Real-time Configuration Change Detection Based on Syslog Messages

Hello Community,

Is it possible to monitor both the startup and running-config files in Real-time Configuration Change Detection (RTCD)?

Under Config Downloads & Notifications, Previously Downloaded Config File, monitor this file type in Web Console > Settings > NCM Settings > Configure Real-Time Change Detection, there is only the option to select one type.

In addition to changes written to the start-up configuration, I want to to be notified of changes made to the running-config that are not saved.

Regards,

Simon

Find more posts tagged with

ncm

ncm 7.8

network configuration manager

real time change detection

Accepted answers

All comments

cahunt

Any changes you would make on the device directly would change the Running Configuration, until you save to startup. If we need to detect on the different types of changes. config mode vs tftp new config or image, we would need to highlight that syslog or trap message to start the change detection process, so we get the download and comparison of configurations or just notify that the change has been made.

-CharlesH

Loop1 Systems: SolarWinds Training and Professional Services

LinkedIN: Loop1 Systems
Facebook: Loop1 Systems
Twitter: @Loop1Systems

simon.macpherson

"When a config change is detected, NCM accesses the device, downloads the modified config file, and compares it to an existing config file to determine what changed."

My question is, is it possible for NCM to monitor both running and startup configuration files? It appears it is only possible to monitor one of two types for change detection.

wluther

simon.macpherson The real time change detection is not actually monitoring the config at all. Instead, it is looking for specific syslog messages which pertain directly to a user making a change on the device. When one of those syslog messages is found, it triggers the change tool which identifies and forwards the message. Your NCM environment can be configured to "Act" on these changes, which you could setup to initiate the automatic downloading of a new/current running config.

Aside from the real time change detection, after you have downloaded the current config, you can also configure NCM to check for differences between the running and start up configs. NCM has many tools, some of which seem to overlap slightly, but mostly one simply leads to the next.

supportdiehard

Yes, it can be done you have to enable syslog for NCM.

superfly

I used to just run a job each day that compared all the startup and running configs to see if they were the same. If not, then I'd have them listed in an email. I would then execute a "write" job to all those devices.