![](https://secure.gravatar.com/avatar/0ab6e8dd9082398abe4e46543fe9d5c1.jpg?s=120&d=mm&r=g)
Hello list
I'm having some problems with syslog alerts.
RP/0/RSP0/CPU0:Oct 17 11:44:17.872 : isis[1010]: %ROUTING-ISIS-5-ADJCHANGE : Adjacency to ****** (Bundle-Ether1.7) (L2) Down, Holdtime expired
RP/0/RSP0/CPU0:Oct 17 11:46:05.893 : isis[1010]: %ROUTING-ISIS-5-ADJCHANGE : Adjacency to ******* (Bundle-Ether1.7) (L2) Up, New adjacency
I'm using the regex "/Adjacency.*Up/" and "/Adjacency.*Down/"
The "/Adjacency.*Up/" alert is working fine, but the combo Adjacency and Down doesn't alert.
If I match only on Adjacency or only on Down I do get an alert, both these two together don't work as expected. Any workarounds or a different regex I should use?
Regards MKS
![](https://secure.gravatar.com/avatar/4de2da5d548b873b84efdaf59c865b6e.jpg?s=120&d=mm&r=g)
On Oct 17 11:57, MKS wrote:
I'm using the regex "/Adjacency.*Up/" and "/Adjacency.*Down/"
The "/Adjacency.*Up/" alert is working fine, but the combo Adjacency and Down doesn't alert.
If I match only on Adjacency or only on Down I do get an alert, both these two together don't work as expected. Any workarounds or a different regex I should use?
Try using /Adjacency.*(Up|Down)/g instead.
Paul
participants (2)
-
MKS
-
Paul Townsend