configuration changes alert

  • 0
  • 1
  • Question
  • Updated 3 years ago
  • Answered
Is it possible in extreme switch using ridgeline every time we change the configuration it will send an alert or through email?thanks
Photo of Marlon

Marlon

  • 1,570 Points 1k badge 2x thumb

Posted 3 years ago

  • 0
  • 1
Photo of PARTHIBAN CHINNAYA

PARTHIBAN CHINNAYA, Alum

  • 4,362 Points 4k badge 2x thumb
You can match the pattern based on logs
And forward them to ridge line to send email.
Photo of Ram

Ram, Employee

  • 1,450 Points 1k badge 2x thumb
By default, the devices sent traps to Ridgeline and Ridgeline will not request from devices. We have some predefined event changes configured in Ridgeline under "Alarm and Event Definition". In some scenarios, we can create a user profile and match the switch log event to generate a alarm mail in Ridgeline. However, we need to test it and confirm if it is possible or not.

Could you please let me know what type of configuration changes notification email to be send?
Photo of Marlon

Marlon

  • 1,570 Points 1k badge 2x thumb
Hi Ram,

thanks.

example are we add or delete some ports to a vlan or once we disable manually the ports. this will trigger an alarm in ridgeline and generate a alarm mail. 
Photo of Ram

Ram, Employee

  • 1,450 Points 1k badge 2x thumb
I did a quick test in lab by configuring the command "enable cli-config-logging" in switch. It enables the logging of CLI configuration commands to the Syslog for auditing purposes.

I did a packet capture in Ridgeline server to confirm the syslog messages are received for creating/deleting the vlan. Then, I have configured "New Alarm definition" matching the log pattern "*Info:cli.logLocalCmd*" and "cli:" and "local0" (used from packet capture) and it is not working by using this pattern. There are few pre-defined events which are available in Ridgeline and it will work based on trigger to generate the alarm mail. However, for the above query we need more testing need to be done. To proceed further, please open a case with GTAC.