Is it possible to setup an email alert only if a series of syslog messages are received?
As an example: --> When a teck telnets to a core switch makes a config change and then saves this config there will be a series of 3 syslogs messages generated. one for the config save to the standby CPU, One message for the config save to the active CPU, and a 3rd for the save operation being successful.
What I would like to do is create a email that goes out to the entire team each time a config is changed and the saves are successful. Or if I could get the message ID in the email I can just use the 3rd save is successful message and we can put the rest together from there. Is it possible to get the message ID in the email alert?