2 Replies Latest reply on Mar 11, 2017 5:50 PM by Parker Robinson

Filter/Ignore Syslog Messages

cableguy31 Mar 6, 2017 10:37 AM

Syslog messages are being sent to Solarwinds from several firewalls that I know can be ignored and are only filling up our logs. It's a pain (if not impossible) to prevent the log message from being generated from the firewall, so I wanted to see if there was a way that I could have Solarwinds drop/ignore the message as it's received so it does not get logged.

Thanks.

Re: Filter/Ignore Syslog Messages

sja Mar 6, 2017 2:25 PM (in response to cableguy31)

Hi

Try this one

Tips and Tricks for Managing Traps and Syslog in Orion NPM

My tip is move that syslog load to something that can work with large syslog loads
NPM was never designed for that
1 of 1 people found this helpful
Like (0)

Actions
Re: Filter/Ignore Syslog Messages

Parker Robinson Mar 11, 2017 5:50 PM (in response to cableguy31)

Use the "Syslog Viewer" program on your Orion server to create filters for those specific syslog messages and create an Action that drops those syslogs that it receives per your filter(s). Open syslog viewer and go to File > Settings > click on the Filters/Rules tab(or similar name). Click the Add button to create a new rule(which consists of filters and then an action to be performed on those filtered syslog messages).

- Parker
Like (0)

Actions

Go to original post