Syslog alert creation help needed

Question

Sorry for a newbie question....but we haven't used Orion syslog in a long time and need to use it now for an issue we are having.  We need to set up an email alert to trigger them this cisco syslog comes to Orion :

2010 Feb 20 07:03:12 devicename %OSPF-4-NEIGH_ERR:  ospf-CLIENT-AS [5574] (CORE) Neighbor X.X.X.X not found, packet dropped

I need a rule to look for an syslogs that come in with OSPF-4-NEIGH_ERR and trigger an email.  Can someone tell me what to put on the message, severity/facility tab?

Thanks!!

ecklerwr1 · Answer

I would try *OSPF-4-NEIGH_ERR* on the message tab and leave all the sev/fac checked then setup the alert action email.  That would catch any message type with that pattern and email on it.