cem_a.

Let's say I want to execute a command only if a specific command exists on configuration, is there way to do this? for example: if(runningconfig() contains "access-list 10") { CLI { access-list 10 permit 1.2.3.4 } } else if (runningconfig() contains "access-list 11") CLI { access-list 11 permit 1.2.3.4 } }

We had to change startup and running command as below, ssh into NetScaler check whether "show running" or "show ns runningconfig" is the correct command for your appliance. <Command Name="Startup" Value="ns startupconfig"/> <Command Name="Running" Value="ns runningconfig"/>

In IOS you can use the filter like the example below, maybe there is similar function in NX-OS. If grep really support regular expressions like it says here, you can try using the OR operator "|". sh int | i notconnect|Description FastEthernet0/0 is down, line protocol is down (notconnect) Description: blabla

Well, we use NCM7.1.1 and it can be reached from web interface by clicking the warning icon on the report.

On ASA firewalls 'logging class auth trap Informational' command enables sending syslog messages to syslog server when a login event occurs, it also sends a syslog message when any command is entered.

AFAIK netflow does not send any user identifying information. You may think integrating a firewall/proxy which has the capability to map IP addresses to domain usernames by checking ActiveDirectory events, e.g.

In the report, first column shows receive+transmit total traffic, second and third colums show the receive and transmit rates separately. You may want to check why the transmit rates on some interfaces are zero but report looks correct.

Regex string below works for me, you can try it. ^username\b((?!usernametobeexcluded).)*$

I asked a similar question here and here but did not get a response so far. It seems this is not possible with the current software and I am thinking about filing a feature request about this.

At UnDP interface in server right click on the poller and select assign; or you can go to Node Details on web interface and click "Pollers" link at management row.

Did you try opening violation details on the report and select "execute remediation script on this/all Node"?

On the server you should open the NCM management software(not the web interface!) and check schedules. There is a default nightly backup schedule job there, you can modify and enable that job. Check this youtube video Your second question is about Real-time Change Detection feature of the NCM, you should check the user…