Syslog Filter by Group

Hi all,

I work for a company that has many divisions across the country. As I add each division's network devices into NPM I create a new Group for it. Each Group is created using a dynamic query based on the division's IP addresses. What I would like to do next is when I'm in a Group have NPM display the Last XX Syslog Messages for devices specific to that Group.

If I don't use a filter I get the last xx syslog messages from all devices independent of what Group I'm in. I tried filtering by the Group's IP address range when in a specific Group, but the filter was applied to all Groups, not just the Group I was in, so every Group showed only the syslog messages from the one address range.

So...any thoughts on how I can make this work? I'm pretty new to this so I don't really know the syntax for filters other than what was shown in the built in example.

Thanks,

Chris

Find more posts tagged with

network_monitoring

syslog_filter_rules

network_management

Accepted answers

All comments

RichardLetts

I need this for a couple of the groups I have on my network...

is the the groupID or group name available as a variable for the SWQL?

if so we could devise some swql that would limit the syslog messages by members of the group.

Diner

Hello, unfortunately as far as I know ${ContainerID} macro resolution on the group details page is not implemented yet. We have item about it, but at this time is not known the scope of implementation. I'll try to keep you updated.

kendalcm

Thanks for letting us know. I look forward to hearing that the ${ContainerID} macro has been implemented.

solarview

Hi Jan,

We have the same question. We want to be able to filter out certain error and trap messages for nodes in a certain container (group). If this ${ContainerID) was available, we could build a custom SWQL query for it. However the current Group Details Page in NPM is using container ID information to generate the last XX Group events for that specific group aka container... Maybe there is already a variable to achieve this ?

planglois

I was trying to do the same for a long time... http://thwack.solarwinds.com/message/22787

While searching if this was implemented in NPM 11, I found these 2 Feature requests

I encourage to vote on these 2 ideas so they get the PM attention..

Thanks!