17 Oct
2016
17 Oct
'16
6:57 a.m.
Hello list
I'm having some problems with syslog alerts.
RP/0/RSP0/CPU0:Oct 17 11:44:17.872 : isis[1010]: %ROUTING-ISIS-5-ADJCHANGE : Adjacency to ****** (Bundle-Ether1.7) (L2) Down, Holdtime expired
RP/0/RSP0/CPU0:Oct 17 11:46:05.893 : isis[1010]: %ROUTING-ISIS-5-ADJCHANGE : Adjacency to ******* (Bundle-Ether1.7) (L2) Up, New adjacency
I'm using the regex "/Adjacency.*Up/" and "/Adjacency.*Down/"
The "/Adjacency.*Up/" alert is working fine, but the combo Adjacency and Down doesn't alert.
If I match only on Adjacency or only on Down I do get an alert, both these two together don't work as expected. Any workarounds or a different regex I should use?
Regards MKS