Submit a ticketCall us

Announcing NCM 7.7
With NCM 7.7, you can examine the rules that make up an access control list for a Cisco ASA device. Then you can apply filters to display only rules that meet the specified criteria, order the rules by line number or by the hit count, and much more.
See new features and improvements.

Home > Success Center > Network Performance Monitor (NPM) > Create an alert with Syslog Viewer when switch ports are shut down due to a MAC address violation

Create an alert with Syslog Viewer when switch ports are shut down due to a MAC address violation

Table of contents
Created by Michael Almadova, last modified by MindTouch on Jun 23, 2016

Views: 264 Votes: 0 Revisions: 5

Overview

This article describes how to create an email alert using Syslog Viewer when switch ports get shut down due to a MAC address violation.

Environment

NPM 11.5.2

Steps

 

  1. Click Start > All Programs > SolarWinds Orion > Syslog and SNMP Traps > Syslog Viewer.
  2. Add a new rule. Refer to Configuring Syslog Viewer Filters and Alerts.
  3. Set an alert action for the email. For example:

 

 ERROR: %SPANTREE-2-BLOCK_BPDUGUARD: Received BPDU on port FastEthernet2/17 with BPDU Guard enabled. Disabling port.
SEVERITY: Critical
HOST: 10.10.100.1
ERROR: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0009.be0d.18e7 on port FastEthernet4/8.
Orion QuickLink:
http://Orion/NetPerfMon/Resources/Se...tr=10.10.100.1

 "%IP-4-DUPADDR: Duplicate address 172.31.28.179 on Ethernet0, sourced by 001a.8cb9.46a5"
 
ERROR: %RTD-1-LINK_FLAP: FastEthernet0/9 link down/up 6 times per min
SEVERITY: Alert
ERROR: Jul 16 21:16:37 PDST: loopback error detected on Fa0/1, putting Fa0/1 in err-disable state   

For more information, refer to BASIC OR ADVANCED ALERT FOR 'ERRDISABLED' PORTS?

 

 

Last modified
21:59, 22 Jun 2016

Tags

Classifications

Public