Trying to get the Syslog Viewer & rules to alert me if a message from my Cisco 6509 with message type header of %SYS-5-CONFIG_I. Syslog viewer rules will NOT alert me. Have tried using %SYS-5* and %SYS-* as other expressions, nothing.
If I tell it anything from that switches ip and leave wildcards in the "message" section, I get alerts. But if I specify it nothing. I am not using natural expressions.
My end game is to get Syslog rules to alert me if the header of %OSPF-5-ADJCHG: is send to the syslog. So I need the "message type header" parsing to work correctly. I really don't care about the message body.