I just downloaded KIWI and so I don't reinvent the wheel, does anyone know what the Best Practice config would look like to alert me when "one" switch in a Cisco stack of switches fails?
The CatOS switches log different messages than IOS, but since you said stack, I'll assume IOS
Sometimes this is possible with the link up-down messages that will come in - if a module/switch in the stack goes offline, you'll see it disconnect, and can monitor for that interface in the link messages. You'll just need to figure out what interfaces are for the stack vs. for normal ports, so you don't get an alert every time someone reboots.
However, I think this is more directly what you want to look for:
%STACKMGR-4-STACK_LINK_CHANGE: Stack Port X Switch Y has changed to state DOWN
There are also STACKMGR messages for UP, then switches being added to the stack, which might be useful:
%STACKMGR-4-SWITCH_ADDED: Switch X has been ADDED to the stack
%STACKMGR-5-SWITCH_READY: Switch X is READY
Here's a link to the Cisco IOS/IOS-XE messages, straight to the STACKMGR stuff: http://www.cisco.com/en/US/docs/ios/system/messages/guide/sm_cn10.html#wp664612
Yes Colby, these are 3750 stacks running IOS and what level does that message come through on: I assume 4, but I would like to make sure..... then I assume I can configure KIWI to alert on that message, correct? and thanks in advance for you replies.
Emergency: 0 Alert: 1 Critical: 2 Error: 3 Warning: 4 Notice: 5 Informational: 6 Debug: 7
I am not certain which level they come in on, but what is most likely going to be easiest is you can build an alert action filter on the message text itself.
I am guessing I need the licensed version to set that alert up, correct?
