[c-nsp] Event Manager

Nick Hilliard nick at foobar.org
Tue Jan 17 04:38:49 EST 2012


On 17/01/2012 00:15, Mohammad Khalil wrote:
> Hi all , i am looking for building an applet according to below
> i will track configuration changes via the syslog pattern CONFIG_I
> if detected , i will check the output for the show archive config differences 
> if the output of this command was no changes (that mean no changes were made actually) , then i will do nothing
> otherwise ( an output detected and whatever the changes were ) i want to send a mail to myself

There are several log parsers which can be configured to do this.  Splunk
should do it.  SEC (http://simple-evcorr.sourceforge.net/) will certainly
do it.

Nick



More information about the cisco-nsp mailing list