I have basic alerts up and running with emails. Is there a way to trigger an alert / email everytime someone logs into
one of our routers ?
ANy help would be appreciated.
Cheers
Dave
Should be fairly straight-forward, but there's a couple of pre-requisites...
The main thing is you need a way for SW to know that someone has logged into a router. This will probably depend on teh make and models of your devices, but there should be a way to get either a syslog message or an SNMP trap sent from the devices to your SW server. You can then set up an alert based on the known details of the syslog message or SNMP trap.
I've had a look at what i get from my Cisco switches, and I can see there is a 'CISCOTRAP-MIB:tcpConnectionClose' SNMP trap when I log off the switch, but no corresponding log on message. And I don't see anything coming in on the syslog; but there is no guarantee that my devices are correctly configured to log a log on attempt.
This is exactly right; you can use either syslog polling or an SNMP. Besides having NCM send an email--in response to the alert--you can have it take other specific actions, if desired. It's all documented in the NCM administrator guide; look for the sections on NCM alerts. Let me know if you have any trouble.
Doug
