Re: CW LMS2.2 UNIX SYSLOG : "define automated action problem"

ozlemduran · ‎07-05-2004

Hi,

I want use "define automated action" section (CW on UNIX) and I defined example script which is on help file, I saw syslog message on log file but email didnt come. (I think I should define SMTP server somewhere) what can I do?

thanks

nawas · ‎07-07-2004

What version of RME you have, older versions of RME use the old program built in UNIX call sendmail and there is no option in GUI to specify SMTP server, however the new versions such as RME 3.5 have option for SMTP by going into RME>admin>system configuration. Also the scipt you copied from the HELP file does require that you specifiy SMTP server.

ozlemduran · ‎07-07-2004

we are using RME 3.5, and I have already defined SMTP server.

ozlemduran · ‎07-13-2004

I m on a island and waiting for help, is there anyone could find my help bottle...

kawng · ‎07-13-2004

What version of Solaris?

Please post the script and the syslog you are trying to

capture.

Have you verified if Automated Actions works with

a simple script like creating a log file on the

CiscoWorks server or display a text line?

Also, how are you verifying if the syslog that you

are monitoring arrives at the CiscoWorks Server?

Hope that helps

nawas · ‎07-13-2004

Yes, please post the script so we can see if it is writte correctly or not. Also when you go into RME>Admin>syslog analysis>define automated action, do you have check mark on "enable Action" if not then please do. Make sure that there is no syslog filtering is enabled.

ozlemduran · ‎07-13-2004

hi :)

1)I want to see mails belog to syslogs which are between 0-3.

2)My syslogs are coming to my server.it is ok

3) my smtp server is defined in System Configuration"

4)my script is:

CW # /opt/CSCOpx/cgi-bin/sysloga/sampleEmailScript.pl -email_ids ozlem@tur.com.tr -subject $D -from Ozlem -sender ozlem@tur.com.tr -text_message TEST

5) I think $M and $D is not working;

bacause when I use them after -text_message(in command prompt) the command line doesent accept the command.

and if I use any text after "-text_message" a mail is coming to my local ciscoworks server, and you can see, there is something wrong.

eceived: (from root@localhost)

by netmanager.turkcell.com.tr (8.11.7+Sun/8.11.7) id i9;

Wed, 14 Jul 2004 09:46:23 +0300 (EET DST)

Date: Wed, 14 Jul 2004 09:46:23 +0300 (EET DST)

Message-Id: <i9@netmanager.tur.com.tr>

To: ozlem@tur.com.tr

Sender: Ozlem

From: SyslogAnalyzer.on.behalf.of.ozlem@tur.com.tr

Subject: -from

MIME-Version: 1.0

and finally "enable action" is checked

ozlemduran · ‎07-13-2004

and also local mail is like that;

----- Transcript of session follows -----

550 5.1.2 ozlem@tur.com.tr... Host unknown (Name server: mailhost.tur.com.tr: host not found)

--i9/netmanager.tur.com.tr

Content-Type: message/delivery-status

Reporting-MTA: dns; netmanager.tur.com.tr

Arrival-Date: Wed, 14 Jul 2004 10:23:49 +0300 (EET DST)

Final-Recipient: RFC822; ozlem@tur.com.tr

Action: failed

Status: 5.1.2

Remote-MTA: DNS; mailhost.tur.com.tr

Diagnostic-Code: SMTP; 550 Host unknown

Last-Attempt-Date: Wed, 14 Jul 2004 10:23:49 +0300 (EET DST)

--i6/netmanager.tur.com.tr

Content-Type: message/rfc822

Return-Path:

Received: (from root@localhost)

by netmanager.tur.com.tr (8.11.7+Sun/8.11.7) id i3;

Wed, 14 Jul 2004 10:23:49 +0300 (EET DST)

Date: Wed, 14 Jul 2004 10:23:49 +0300 (EET DST)

Message-Id: <i3@netmanager.tur.com.tr>

To: ozlem@tur.com.tr

Sender: CW2000

From: SyslogAnalyzer

Subject: ALARM

MIME-Version: 1.0

Dear CW2K User,

This email is generated by the sampleEmailScript.pl program.

The syslog message that was configured for this automated action is:

test

nawas · ‎07-14-2004

Try the following tested/working script. Replace with your email address and smtp server address. Make sure you stop/start syslog pocesss after this.

/opt/CSCOpx/cgi-bin/sysloga/sampleEmailScript.pl -text_message $M -email_ids MYEMAILADDRESS -subject config change -from CW2000 -smtp SMTPADDRESS

ozlemduran · ‎07-15-2004

first of all thanks for your help nawas;

but still it isnt working. I used this command line in solaris command prompt and in ciscoworks command line, everything seems ok but there is no mail;

and when I look in to solaris mail system, I saw that;

----- The following addresses had permanent fatal errors -----

ozlem@tur.com.tr

(reason: 550 Host unknown)

----- Transcript of session follows -----

550 5.1.2 ozlem@tur.com.tr... Host unknown (Name server: mailhost.tur.com.tr: host not found)

what can you say about that?

nawas · ‎07-15-2004

well that appears to be an issue with the system not sending mail.Lets do this, run the checklist in the following URL and if that still doesn't work, run the syslog automated action debug. Instructions are in the URL. (email me the debug file nawas.muhammad@jnli.com)

http://www.cisco.com/en/US/products/sw/cscowork/ps2073/products_tech_note09186a00800a7275.shtml#debug

ozlemduran · ‎07-15-2004

thanks for everything nawas,

we find out the answer; we changed /etc/hosts file;

because it was searching for a SMTP server and it was finding localhost; now it is finding SMTP server IP address :)))) and it is working.