I have a rule that verifies multiple interfaces are configured with particular features. Here is a copy of this rule.
interface.*\n.*description DS|interface.*\n.*description Link:|interface.*\n.*description Isolated|interface.*\n.*description Limited|interface.*\n.*description Printers|interface.*\n.*description Voice|interface.*\n.*description Computers|interface.*\n.*description Management|interface.*\n.*description Servers
The rule produces the correct results as follows.
I would like to be able to remediate all violations using a single script. This would require the policy engine to recursivly execute the remediation script for each config block in violation and be able to use the "Start Line:" as a variable. Example:
ip verify unicast reverse-path
Can we do this yet? It seems like if we can search blocks for problems we should be able to remediate them also. Being able to remediate multiple block violations would be VERY helpful to me in ensuring all our router and switch interfaces match our polcy requirement. Would also allow less technical staff remediate configuration issues.
could you please take a look at this thread policy reporter smarter remediation scripts and tell us whether this is another description of what you want? Or what are the differences?
Yes, its pretty much the same thing I requested.
The detection logic using regex is smart enough to pin-point what interfaces you want to test specific conditions on a particular set of "blocks" but there is no inteligent method of remidating the issues detected on violating blocks.
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 150,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.