Syslog alerts and levels setting

Hi All,
I have 20 PIX and ASA firewall have been configured in my ciscoworks (lms 2.6)
I am able to get alerts like device down and authentication failure messages through mail, I guess these are from DFM.
My present concerns....
Configure syslogs in firewalls as per level 1-7 (ignore 7-5 in Ciscoworks) is that possible? If I configure syslog level as 1 then it is sending all syslogs from 1-7 which i dont want.
And I need to get syslog alerts from firewals to my ciscoworks and then from ciscoworks to my mailbox through email.
Can someone help me on this.
Thanks in advance.
Regards,
Jopeti.

You can use automated actions and syslog filters to achieve this based on the message type.
Resource Manager Essentials > Tools > Syslog > Automated Actions
http://www.cisco.com/en/US/partner/docs/net_mgmt/ciscoworks_resource_manager_essentials/4.0/user/guide/syslog.html#wp1211314
RME > Tools > Syslog > Message Filter
http://www.cisco.com/en/US/partner/docs/net_mgmt/ciscoworks_resource_manager_essentials/4.0/user/guide/syslog.html#wp1150419

Similar Messages

  • How to disable Wifi and Network access in low level setting for security ?

    Hi
    New to here
    One of our final customer bought imac last months. OS 10.9, SN is c02*******J4i
    Since they are security printing, all the necessary ports accessing to outisdes need to be disabled in low level setting(not the ons just like turn on and off ).
    The ports including USB storage, Network and WIFI.
    I googled and found the following
    Open the /System/Library/Extensions folder.
    To remove support for USB mass storage devices, drag the following file to the Trash: IOUSBMassStorageClass.kext
    Open Terminal and enter the following command: $ sudo touch /System/Library/Extensions The touch command changes the modified date of the /System/Library/Extensions folder. When the folder has a new modified date, the Extension cache files (located in /System/Library/) are deleted and rebuilt by Mac OS X.
    Choose Finder > Secure Empty Trash to delete the file.
    Restart the system.
    I want to confirm this before sending to final user. Since I didn't have mac on hand, just wonder whether there are similar kext files for network and wifi to remove.
    Just like step 2 described.
    I would like customer to backup these files before permanently removed.
    Many thanks
    Kevin
    <Edited By Host>

    chiqui wrote:
    Is it possible to disable Internet access point and WAP as when I use WiFi some connections to WAP server of my provider are still made and I get charged. I am looking for the option not to delete it entirely from the access point list, but rather disable it as I might need connection when WiFi is not available and I want to be able to enable it as once I delete the server name and setting I won't know it.
    Is it possible to do it and how?
    You could delete WAP accesspoint. Not all providers (carriers) allow this.
    ‡Thank you for hitting the Blue/Green Star button‡
    N8-00 RM 596 V:111.030.0609; E71-1(05) RM 346 V: 500.21.009

  • Export Layers as Files: Top Level Layers and Layers Sets

    Is there a script that can do the following that ImageReady was capable of?
    File/Export Layers as Files/
    I know there is a script that can just export the layer as files, but what I want to do is export the "Top Level Layers and Layer Sets" so that I can send several layers grouped under a folder as one image.
    Thanks! - j

    Something like this should work:
    // enable double clicking from the
    // Macintosh Finder or the Windows Explorer
    #target photoshop
    // Make Photoshop the frontmost application
    app.bringToFront();
    // Start at the top of the layers stack and select each
    // layer in turn
    for (var i = 0; i < activeDocument.layers.length; i++) {
    activeDocument.activeLayer = activeDocument.layers[i];
    // Put all your processing functions... //
    duplicateSelectedLayers(activeDocument.activeLayer.name);
    var psdSaveOptions = new PhotoshopSaveOptions();
    app.activeDocument.saveAs( File( "~/Desktop/" + activeDocument.name + ".psd" ), psdSaveOptions);
    app.activeDocument.close(SaveOptions.DONOTSAVECHANGES);
    // ...in the area between these two comments. //
    function duplicateSelectedLayers(soParent){
    var id2277 = charIDToTypeID( "Mk " );
    var desc304 = new ActionDescriptor();
    var id2278 = charIDToTypeID( "null" );
    var ref144 = new ActionReference();
    var id2279 = charIDToTypeID( "Dcmn" );
    ref144.putClass( id2279 );
    desc304.putReference( id2278, ref144 );
    var id2280 = charIDToTypeID( "Nm " );
    desc304.putString( id2280, soParent );
    var id2281 = charIDToTypeID( "Usng" );
    var ref145 = new ActionReference();
    var id2282 = charIDToTypeID( "Lyr " );
    var id2283 = charIDToTypeID( "Ordn" );
    var id2284 = charIDToTypeID( "Trgt" );
    ref145.putEnumerated( id2282, id2283, id2284 );
    desc304.putReference( id2281, ref145 );
    executeAction( id2277, desc304, DialogModes.NO );

  • Alerts and Reporting

    I am using ALSB 2.6
    Question 1.
    There is an option in the Alert Destination to send the message to?Reporting? (a selection of yes or no)
    This is documented to be: ?Reporting: If you specify Reporting, alerts are sent to the ALSB Reporting module and can be captured using a custom Reporting Provider that can developed using the Reporting APIs provider by AquaLogic Service Bus. This allows third-parties to receive and process alerts in custom Java code.?
    I have set-up the reporting module to use oracle. I created two tables:
    SQL> select * from tab
    2 /
    TNAME TABTYPE CLUSTERID
    WLI_QS_REPORT_ATTRIBUTE TABLE
    WLI_QS_REPORT_DATA TABLE
    When I create alerts to a destination with the ?reporting? option enabled, I do not see any data in the oracle tables. Regular ?report? actions do end up in these tables.
    Question 2: Where are alerts stored? I'm just curious on this one.
    Question 3: In a error handle at the route stage level, I placed an alert and a report action. I tried it twice with report first, then alert, and the reverse, alert than report. The alert comes out in the console, but the report action doesn't in either case.
    Can anyone shed some light on this? I'm just diving into ALSB and trying various things.
    TIA
    Steve

    Thanks for your reply!
    1) Looks like the new Reporting Services does not run as a Windows Service so it's not listed in the "Configure Service Accounts" pulldown.  As a result, I don't see how to set the service account.  It's only assigned to an application pool. 
    I installed it into an existing application pool and that application pool "is" in the list and has a domain service account already assigned.
    2) Which users need to be in here in order to configure the "Provision Subscriptions and Alerts" screen?  I already have the farm admin account which is the account I use when running Central Admin.
    3) As mentioned in #1, I've installed Reporting Services into an existing application pool with other service apps.
    4) This link is for Reporting Services 2008 R2 which is very different install process.  But I did follow the SQL Server Reporting Services 2012 RC0 installation instructions and the Reporting Services is functioning correctly with no errors. 
    I'm just not able to configure the sceduling the alerting with interfaces with the SQL Server Agent.
    Thanks!

  • Monitoring Dashboard - Syslog Alerts portlet (Prime LMS appliance)

    We are using the Prime LMS appliance and have upgraded to 4.2.3.
    Nothing is showing in the Syslog Alerts portlet on the Monitoring Dashboard.
    If I click on the portlet title I go to the 24 Hour Syslog Report page.
    This page has the standard settings and is set to run the report every 24 hours.
    If I run it immediately, I get a nice long report of syslogs.
    Nothing show in the portlet though.
    I do not think DNS is populated with the device names & ip addresses (unsure how important this is).
    Currently using the sysname (from SNMP) for device naming.
    Any help much appreciated.
    Mark.

  • Help! not alert and notification for sms incoming

    All sounds of my IPhond working, but if I recive text or imessage there is no alert and no notification (ther isn't the little number near the icon). In general setting the sound are activate.. 
    What's the problem??

    I have the same problems so did the reset.
    Now I have lost all my text messages. Any idea I how I can get them back?

  • In osx 10.8.2, how do I maintain two Bluetooth devices (mouse and head-set) connected at the same time?

    I want to use both a Bluetooth mouse and head-set at the same time, is that possible?

    Thank PapaSmurf (?)
    My problem was that in Sound settings was not indicated the Head-Set device, although existing, but BoomDevice, that greatly enhances the sound level. So what I had to do was first change from BoomDevice to the Head-Set, and then I changed down to Internal speaker and then again chose BoomDevice. That way, I could turn off the Head-Set without getting the error message, and yet maintain the internal speaker through the BoomDevice.
    I had a feeling that I had to do something with the sound settings and your reply made me experiment and succeed! Thanks once again!

  • View ALL upcoming alerts and reminders?

    is there a function within iCal to view all upcoming alerts and reminders, in one single page to know your upcoming deadlines for the week or month or day?

    yes you can.
    go to PRINT.
    under View -> select "list"
    make sure that you have set the TIME RANGE correctly. the default is the current date and it ends 1 day later, i.e. it only displays that date's reminders.
    click the "up" arrows to increase the no. of days AFTER the current date, and you will find the preview displaying the following dates as you click.
    u can even ZOOM to view the events themselves, and select the font sizes as well.

  • Unable to Sync emails to car's HU over bluetooth. I am using iphone 5 and have set up a gmail account on it. Also, the basis notification settings mentioned on some site have been done.Can someone answer it?

    Unable to Sync emails to car's HU over bluetooth. I am using iphone 5 and have set up a gmail account on it. Also, the basis notification settings mentioned on some site have been done.I tried doing the following still the email sync is not working.?
    Here's the step by step:
    1. Go to Settings --> Notifications --> Mail --> Select any of your email accounts
    2. Notification Center: ON
    3. Alert Style: Banners or Alerts (I've only tested it to work with Banners...)
    4. Show Preview: ON
    5. View in Lock Screen: ON

    Hi uneleashurself and thanks for your answer.
    Forgive my language but getting to talk to the Safaricom customer service is a real pain in the **bleep** - if you ever get to talk to them, that is.
    I've never got an answer to my phone calls in three years and their customer assistans in the shops usually have no clue about whatever it is you're asking them.
    I talked to a few of them in a couple of different Safaricom shops and they didn't know what I was talking about.
    Still, I believe Safaricom is not the problem as other people I know who have a BlackBerry on Safaricom haven't experienced this problem.

  • Best Practice: DAG and AutoDatabaseMountDial Setting

    Hi,
    I am working with management in my organization with regard to our DAG fail over settings. By default, the fail over setting is set to 'Good Availability' (missing 6 logs or less per
    DB). My organization did not feel comfortable with data loss so we changed it to 'Lossless'.
    Of course, we had a SAN failure and we lost a DAG member and nothing failed over to the surviving DAG member. Even eventID 2092 reported the same log sequence for many databases yet the
    surviving DAG member did not mount. Example:
    Database xxxmdb28\EX-SRV1 won't be mounted because the number of lost logs was greater than the amount specified by the AutoDatabaseMountDial.
    * The log file generated before the switchover or failover was: 311894
    * The log file successfully replicated to this server was: 311894
    Only after the SAN was restored and the surviving server came back did another 2092 EventID get logged stating the log sequence was not 311895 (duh! - because the database got mounted again. )We opened a support
    case with Microsoft and they suggested no databases mounted because the surviving DAG member could not communicate with the non-surviving member (which is crazy to me because isn't that THE POINT of the DAG??). Maybe there is always a log file
    in memory (?) so AutoDatabaseMountDial set to lossless will never automatically mount any database? Who knows.
    In any case, we are trying to talk ourselves back into setting it back to 'Good Availability' setting. Here is where we are at now:
         2 member DAG hosting 3000 mailboxes on about 36 databases (~18 active on each node) in same AD site (different physical buildings) w/witness server
         AutoDatabaseMountDial set to lossless
         Transport dumpster is set to 1.5x maximum message size
    What level of confidence can we expect we will not have data loss with the properly configured transport dumpster and a setting of 'Good Availability?' I am also open to other suggestions such as changing
    our active-active DAG to active-passive by keeping all active copies on one server.
    Also, has anyone experienced any data loss with 'Good Availability' and a properly configured transport dumpster?
    Thanks for the guidance.

    Personally I have not experienced loss in this scenario and have not changed this setting from "Good Availability".  I know that setting the transport dumpster to 1.5x is the recommended setting.  Also there is a Shadow Queue for each transport
    server in your environment which verifies the message reaches the mailbox before clearing the message. 
    To make an example for mailflow (assuming these are multi-role for this example, it still applies to split role). you have Server1 and Server2 with an external user sending mail to a user on Server1.  The message will pass through all your external
    hops, etc. and then get to the transport servers.  If it is delivered to Server1, the message has to be sent to Server2 and then back to Server1 to be delivered to the mailbox so that it hits the shadow queue of Server2.  If the message hit Server2
    first, then it would be sent to Server1 and then to the mailbox.
    If either of your servers are down for a period of time, then the shadow queue will try to resend the messages again and that is why you wouldn't have any data loss.
    Jason Apt, Microsoft Certified Master | Exchange 2010
    My Blog

  • Out of the Box alerts and messages.  Necessary?

    Hi,
    I have installed Grid Control and I am monitoring a couple of Hosts and DB's and well, before I even did that I noticed that Grid had a whole bunch of Critical and warning alerts along with Policy Vioalations. Now I assume these are out of the box alerts and messages, cause some of them seems pretty dumb to me. I know we can change them to change the values but I just wanted to make sure if I should really worry about these or not? Are they really serious. Some of them don't make any sense to me and I have been trying to look online at places where I can find out what they mean exactly and how to correct them. Does anyone know how to. These messages are just annoying and I would like to log in to Grid and see no alerts or violations. Here are some examples of what I am talking about. Any advice or help is much appreciated :)
    Examples Alerts:
    -51.55% of all processes are in zombie state, crossed warning (35) or critical (50) thresho...
    -Number of Active Agents exceeded the critical threshold (1). Current value: 0
    **This one seems dumb to me since I only have one agent on the server and the threshold is set to 1!!!!
    -Metrics "Current Open Cursors Count" is at 1673
    -Target is in broken state...
    **This one I would really like to figure out what it means. It is listed under the errors tab.
    Example Policy Violations:
    -Critical Patch Advisories for Oracle Homes
    -Listener Direct Administration
    -Use of Hostname in Listener.ora
    -Oracle Home Executable Files Owner
    Thanks

    -Critical Patch Advisories for Oracle Homes
    Nice but pretty obvious - only need if you have a security policy at your company-Listener Direct Administration
    Dont believe in that one ...-Use of Hostname in Listener.ora
    Same with this ..-Oracle Home Executable Files Owner
    Should be fixed .. a valid problem.

  • BPM: How to Raise Alert and Restart together ?

    The requirement is like this.My Integration Process receives a message, performs a 1:N split and undergoes further processing using Transformation steps. I want to ensure the following in case any one of the Transfofrmation fails(Because of some coding error in the step):
    1. Raise an Alert
    2. Should be able to restart the Process again from the
       failed step once the Transformation code is fixed.
    3. To raise an Alert for any file adapter level errors, 
       and to restart the processing of the message once the
       file adpter error is resolved
    I have tried the following approaches, but it does not help me achieve all of the above condition.
    I have put the Transformation step in a Block and introduced an exception branch with one control step which raises an Alert.
    Issue: This will raise an alert when the step fails, but it ends the BPM with a Processed status and hence I will not be able to restart the BPM.
    So I put another Control step immediately following the Alert step which raises an exception. However I have not handled this exception. Hence when a step fails, I am able to raise an alert as well as the BPM gets errored out.
    Issue : However, now when I restart the process in swf_xi_swpr, The process restarts with the Control step which was used to throw exception. It does not restart with the Failed mapping step.
    To raise Alerts for Adpter level errors which might occur before the message comes to BPM, I have defined alert category and rule in runtime workbench. However, the Alerts are not triggered when the file adapter fails.
    Please share any ideas on how to achieve all the 3
    requirements together.
    Thanks in advance.

    Hi Joachim!
    I was facing a very similar problem in my BPM modelling.
    Is there really no other chance than to loop (and maybe wait some time) over the critical (e.g. networking down, ...) parts of the BPM to have some active notification via alerts AND a possibility for retry?
    In my opinion this would a very inflexible way of doing error-handling stuff - if so - is it about to change in the upcoming releases?
    Currently I guess I can have:
    a) either ALERTING (by catching exception and raise alert)
    OR
    b) convenient retry mechansisms via "SWF_XI_SWPR" (by not catching exceptions at all and let the relevant block become "errorenous") ...
    Any other suggestions ...?
    Many Thanks,
    Andy

  • Why do my Reminders sometimes not alert after the set time?

    Why do my Reminders sometimes not alert after the set time?  I've tried re-starting repeatedly.  I've tried deleting older completed reminders (I only had 300).  Is there a fix for this? 

    You problem sounded rather odd, so I tried to duplicate it in iTunes 11 and I couldn't.
    I turned off copy to iTunes media folder when adding to library, then I moved a music track that was not in the iTunes media folder from folder A to folder B and right clicked on it and selected open with iTunes and it played fine. (I have to do it this way as iTunes is not my default player for MP3).
    However the consequences of doing this are that you end up with two copies of the track in the library database, the original which can no longer be found as it is not in its original location and the new entry pointing to the correct location which plays OK.
    So as far as I can tell, there must be something else going on as I can't dublicate your problem in iTunes 11
    You may find this program interesting
    iTunes Folder Watch
    http://albumbrowser.klarita.net/iTunesFolderWatch.html
    If you want an easy time with iTunes it really is easier to let iTunes manage your music in the iTunes media folder. Also it make life a lot easier if you want to move to a new disk or PC as iTunes can tolerate the iTunes media folder being moved as long as you tell it where it is.
    Added
    I realised that my last experment was not a purchased track.
    When I did it with a purchased track, iTunes recognises that it should be in the library database and brings the track up with an exclamation mark next to it. Strangely the track was added to the library with the correct loaction and would play on the secon try.
    Odd behaviour, maybe it is something to do with the icloud storage system as iTunes knows you purchased the track.

  • Nosquint's Global zoom level setting can not be saved

    I change the Global zoom level setting 140 from 150, and it works a 140. after I quit FF and back again, the Global zoom level is changed back to 150 again, it seems that can not be saved. it is working under V21
    I am using ff 24.0 now
    any solution?

    You can check for problems with preferences.<br />
    Rename or delete the prefs.js file and possible numbered prefs-##.js and user.js files to reset all prefs to the default value.
    *http://kb.mozillazine.org/Preferences_not_saved
    *http://kb.mozillazine.org/Resetting_preferences
    You can rename the content-prefs.sqlite file to content-prefs.sqlite.old (or delete the file) in the Firefox profile folder to reset the page zoom for all websites.

  • Security Level set to High, Windows 7, Word 2010, Acrobat X Pro

    I had Acrobat 9 Pro and could create PDF files from Word 2010 files by going directly into Acrobat.
    Then, one day, I received an error msg: "Secruty Level set to High, please run the application which created this document ..."
    I figured that MS has installed some sort of security update which prevented me from creating PFD files from Word 2010 files.
    So I waited for Acrobat X to ship, which I just bought for $199 (on top of the $449 for Acrobat 9 Pro).
    I just installed the new version of Acrobat X Pro, but I get the same error message.
    PLEASE HELP!!

    Thanks, but the error msg is actually an Acrobat msg.
    I called the Adobe Tech Support and spent an hour on the phone with the gentleman. We went through many configurations and I'm still trying to resolve this issue (I'll be reinstalling Acrobat X in a minute to see if our changes make a difference).
    I believe the trouble lies in the fact that I'm on a 64-bit system, with an MS-issued security update. Hard to say exactly what the fiasco is all about just now.
    Regards,
       :- Kelly

Maybe you are looking for