You know we don't yet generate alerts from syslog, right? :)

You might just want to generate alerts directly from the trap daemon.

adam.

Sent from Mailbird

On 17/06/2015 13:55:23, Lambert, Benoit <benoit.lambert@ntl.nt.net> wrote:

We want an alert when a new mac address is added to an access port.

 

I did some more research and I got the switch to send a Mac-Notification-Change trap to the server.

 

Is there an easy way to implement this? I am testing with snmptrapd daemon.

 

I assume once the server receives the trap it can be re-routed to syslog-ng and brought into Observium.

 

Switch à Server (udp 162) àScript/Program that re-routes àServer (udp 514) à syslog-ng àObservium instance

 

I was also struggling with the TRAP payload, the mac, port index and vlan weren’t part of the message.

Do I need the CISCO-MAC-NOTIFICATION-MIB?

 

Thank you.