Is it possible to setup an email alert only if a series of syslog messages are received?
As an example: --> When a teck telnets to a core switch makes a config change and then saves this config there will be a series of 3 syslogs messages generated. one for the config save to the standby CPU, One message for the config save to the active CPU, and a 3rd for the save operation being successful.
What I would like to do is create a email that goes out to the entire team each time a config is changed and the saves are successful. Or if I could get the message ID in the email I can just use the 3rd save is successful message and we can put the rest together from there. Is it possible to get the message ID in the email alert?
This isn't possible at present, but it's something we'll capture as a feature request.