Hi All
I have setup an alert when we receive a syslog message for Error disabled interfaces: Too many link flaps.
The alert itself works and it creates an Incident in our service queue but because Log is associated with the Node it only has the node details on the ticket, Is there a way I can use the interface details from the syslog message and create an action to grab the run the Show interface command on node ??
We do monitor only certain interfaces so the interface down will only alert on those.
We set this alert up for any interface as a proactive measure to identify possible issues.
Thanks