Neal,<div><br></div><div>In RTMT you should be able to create custom alerts from the performance counters that send you some better information. For example,</div><div><br></div><div>\\<your call manger IP>\Cisco MGCP PRI Device(sda0002fcc21cec::S0_DS1-0\DatalinkInService is a counter I used to poll for d channel status on a MGCP controlled gateway (6608 blade I think). I just happen to still have it setup (disabled) still in my RTMT.</div>
<div><br></div><div>Could be monitored for a change, and then a email with a specific message could be sent out based on how you want to trigger it.</div><div><br></div><div>I use splunk now to do alerting from syslog output instead, but RTMT worked pretty good for this when I was using it for such.</div>
<div><br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Dec 4, 2012 at 2:52 PM, Haas, Neal <span dir="ltr"><<a href="mailto:nhaas@co.fresno.ca.us" target="_blank">nhaas@co.fresno.ca.us</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">In RTMT you just get PRI down! I wish it would actually give more information like Which PRI is down<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<div>
<div style="border:none;border-bottom:solid windowtext 1.5pt;padding:0in 0in 1.0pt 0in">
<p class="MsoNormal" style="border:none;padding:0in"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Neal Haas<u></u><u></u></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<div>
<div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> <a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a> [mailto:<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a>]
<b>On Behalf Of </b>Lelio Fulgenzi<br>
<b>Sent:</b> Tuesday, December 04, 2012 11:29 AM<br>
<b>To:</b> Tim Reimers</span></p><div><div class="h5"><br>
<b>Cc:</b> Cisco VOIP<br>
<b>Subject:</b> Re: [cisco-voip] alert when PRI goes down<u></u><u></u></div></div><p></p>
</div>
</div><div><div class="h5">
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-size:10.0pt;font-family:"Verdana","sans-serif"">These are great Tim! Thanks for sharing.<br>
<br>
---<br>
Lelio Fulgenzi, B.A.<br>
Senior Analyst (CCS) * University of Guelph * Guelph, Ontario N1G 2W1<br>
(519) 824-4120 x56354 (519) 767-1060 FAX (ANNU)<br>
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^<br>
Cooking with unix is easy. You just sed it and forget it. <br>
- LFJ (with apologies to Mr. Popeil)<br>
<br>
<u></u><u></u></span></p>
<div class="MsoNormal" align="center" style="text-align:center"><span style="font-size:10.0pt;font-family:"Verdana","sans-serif"">
<hr size="3" width="100%" align="center">
</span></div>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Verdana","sans-serif"">From:
</span></b><span style="font-size:10.0pt;font-family:"Verdana","sans-serif"">"Tim Reimers" <<a href="mailto:treimers@ashevillenc.gov" target="_blank">treimers@ashevillenc.gov</a>><br>
<b>To: </b>"Shaihan Jaffrey" <<a href="mailto:schaehan@gmail.com" target="_blank">schaehan@gmail.com</a>><br>
<b>Cc: </b>"Cisco VOIP" <<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a>><br>
<b>Sent: </b>Friday, November 30, 2012 9:16:55 AM<br>
<b>Subject: </b>Re: [cisco-voip] alert when PRI goes down<br>
<br>
<br>
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Here’s a few sample EEM scripts:</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Notice that EEM is watching for specific syslog messages</span><span style><u></u><u></u></span></p>
<p><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">-</span><span style="font-size:7.0pt;color:#1f497d">
</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> for the T1 controller</span><span style><u></u><u></u></span></p>
<p><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">-</span><span style="font-size:7.0pt;color:#1f497d">
</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">for a Serial Interface changing state</span><span style><u></u><u></u></span></p>
<p><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">-</span><span style="font-size:7.0pt;color:#1f497d">
</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">for EIGRP creating/dropping ajacencies</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">I usually do an applet for down and up, or recovery and failure..</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">That way you know when something was brief…</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">I’m running 12.3 and 12.4 code on these guys… older stuff, so EEM should be available to you.</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">You may have to enable some stuff under SNMP traps to start seeing it in buffered logfiles on the routers for EEM to catch it.</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Start with just enabling the SNMP in local logging, watch for the messages you want to trigger an EEM on, and go from there.</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">event manager applet T1Control_0-0-0_Down</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">event syslog pattern "%CONTROLLER-5-UPDOWN: Controller T1 0/0/0, changed state to down"</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">action email mail server "my-mailservers-ip-addr" to "<a href="mailto:voip-alerts@yourdomain.com" target="_blank">voip-alerts@yourdomain.com</a>" from "<a href="mailto:MyVoiceGateway-C2821-VOIPRtr@yourdomain.com" target="_blank">MyVoiceGateway-C2821-VOIPRtr@yourdomain.com</a>"
subject "T1 controller 0/0/0 on C2821 10.53.2.5 is DOWN " body "The T1 controller 0/0/0 has gone down on 10.53.2.5"</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">event manager applet T1Control_0-0-0_Up</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">event syslog pattern "%CONTROLLER-5-UPDOWN: Controller T1 0/0/0, changed state to up"</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">action email mail server "my-mailservers-ip-addr" to "<a href="mailto:voip-alerts@yourdomain.com" target="_blank">voip-alerts@yourdomain.com</a>" from "<a href="mailto:MyVoiceGateway-C2821-VOIPRtr@yourdomain.com" target="_blank">MyVoiceGateway-C2821-VOIPRtr@yourdomain.com</a>"
subject "T1 controller 0/0/0 on C2821 10.53.2.5 is BACK UP " body "The T1 controller 0/0/0 is up up on 10.53.2.5"</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">event manager applet RemoteSite-EIGRP-up</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">event syslog pattern "%DUAL-5-NBRNetworkCoreANGE: IP-EIGRP(0) 12: Neighbor 10.25.43.5 (Serial0/3/0) is up: new adjacency"</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">action email mail server "your-mailserver-addr" to "<a href="mailto:netalerts@yourdomain.com" target="_blank">netalerts@yourdomain.com</a>" from "<a href="mailto:NetworkCore_MSPRtr@yourdomain.com" target="_blank">NetworkCore_MSPRtr@yourdomain.com</a>"
subject "EIGRP adjacency created between NetworkCore and RemoteSite" body "The EIGRP adjacency between NetworkCore and RemoteSite has been created"</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">event manager applet MySite-Serial010-down</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">event syslog pattern "%LINK-3-UPDOWN: Interface Serial0/1/0, NetworkCoreanged state to down"</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">action email mail server "your-mailserver-addr" to "<a href="mailto:netalerts@yourdomain.com,a-user@yourdomain.com" target="_blank">netalerts@yourdomain.com,a-user@yourdomain.com</a>"
from "<a href="mailto:NetworkCore_MSPRtr@yourdomain.com" target="_blank">NetworkCore_MSPRtr@yourdomain.com</a>" subject "Interface Serial0/1/0, NetworkCoreanged state to down - MY SITE T1 DOWN" body "Ser0/1/0 -- MY SITE down"</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1f497d">Tim Reimers</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1f497d">Systems Analyst II</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1f497d">Information Technology Services</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1f497d">City of Asheville</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1f497d">70 Court Plaza</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1f497d">Asheville, NC 28801</span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1f497d">Direct phone - <a href="tel:828-259-5512" value="+18282595512" target="_blank">828-259-5512</a></span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1f497d">IT Services main front desk - <a href="tel:828-259-5510" value="+18282595510" target="_blank">828-259-5510</a></span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1f497d"><a href="mailto:timreimers@ashevillenc.gov" target="_blank">treimers@ashevillenc.gov</a></span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1f497d"> </span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1f497d"> </span><span style><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span style><u></u><u></u></span></p>
<div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a>
<a href="mailto:[mailto:cisco-voip-bounces@puck.nether.net]" target="_blank">[mailto:cisco-voip-bounces@puck.nether.net]</a>
<b>On Behalf Of </b>Shaihan Jaffrey<br>
<b>Sent:</b> Thursday, November 29, 2012 10:01 AM<br>
<b>To:</b> Erick B.<br>
<b>Cc:</b> Cisco VOIP<br>
<b>Subject:</b> Re: [cisco-voip] alert when PRI goes down</span><span style><u></u><u></u></span></p>
</div>
<p class="MsoNormal"><span style> <u></u><u></u></span></p>
<p class="MsoNormal"><span style>Yes PRI setup for MGCP.<u></u><u></u></span></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style> <u></u><u></u></span></p>
<div>
<p class="MsoNormal"><span style>On Wed, Nov 28, 2012 at 11:26 PM, Erick B. <<a href="mailto:erickbee@gmail.com" target="_blank">erickbee@gmail.com</a>> wrote:<u></u><u></u></span></p>
<p class="MsoNormal"><span style>The RTMT MGCP alert will only be useful if your PRI is setup for MGCP. If it is H323 then you need to use syslogs, snmp traps. You could also put together a EEM script that runs on the router to email you. <u></u><u></u></span></p>
<div>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style> <u></u><u></u></span></p>
<div>
<p class="MsoNormal"><span style>On Wed, Nov 28, 2012 at 1:20 AM, Abdul Salam . <<a href="mailto:salamka@gmail.com" target="_blank">salamka@gmail.com</a>> wrote:<u></u><u></u></span></p>
<p class="MsoNormal"><span style>see attached counter<u></u><u></u></span></p>
<div>
<p class="MsoNormal"><span style="color:#888888"><br clear="all">
<br>
<br>
</span><i><span style="font-size:13.5pt;font-family:"Tahoma","sans-serif";color:#000099">---AS</span></i><span style><u></u><u></u></span></p>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style><br>
<br>
<br>
<u></u><u></u></span></p>
<div>
<p class="MsoNormal"><span style>On Wed, Nov 28, 2012 at 12:42 PM, Abdul Salam . <<a href="mailto:salamka@gmail.com" target="_blank">salamka@gmail.com</a>> wrote:<u></u><u></u></span></p>
<p class="MsoNormal"><span style>I think you can look for RTMT alert D-channel oos
<u></u><u></u></span></p>
<div>
<p class="MsoNormal"><span style="color:#888888"><br clear="all">
<br>
<br>
</span><i><span style="font-size:13.5pt;font-family:"Tahoma","sans-serif";color:#000099">---AS</span></i><span style><u></u><u></u></span></p>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style><br>
<br>
<br>
<u></u><u></u></span></p>
<div>
<p class="MsoNormal"><span style>On Wed, Nov 28, 2012 at 11:14 AM, Lelio Fulgenzi <<a href="mailto:lelio@uoguelph.ca" target="_blank">lelio@uoguelph.ca</a>> wrote:<u></u><u></u></span></p>
<p class="MsoNormal"><span style>Both the router and CUCM will send syslog messages to this affect. Once you configure syslog target, you can setup your syslog host with the appropriate software to send email. We use SEC in conjunction with a
Linux based syslog daemon. There are other options like Solarwinds and Logzilla.<br>
<br>
I also believe RTMT can be configured to send email based on thresholds.<br>
<br>
Sent from my iPhone...<br>
<br>
"There's no place like 127.0.0.1"<u></u><u></u></span></p>
<div>
<div>
<p class="MsoNormal"><span style><br>
On Nov 28, 2012, at 12:33 AM, Shaihan Jaffrey <<a href="mailto:schaehan@gmail.com" target="_blank">schaehan@gmail.com</a>> wrote:<br>
<br>
> Hi Team,<br>
> Is there any way to generate an alert on a specific email as soon as the PRI goes down in cisco voice gateway.<br>
><br>
> Regards,<br>
><u></u><u></u></span></p>
</div>
</div>
<p class="MsoNormal"><span style>> _______________________________________________<br>
> cisco-voip mailing list<br>
> <a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
> <a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
<br>
_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><u></u><u></u></span></p>
</div>
<p class="MsoNormal"><span style> <u></u><u></u></span></p>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><span style> <u></u><u></u></span></p>
</div>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style><br>
_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><u></u><u></u></span></p>
</div>
<p class="MsoNormal"><span style> <u></u><u></u></span></p>
</div>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style><br>
_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><u></u><u></u></span></p>
</div>
<p class="MsoNormal"><span style> <u></u><u></u></span></p>
</div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana","sans-serif""><br>
_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><u></u><u></u></span></p>
</div>
</div></div></div>
</div>
<br>_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br>Ed Leatherman<br><br>
</div>