make sure the message shows up in the RME syslog Standard Report. If the message isn't making it to the database, then it will definitely not trigger an automated action. Check your SMTP settings under Common Services > Server > Admin > System Preferences, and use a sniffer to capture tcp/25 traffic when one of these messages arrives to see if the SMTP server is accepting the email message.

LMS4 Syslog automated action anomaly

LMS 4.2.1 on W2K8 R2
I just want to send an email for any sev 1 or 2 syslog messages received. I set up an automated action that looks like this:
Automated Action Summary
Name:
Critical Events Email
Devices:
State:
Enabled
Parameters:
TO=[email protected], SUB=LMS4 Syslog AA, TEXT=
Action Type:
Email
Messages:
*-*-1-*:* *-*-2-*:*
Yet I seem to be getting emails triggered by messages from ASA devices that are not severity 1 or 2, like:
%ASA-session-4-106023
%ASA-auth-3-109023
%ASA-auth-6-109001
Am I doing something wrong, or is there some sort of bug I am hitting? I can't believe that I am the first person to try this.
Thanks,
-Jeff

I do not know what exactly you have done so far but in your situation I would enable the following debugs:
open that file in a text editor
NMSROOT\MDC\tomcat\webapps\rme\WEB-INF\classes\com\cisco\nm\rmeng\csc\data\Collector.properties
and change the debug level from Info to Debug:
    DEBUG_LEVEL=DEBUG
also enable SyslogAnalyzer debugging here:
Admin > System > Debug Settings > Config and Image Management Debugging Settings
    Set Application Logging Levels >> SyslogAnalyzer (scroll down)
        set Syslog Analyzer and Syslog Analyzer User Interface from INFO to DEBUG
in a DOS box check the status of the following processes (the should be started) and restart them:
    pdshow SyslogAnalyzer SyslogCollector
    pdterm SyslogAnalyzer SyslogCollector
    pdexec SyslogAnalyzer SyslogCollector
    pdshow SyslogAnalyzer SyslogCollector
When the issue happens again check the following log files and post them on the forum:
    NMSROOT\log\SyslogCollector.log
    NMSROOT\log\AnalyzerDebug.log

RME syslog automate action not functioning.

I want syslog to send me an email message when a user enter priviledge mode.
Ive enable syslog on my switch (3560-8PC)
logging on
logging (CW serverIP>
logging facility local7
logging trap
service timestamps log datetime msec localtime show-timezone.
I can see the logging history on the switch.
Ive automated syslog action on CW
Name:
syslogcapture
Devices:
<Switch IP>
State:
Enabled
Parameters:
TO=[email protected], SUB=syslog capture on CW, TEXT=
Action Type:
Email
Messages:
MGMT-*-7-*:LOGINPASS MGMT-*-6-*:ENABLEPASS
WHy it isnt working?
Thanks you in advance for your guidance.

Where is this "syslog portal" you were referring to? Is it at RME -> Tools -> Syslog -> Syslog Collector Status ( http://server-name:1741/rme/SyslogCollectorStatus.do )? If not, what does Syslog Collector Status show currently?
What version of RME are you using? What OS is LMS on?
What "process state" are SyslogAnalyzer and SyslogCollector in, at Common Services -> Server -> Admin -> Processes ( http://server-name:1741/cwhp/processMgt.do )?

Some automated actions with Mail

Hello,
I started a new post because the topic is now about Mail.app.
(Advice from Camelot, it's better to use mail for this kind of automation)
I will use a mail rule to selected the mail with subject. and attach a applescript for those emails with that subject.
So the attached applescript should do this:
1 print the email - always the same printer
2 save the attachments to always the same directory.
That's it.
Any help would be appreciated !
This is what I found For mail and attachments but don't know how to start doing this.
mail attachment n [inh. item] : A file attached to a received message.
elements
contained by messages.
properties
name (string, r/o) : Name of the attachment
MIME type (string, r/o) : MIME type of the attachment E.g. text/plain.
file size (integer, r/o) : Approximate size in bytes.
downloaded (boolean, r/o) : Indicates whether the attachment has been downloaded.
id (string, r/o) : The unique identifier of the attachment.
Print command in mail :
print v : Print an object.
print reference : list of objects to print
-----

First : I'm trying to save the Mail attachments now.
I found this information on MacTech.
I have a mail action that should trigger this script. But nothing happens.
Try running it without the perform mail action it stops at the item 1 part.
on performmailaction(theData)
set theOutputFolder to ("Macintosh HD:Users:gast:Documents:vis:") as string
tell application "Mail"
set theMessages to selection
set theMessage to item 1 of theMessages
set theAttachments to every attachment of content of theMessage
repeat with a from 1 to length of theAttachments
set theAttachment to item a of theAttachments
try
set theAttachmentName to name of theAttachment
set theSavePath to theOutputFolder & theAttachmentName
save theAttachment in theSavePath
end try
end repeat
end tell
end performmailaction
-----------------------------------------------------------

LMS 3.1 Syslog Automated Action - How to pass variables to script?

I would like to pass variables to a windows bat file for processing. The help seems to suggest that there are 2 available, device and message. I would like to know how to reference them and what syntax to use to pass them to the batch file. Are Facility, Sub-facility, Severity, Mnemonic and Description also availble? If so, how would they be referenced? Thanks in advance.

The syntax for referencing these variables is discussed in the online help. Essentially, you'll want to use %~1 and %~2 in your batch script to get the device and message respectively. The message will be the full message, so you will need to do additional processing on that to extract the facility, severity, and mnemonic.

Prime 4.1 Automated Action To Email

i have setup a syslog automated action
Automated Action Summary
Name:
config
Devices:
172.24.1.2
State:
Enabled
Parameters:
TO=[email protected], SUB=Config Exit, TEXT=A config exit event
Action Type:
Email
Messages:
SYS-*-5-CONFIG_I:*
i dont get emails when the event occurs - i connected to one of the switches entered config mode and then exited , term mon showed SYS-*-5-CONFIG_I ,but no email
email settings are OK (i get other emails from the system)
what am i missing?

It'll be helpful if you share what you see, based on which we can suggest what may be missing.
For easy reference just check the LMS guide once to see you followed the right steps :
http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/4.1/user/guide/admin/useNotif.html#wp1074029
-Thanks
Vinod
**Rating Encourages contributors, and its really free. **

How can I use QT pro automator actions in Mountain lion?

I am using mountain lion with 2012 late iMac and recently I bought QT pro.
And I try to use automator actions with QT pro, but there are only actions for QT 10 player.
How can I use QT pro actions in automator?

I have the exact same problem.
I have an US keyboard but when I press the button with tilde I get this: § or this ±
This looks like british keyboard to me

LMS 2.6 / RME : automated action for syslog

HI,
Is it possible to find a configure file or properties file for automate action which can be editable.
I lost automated action configuration and I would like to configure as before.
Many thanks, Elisabeth

I'd think AA lost in the GUI would be erased from the flat file (such as filters.dat for syslog filters) as well, in which case the only way to restore it would be from an older LMS backup.

Automator action to move a specific file type to a folder..

've started shooting pictures in raw and jpg format. After I grab the pics from my camera, I'd like to put the raw files in a separate folder.
I've played around a little but can't figure it out-- so I dunno if it's possible. Is there a way I can make an automator action where I enter or select the folder and run the action. It then makes a folder named RAW and moves all of a certain file type to the RAW folder. Is this possible with automator?
I'd like it to make a folder named RAW inside the current folder I'm in or have selected.
I think I figured this out using filter finder items, and move to specific folder, but I think I need to learn how to use variables for this to work how I want it. Do I need variables or is there another way?

the following script should do it provided your Raw image files have extensions "raw" (do they?). If they have another extension, modify next to the last line accordingly.
tell application "Finder"
set theFolderName to "Raw"
set curFolder to (folder of the front window as alias)
-- Determine whether the specified folder exists
if folder theFolderName of curFolder exists then
set theFolder to folder theFolderName of curFolder
-- Create a new folder, if it doesn't exist
else
set theFolder to make new folder at curFolder with properties {name:theFolderName}
end if
move (every file of curFolder whose name extension is "raw") to theFolder
end tell
Save the above script as an application using Script editor. To use it, select the folder you want to work on and run the script.

How can I edit an Automator action for Word?

I'm running Word 2008 on a Macbook Pro, Mac OS 10.5.
Word comes with a selection of Automator actions, including one to find and replace text in Word. I often want to convert standard numerals to old-style numerals, which are part of the extended glyphs set in fonts I use. Automator will allow me to set up ten find/replace actions (for the numbers 0-9) that successfully replace all the numerals with old-style numerals. But it only does it for the main body of the document, not for the footnotes. I need to be able to do it for all the footnotes.
I thought I might find a workaround by adding an AppleScript to my workflow, which would shift the focus in Word to the footnotes and rerun the find/replace actions. I mapped the menu item View/Footnotes to the keystroke command-) and inserted this AppleScript into the Automator workflow:
tell application "Microsoft Word"
tell application "Microsoft Word" to activate
tell application "System Events"
tell process "Microsoft Word"
keystroke ")" using command down
end tell
end tell
end tell
But the find/replace actions simply repeat what they'd done before, converting the numerals in the main body but not in the footnotes. I then thought that perhaps I should have an AppleScript to do the find/replace itself, once the footnotes have been selected, so I created the following (command-H accesses the find/replace dialog box in Word 2008):
tell application "Microsoft Word"
tell application "Microsoft Word" to activate
tell application "System Events"
tell process "Microsoft Word"
keystroke "H" using command down
keystroke "1"
keystroke tab
keystroke ""
end tell
end tell
end tell
The character after the fourth keystroke command is the glyph for old-style numeral 1. For some reason Word reinterprets this as the letter a. So using AppleScript I can only replace the numerals 1-9 with the letters a-i.
I'm pretty hopeless at even this very basic level of programming, but I presume that there's something in the Automator action 'Find and replace in Word' that specifically tells it not to look anywhere but the footnotes. I also presume it's possible to insert a command to tell it to operate on the footnotes (and headers and footers: everywhere!) too.
Does anyone know a way to edit an Automator action? I'm willing to experiment and fiddle with one until I find a way that works, if nobody knows the exact changes that I'd need to make, but I just don't know how to edit an Automator action in the first place. A bit of googling suggests that I could do it in XCode, and that that is bundled with my Mac, but I don't have it.
This all used to work when Office used to allow VBA (and I was using a horrible Windoze machine). Maybe someone would prefer just to find a way of creating a solution our of the old code, so here's one part of what I used (to change the number 1):
For Each aStory In ActiveDocument.StoryRanges
With aStory.Find
.ClearFormatting
With .Replacement
.ClearFormatting
End With
.Execute FindText:="1", ReplaceWith:=ChrW(63281), _
Format:=True, MatchCase:=True, Replace:=wdReplaceAll
End With
Next aStory
Thanks in advance for any help.

Thanks to all three contributors for their generous help so far. Mac people are lovely.
BDAqua's suggestion wouldn't work, I think, because copying footnote text into another application and then back into Word would lose all the associations between footnote references in the body and the footnotes themselves. I wish I could do what Klaus1 says, but Word 2008 won't allow the creation of Macros any more. They've shut off support for their creation. Nice MS. red_menace's suggestion seems very plausible and I'll look into a way of mapping the old style numerals to specific keystrokes. That might do it.
Reflecting on what you all said, I looked again through Word's help menus and eventually got pointed towards this page of 'help': <http://tinyurl.com/6398l6>. This is completely impenetrable for me, though it does compare a VBA script for Word 2004 to an AppleScript. This encourages me to hope that it should be possible to translate my original VBA script (part of which I included in my first message) into AppleScript, though I don't know how to do it because I don't really understand the language in the first place (the VBA script was put together by someone else).

RME Syslog Automated Actions with exclude Filter

Similar Messages

Maybe you are looking for