Help with Real Time Alerts in Cirrus

Question

Ok, I will try and explain as best I can how this is setup.  I am receiving Syslog messages on the same Cirrus box using Orion Syslog server.

I have real time alerts enabled in Cirrus.  I  have a rule in the syslog server:

Message Type Pattern: %SYS-5-CONFIG_I:* (Tried with and without the *)

Alert Actions: "C:\Program Files\Solarwinds\Configuration Management\ConfigAutoDownload.exe" ${IP}

Have tried with and without quotes.. Even hardcoded the IP to the device I am testing with and no luck.. It's like the action is not firing or the alert is not working...

I can from a command prompt do C:\Program Files\Solarwinds\Configuration Management\ConfigAutoDownload.exe 10.bbb.ccc.ddd and I get a proper email alert... So what am I doing wrong?

Thanks

chris.lapoint · Answer

Yep, that's the right variable and I'm glad this worked for you ;-)

Spiky · Answer

hi,

sorry to hijack your thread,

i have RTCD  working, but only for one device,  what wildcard string can i use, so i get emails from any device?

i did have

"C:\Program Files\SolarWinds\Configuration Management\ConfigAutoDownload.exe" 10.x.x.x

and now

"C:\Program Files\SolarWinds\Configuration Management\ConfigAutoDownload.exe" ${IP}

would that be right

EDITED to add

it was, and it's working ok now :)

chris.lapoint · Answer

Mike, please submit a ticket to support so we can track this properly and gather the appropriate log files to diagnose.  We're absolutely committed to getting RTCD working for you again.