Syslog Message Filter Device Selection

Question

We have installed LMS 3.0.1 with RME 4.1.1.  I have enabled the Syslog Link Up/Down Message Filter that comes preconfigured with CiscoWorks.  When the message filter is configured for All Managed Devices it works perfectly and filters out all the Up/Down messages.  But if if select the Choose Devices option and specify certain devices it does not seem to work at all.  All the Up/Down messages appear for all devices for some reason.  Any idea what I'm doing wrong?
Thanks
Jamie

Answer 1

The way this is *supposed* to work is:
1)  Create the filter and specify which devices you want to apply it to.
It should not be necessary to create multiple filters for the same message,
unless not all devices were included in your original filter.
2)  Drop certain messages, for which you have defined filters, so we should
Enable the filter and choose Drop. Set "Include interfaces of selected
devices" to No.
3)  RME > Admin > System Preferences > Loglevel Settings, verify
SyslogAnalyzer is set to DEBUG. The UI module should be INFO.
4)  Stop the daemon manager (net stop crmdmgtd). Also, go to
Control Panel > Admin Tools > Services and stop the syslog service.
5)  On Windows, please delete any huge *.log file. When the daemon
manager and syslog service are restarted, these files will be regenerated.
Be sure to delete these:
- AnalyzerDebug.log
- SyslogAnalyzer.log
- SyslogCollector.log
- syslog.log
6)  Restart the syslog service, then restart the daemon manager
(net start crmdmgtd).
When a message that you feel should be filtered out occurs, send me
the following:
(a) Portion of syslog.log file showing the specific message.
(b) AnalyzerDebug.log showing the corresponding message.
(c) Send current screenshot of your Message Filter page.
(d) Click on the filter name and send screenshot of the resulting page.
(e) Also include a screenshot of the Syslog Collector Status page.
7)  Remove the debug settings.