cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post

anyone have Rules working with SYSLOG VIEWER?

i'm trying to use the 'Alert Action' of DISCARD on a repeating Syslog Message from a switch.


i'm not having any luck.


does anyone have any pointers on using a Rule with Syslog Viewer?


thanks,


Gil

0 Kudos
1 Reply
Level 7

The wild card is your friend (*).  I copy the message straight from the syslog web viewer then paste straight into syslog alerts / filters.  Then I delete out the front and back stuff and just leave the meat of the syslog message.  Then (*) on the front and the back.

0 Kudos