ESM filtering out a message

[pgasparovic]

Hi,

is there a chance to catch a guru here to help me filter out some very annoying messages on IOS XE SDWAN sw, that happen on console while vManage does some activity? Cisco TAC responded that he knows about "no logging console" only...

ESM got on my mind as last possible chance, though an overkill seems so.

So, who could help me to quickly filter out these msgs?

*Jan 6 14:04:37.786: %DMI-5-AUTH_PASSED: R0/0: dmiauthd: User 'vmanage-admin' authenticated successfully from 172.23.9.1:40885 and was authorized for netconf over ssh. External groups:
*Jan 6 14:04:49.494: %DMI-5-AUTH_PASSED: R0/0: dmiauthd: User 'vmanage-admin' authenticated successfully from 172.23.9.1:40921 and was authorized for netconf over ssh. External groups:

Thanks a lot!

Peter

[Georg Pauwen · Accepted solution]

Hello,

not sure if this is supported on your device, but try the logging discriminator below:

logging discriminator DMI severity drops 5 facility drops DMI mnemonics drops AUTH_PASSED

logging buffered discriminator DMI 100000
logging console discriminator DMI
logging monitor discriminator DMI
logging host x.x.x.x discriminator DMI

[pgasparovic]

Maaan, wss just like this but severity param (stupid error).

Now I'm enjoying the (console) silence!!

Thanks, have a great NY2021!

Peter

[C H O K O]

>Details

MOONSIDE-R01#sh ver | inc Last reload|License Type|Router operating mode|Configuration register|Cisco IOS XE|Uptime|ISR|8200|8300|8000
Cisco IOS XE Software, Version 17.12.01a
Uptime for this control processor is 3 weeks, 5 days, 2 hours, 44 minutes
Last reload reason: reload
cisco C8000V (VXE) processor (revision VXE) with 2265293K/3075K bytes of memory.
Router operating mode: Controller-Managed
Configuration register is 0x2102
MOONSIDE-R01#sh clock detail 
.15:58:17.180 CDT Mon May 5 2025
Time source is NTP
Summer time starts 02:00:00 CST Sun Mar 9 2025
Summer time ends 02:00:00 CDT Sun Nov 2 2025

 

>Process

1. Identify the message to be discriminated from the LOGGING>

MOONSIDE-R01#
.May 5 20:47:26.268: %DMI-5-AUTH_PASSED: R0/0: dmiauthd: User 'vmanage-admin' authenticated successfully from 1.1.1.1:52624 for netconf over ssh. External groups:

2. Confirm current LOGGING options>

MOONSIDE-R01#sh run | sect logging
logging buffered 512000
logging persistent size 104857600 filesize 10485760
logging synchronous
logging synchronous
logging synchronous

3. Add the filter>

MOONSIDE-R01#config-

admin connected from 127.0.0.1 using console on MOONSIDE-R01
MOONSIDE-R01(config)# logging discriminator NO_DMI msg-body drops "%DMI-5-AUTH_PASSED"
MOONSIDE-R01(config)# logging console discriminator NO_DMI
MOONSIDE-R01(config)# logging monitor discriminator NO_DMI
MOONSIDE-R01(config)# commit
Commit complete.

 4. After any COMMIT, the expected behavior is to see a "%DMI-5-AUTH_PASSED:" message, but this time you won't.