You know we don't yet generate alerts from syslog, right? :)
You might just want to generate alerts directly from the trap daemon.
adam.
Sent from Mailbird [http://www.getmailbird.com/?utm_source=Mailbird&utm_medium=email&utm...] On 17/06/2015 13:55:23, Lambert, Benoit benoit.lambert@ntl.nt.net wrote: We want an alert when a new mac address is added to an access port. I did some more research and I got the switch to send a Mac-Notification-Change trap to the server. Is there an easy way to implement this? I am testing with snmptrapd daemon. I assume once the server receives the trap it can be re-routed to syslog-ng and brought into Observium. Switch à Server (udp 162) àScript/Program that re-routes àServer (udp 514) à syslog-ng àObservium instance I was also struggling with the TRAP payload, the mac, port index and vlan weren’t part of the message. Do I need the CISCO-MAC-NOTIFICATION-MIB? Thank you.