I cannot get this feature to work for the life of me. I have gone through the options over and over again and can never get an email to fire off when a change on my switches are done. Can someone help me?
Hi Steven,
What type of switches? Are you using traps or syslog notifications? Are you seeing the notifications come into the syslog or trap servers? What does the syslog / trap rule you have setup look like and what is the command line you are using for the 3rd party exe when the rule matches?
Matt
Cisco Switches and we are using both syslog and traps. I am seeing them in the syslog "configured from console by blah blah on vty0 (Node IP Address)
Ok, if you are seeing them in the syslog viewer, then the next step is to verify if an RTM.log file is being created.
If so, then the log itself could reveal the issue.
If not, then the rule in the syslog would be the first place to start troubleshooting.
Also, what version of NCM are you using?
If you are using 7.x, is this a single or dual machine integration, or is it a standalone NCM installation?
I am using 7.0.2. I created a syslog alert that looks for key terms like "configured" "console""vty" and I am getting emails but I want to know what the change is exactly, not that someone just made a change. I am using single machine integration with NPM and NCM
In the syslog rule, does it also run ConfigAutoDownload.exe
I am assuming that the feature for change detection is enabled in the NCM settings and the option to include the changes is selected. Are you getting emails because you setup a syslog alert action to send you an email? To get the actual NCM realtime notifications with the details of the change you add a "Execute Program action" alert action to the syslog rule. The following command line should work. ( you would replace C:\Program Files (x86)\SolarWinds\Orion with the path where your Orion is installed.)
C:\Program Files (x86)\SolarWinds\Orion\SolarWinds.NCM.RTNForwarder.exe ${IP_Address},RealtimeNotification,${DateTime},${Message}
