Cisco Systems 4.1 Defining Message Filters

14-38

User Guide for Resource Manager Essentials 4.1

OL-11714-01

Chapter 14 Enabling and Tracking Syslogs Using Syslog Analyzer and Collector

Defining Message Filters

• If the message is not in the file, the router has not been configured properly to send Syslog messages

to the CiscoWorks Server.

Defining Message Filters

You can exclude messages from Syslog Analyzer by creating filters.

Note View the Permission Report (Common Services > Server > Reports) to check if you have the required

privileges to perform this task.

To launch the message filters dialog box:

Step 1 Select Resource Manager Essentials > Tools > Syslog > Message Filters.

A dialog box appears in the Message Filters page.

A list of all message filters is displayed in this dialog box, along with the names, and the status of each

filter—Enabled, or Disabled.

Step 2 Specify whether the filters are for dropping the Syslog messages or for keeping them, by selecting either

Drop or Keep.

• If you select Drop, the Common Syslog Collector drops the syslogs that match any of the Drop

filters from further processing.

• If you select Keep, Collector allows only the syslogs that match any of the “Keep” filters, for further

processing.

Note The Drop or Keep options apply to all message filters. They do not apply to individual filters.

Step 3 Specify whether interfaces of selected devices should be included.

In the dialog box that displays the message filters, you can do the following tasks:

You can create a filter for Syslog messages by:

Task Button

Create a filter (see Creating a Filter). Create

Edit a filter (see Editing a Filter). Edit

Enable or disable a filter (see Enabling or Disabling a Filter). Enable/Disable

Export or import a filter. (see Exporting or Importing a Filter). Export/Import

Delete a filter (see Deleting a Filter). Delete