Steps to alert for err-disabled

Hi,

I'm a newbie with syslog and switches thus need a little help here. How do I configure an alert (in syslog viewer or alert manager) to send an email when any port goes to err-disabled status? What type of pattern should be used for the rule to send an alert? Any advice would be extremely appreciative!

Find more posts tagged with

advanced_alerts

syslog

err-disable

cisco

Accepted answers

mrxinu

Handling syslog is done with the Syslog Viewer application on the application server. The syslog message should look something like "putting Gi4/1 in err-disable state" so you could have it trigger on 'err-disable'. What have you tried?

All comments

mrxinu

orionnewbie67

Thanks Steven for the input. I knew it had to be done through syslog but was questioning on the "message type" and "message pattern"

I was able to do what was needed by including typing: *err-disable* in the message pattern field.

mrxinu

I'm glad you figured it out. And that you selected your reply as the correct answer. </sarcasm>