Netsight Manager Alarm Custom Criteria Not Working

[Jairo_Rojas_Her]

I have an event in NetSight ARP violation is recorded in Syslog, but when I set the alarm on the Alarm Manager did not reach the alarm console nor the email.

I set the alarm for Trap and Custom Criteria but neither works. Attached pictures to collaborate me with their contributions.

Thank you for your recommendations.

[Antonio_Opromol]

I've also got a problem with alarms customization in the version 8.0.2 of EMC.
I'm trying to use the custom action for use a script after a syslog event.
I set the flag to Override Content and pass parameters to the script, and save the changes.
If I try to reopen again the custom action I see that my changes are not saved and the flag on the override content is no more present and my custom parameters are lost.

[Ronald_Dvorak]

Hi Stefan & welcome to the forum.

I've done a simple test with my EMC 8.0.2 - configure a alarm for the syslog event if a user logs in to my switch.

Here how the syslog event looks like...

And here my customer alarm...you'd need to match on the Syslog log manager and and then on the information text i.e. passed - in my test.

If it still doesn't work could you please open a new post so we'd separate it from the other ones and make sure to incl some screenshots of the configuration.

-Ron

[Stefan_Seubert]

Hi,
we have the same issue.
We got a syslog message for a defective FAN.
The information is
SIM[127798864]: edb_bxs.c(1578) 61925 This is from manager 1 %% Unit 3 Fan 2 failed

Client is the Management IP, Type is Event

I build an alarm with a custom criteria which only match to the information text.
I tried a two phrases (Match any Selected and a contain phrase)

This is from manager /d %% Unit /d Fan /d failed <-- my prefered phrase

This is from manager <-- only a test to see that the alarm is working

Every 5 minutes we got the syslog message but no alarm is generated.

Thanks for your help,
Stefan

[Bharathiraja__S]

Hi Jairo,

if you select a single switch from dataccenter group , do you see the alram from netsight ?

Thanks,
Suresh.B

[Jairo_Rojas_Her]

Thanks Ryan for your help,
However in the group DataCaenter I have approximately 40 Core Switches in which the event occurs.

I do not understand what is your recommendation?

The definition of the alarm okay?