Hi list,
Several persons asked for it so I am sending this script to the list.
It is not something that I would call "finished" (I am still improving it
or adding new features from time to time) but it might be useful to give
some ideas about how it can be done.
- the cron script is there only to make sure the daemon one (logchkd) is
always running.
- logchkd.sh is the main script. It execute and then sleep 60s before
executing again.
- logchk.filter define the patterns to look for and the command to execute
when a number "n" of syslog messages that fit the pattern have been
received.
(See attached file: logchkd.sh)(See attached file: logchk.filter)(See
attached file: logchk.cron.sh)
Let me know if you have questions or suggestions to improve it ...
Regards,
Francois Le Hir
Network Projects & Consulting Services
IBM Global Services
Phone: (514) 205 6695
----- Forwarded by Francois Le Hir/Quebec/IBM on 06/06/2002 02:03 PM -----
"Scott Bursik"
<tivoliesm@hotmai To: Francois Le
Hir/Quebec/IBM@IBMCA
l.com> cc:
Subject: RE: [nv-l] Off Topic:
Cisco and Tivoli Integration
06/03/2002 08:30
AM
Please respond to
"Scott Bursik"
Would you mind sharing the script so I could take a look at it? We are
getting ready to impliment the same thing and I was looking to start
writing the script. You could potentially save me a LOT of work. Thank you
so much.
Scott Bursik
Pepsico Business Solutions Group
scott.bursik@pbsg.com
>From: "Francois Le Hir/Quebec/IBM"
>To: "'nv-l'"
>Subject: RE: [nv-l] Off Topic: Cisco and Tivoli Integration
>Date: Thu, 30 May 2002 16:53:16 -0400
>
>Hello list,
>
>I see that all the time: a syslog message is sent but no traps for events
>like power supply failure or temperature threshold. It depends on the
>plateforms and the IOS versions. (I have seen it from IOS 11.2 to 12.1)
>Of course it is possible to ask the router to send every syslog message as
>a trap but we don't use that as it would duplicate all the syslog traffic.
>Even with syslog traps disabled I beleive we should get traps for
important
>event but that's not always the case. (envmon traps are activated of
>course)
>
>I have a script that search through the syslog file for specifics events
>ans takes actions (such as sending a customized trap).
>
>Regards,
>
>Francois Le Hir
>Network Projects & Consulting Services
>IBM Global Services
>Phone: (514) 205 6695
>
>Date: Thu, 30 May 2002 14:35:05 -0400
>To: "'nv-l'"
>From: "Allison, Jason (JALLISON)"
>Subject: RE: [nv-l] Off Topic: Cisco and Tivoli Integration
>Message-ID: <05A70E173104D511A5840002A55C37EE01A29DC2@exanpmb2.arinc.com>
>
>I would also be interested in hearing examples. It seems a bit scary that
>Cisco would write events to syslog but not send traps.
>
>Thanks,
>
>
>Jason Allison
>Principal Engineer
>ARINC Incorporated
>Office: (410) 266-2006
>FAX: (410) 573-3026
>
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
>For additional commands, e-mail: nv-l-help@lists.tivoli.com
>
>*NOTE*
>This is not an Offical Tivoli Support forum. If you need immediate
>assistance from Tivoli please call the IBM Tivoli Software Group
>help line at 1-800-TIVOLI8(848-6548)
Chat with friends online, try MSN Messenger: Click Here
logchkd.sh
Description: Binary data
logchk.filter
Description: Binary data
logchk.cron.sh
Description: Binary data
|