Deleting a Filter
To delete a filter:
Step 1 Select Resource Manager Essentials > Tools > Syslog > Message Filters. A dialog box, displaying the list of filters, appears in the Message Filter page.
Step 2 Select the required filter from the list in the dialog box.
Step 3 Click Delete.
When you confirm the deletion, the filter is deleted.
Overview: Syslog Analyzer Reports
You can use the Syslog Analyze reports to examine your default and custom reports, or to determine the cause of device error messages.
Using the Report Generator of RME, you can generate various Syslog reports:
• Generating a Syslog Custom Summary Report
• Generating a Severity Level Summary Report
• Generating a Standard Report
• Generating an Unexpected Device Report
You can generate 24-hour reports that will show data for the past 24 hours, from the schedule time of the report.
Successfully generated reports are stored in the Archives. You can access the reports archives by selecting Resource Manager Essentials >Reports > Report Archives (see the topic Viewing Archived Reports in the section Viewing Archived Reports).
In the Reports Archive/Report jobs, you cannot see the Immediate reports.
If you have selected the Run Type as Immediate, then the report appears in a separate browser window. If you have selected an option other than Immediate, in the Run Type field, then a message is displayed,
Job ID created successfully.
Go to Reports > Report Jobs to view the job status.
Here, Job ID is a unique Job number.
An Immediate job displays the first 10,000 lines of a report. For the full report, schedule a job.
When you are generating a syslog report, you may get an outofmemory exception. This may occur if the
number of syslog messages that were generated in the Date Range that you specified in the syslog report job, exceeded six hundred thousand. Specify a shorter Date Range in the Report Generator, and run the report job again.
Chapter 15 Enabling and Tracking Syslogs Using Syslog Analyzer and Collector Overview: Syslog Analyzer Reports
Step 2 Go to the first drop-down list box, select Syslog.
Step 3 Go to the second drop-down list box, select the required report, for example, Custom Summary Report.
Step 4 Select the required devices using the Device Selector.
For details about the Device Selector, see the topic Using RME Device Selector in the section Adding and Troubleshooting Devices Using Device Management.
Step 5 Enter the information required to generate the required report:
Field Description
Date Range
Last X Select this option, if you want to generate a report for the last X days or weeks or months or years. Where X represents the number of days or weeks or months or years.
For example, if you want to generate a Syslog Standard report for the last 4 days, you can enter 4 in
the textbox and select Days from the listbox.
The generated report will consist of Syslog data gathered for the last 4 days. This option applies only to Syslog Standard Reports.
24 Hours Select this option, only if you want to generate a 24 hour report. This report will contain all the syslog data gathered during the last 24 hours. For example, if you select this option and schedule the report to be generated at 6.p.m. the report will have the data of the past 24 hours, from 6 p.m.
From Click on the calendar icon and select the date. The date appears in the dd-mmm-yyyy format in the From field. For example, 02-Dec-2004.
The From field is enabled only if you have de-selected the 24 Hours check box.
To Click on the calendar icon and select the date. The date appears in the dd-mmm-yyyy format in the To field. For example, 03-Dec-2004.
Chapter 15 Enabling and Tracking Syslogs Using Syslog Analyzer and Collector
Overview: Syslog Analyzer Reports
Scheduling
Run Type Select the frequency at which the job should be run:
• Immediate—Runs the report immediately.
• 6 - hourly—Runs the report every 6 hours, starting from the specified time.
• 12 - hourly—Runs the report every 12 hours, starting from the specified time.
• Once—Runs the report once at the specified date and time.
• Daily—Runs daily at the specified time.
• Weekly—Runs weekly on the day of the week and at the specified time.
• Monthly— Runs monthly on the day of the month and at the specified time.
In the case of periodic jobs, the subsequent instances of jobs will run only after the earlier instance of the job is complete.
For example: If you have scheduled a daily job at 10:00 a.m. on November 1, the next instance of this job will run at 10:00 a.m. on November 2 only if the earlier instance of the November 1 job has completed. If the 10.00 a.m. November 1 job has not completed before 10:00 a.m. November 2, then the next job will start only at 10:00 a.m. on November 3.
If you select Immediate, the Date, Job Description, and E-mail option will be disabled for you. If you select any other run type, then you can specify the start date and time and also provide the job description (mandatory) and the e-mail ID for the notification after the report is generated.
Date Select the start date using the calendar icon, to populate the Date field in the dd-mmm-yyyy format, for example, 02-Dec-2004. This is a mandatory field.
The Date field is enabled only if you have selected an option other than Immediate in the Run Type field.
at Select the hours and minutes from the drop-down lists.
Job Info
Job Description Enter a description for the report that you are creating.
The Job Description field is enabled only if you have selected an option other than Immediate in the Run Type field. This is a mandatory field. Accepts alpahnumeric characters.
Chapter 15 Enabling and Tracking Syslogs Using Syslog Analyzer and Collector Overview: Syslog Analyzer Reports
Step 6 Click Finish.
The specified report appears in a separate browser window. You can generate the following reports:
• 24-Hour Report. See Generating a 24-Hour Report
• Syslog Custom Report. See Generating a Syslog Custom Summary Report.
• Severity Level Summary Report. See Generating a Severity Level Summary Report.
• Standard Report. See Generating a Standard Report.
• Unexpected Device Report. See Generating an Unexpected Device Report. If you want to revert to the default values in the RME Reports dialog box, click Reset
E-mail Enter the e-mail ID of the user who should be notified when the report is generated. You can enter more than one e-mail ID, separated by commas.
The E-mail field is enabled only if you have selected an option other than Immediate, in the Run Type field.
Configure the SMTP server to send e-mails in the View / Edit System Preferences dialog box (Common Services > Server > Admin > System Preferences).
We recommend that you configure the CiscoWorks E-mail ID in the View / Edit System Preferences dialog box (Common Services > Server > Admin > System Preferences). When the job completes, an e-mail is sent with the CiscoWorks E-mail ID as the sender's address
Attachment Check this option if you want the job notification mail to consist of attachments in either CSV or PDF format.
Either select:
• CSV if you want the attachment in CSV format. Or
• PDF if you want the attachment in PDF format. This is the default format.
The CSV and PDF radio options will be enabled only if the Attachment checkbox is checked. If the Attachment option is disabled, go to Common Services to change the settings. For more information on configuring attachment settings as well as the maximum size of attachments allowed in notification mails, see Common Services Online Help.
Chapter 15 Enabling and Tracking Syslogs Using Syslog Analyzer and Collector
Understanding Message Reports