How to filter out certain messages in trap viewer and syslog viewer

Question

Hello,

I am trying to drop certain messages that I don't really need from the SW database.  This is an example:

clogHistFacility.870=LINK

clogHistSeverity.870=4

clogHistMsgName.870=UPDOWN

clogHistMsgText.870=Interface GigabitEthernet1/0/9, changed state to up

clogHistTimestamp.870=639258883

snmpTrapOID=CISCO-SYSLOG-MIB:clogMessageGenerated

sysUpTime=73 days 23 hours 43 minutes 8.83 seconds

experimental.1057.1.0=172.30.31.4

snmpTrapEnterprise=CISCO-SYSLOG-MIB:ciscoSyslogMIBNotificationPrefix

I'd like to know if I have to put filters into both the trap logs and sys logs to do this.  I guess I'm not sure what the difference between the two.  Thank you.

dtsao · Answer

Thank you very much for your reply.  I have done so.

zkahl · Answer

Hello,

You could set up a filters in both Syslog and Trap viewers for this. These filters are located under View->Alerts/Filter rules on both Syslog and Trap Viewers.

For Syslog, match the patterns under the Message tab, and then under Alert Actions - Choose the "discard the syslog message".

For the Trap Viewer, match the pattern under "Trap Details" tab, then choose "Discrard the Trap" under Alert actions.

Hope this helps.

Zak Kahl

Loop1 Systems

Http://www.loop1systems.com