Syslog alerts and levels setting

[jopetik09]

Hi All,

I have 20 PIX and ASA firewall have been configured in my ciscoworks (lms 2.6)
I am able to get alerts like device down and authentication failure messages through mail, I guess these are from DFM.

My present concerns....

Configure syslogs in firewalls as per level 1-7 (ignore 7-5 in Ciscoworks) is that possible? If I configure syslog level as 1 then it is sending all syslogs from 1-7 which i dont want.
And I need to get syslog alerts from firewals to my ciscoworks and then from ciscoworks to my mailbox through email.

Can someone help me on this.

Thanks in advance.

Regards,
Jopeti.

[Nael Mohammad]

You can use automated actions and syslog filters to achieve this based on the message type.

Resource Manager Essentials > Tools > Syslog > Automated Actions

http://www.cisco.com/en/US/partner/docs/net_mgmt/ciscoworks_resource_manager_essentials/4.0/user/guide/syslog.html#wp1211314

RME > Tools > Syslog > Message Filter

http://www.cisco.com/en/US/partner/docs/net_mgmt/ciscoworks_resource_manager_essentials/4.0/user/guide/syslog.html#wp1150419