07-26-2010 09:50 AM
we have setup sysloganalyzer in LMS 3.2 and alert us via email when certain syslog messages are received.
However our email are flooded with tonnes of email. Is there any way to place a limit say 3 alerts from sysloganalyzer. The switches will still generate similar syslog message, however, we want LMS 3.2's sysloganalyzer to only send 3 emails. This is to prevent our email from flooded.
thanks
07-26-2010 10:07 AM
No, there is no way to rate limit emails from RME using the built-in email action. However, if you are comfortable with scripting, you could set the action type to script, then build a script which can do the rate limiting, then send the email only if the number of messages is below your desired threshold.
07-26-2010 02:49 PM
Thanks for the update.
Is there an example script to rate-limit the emails send from SyslogAnalyzer?
Can advise how to code this script? Using Perl?
07-26-2010 10:14 PM
I do not know of any such scripts. Yes, I would think using Perl would be easiest, but any scripting language would work. From a high level, you would have some kind of database (a flat file would probably do) which tracks the last time an email was sent for a specific message. If another message arrives within the supression time, then you skip sending the email. Else, you send the new email, and reset the last sent time.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide