cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
314
Views
5
Helpful
1
Replies

Custom events to email on VPN3000 not working

dennis
Level 1
Level 1

I am trying to setup a custom events to email. Here are the entries in my evnet list:

ALL/SEV(1-3)

AUTH/22,28, SEV(4)

The goal is to see all severity 1-3 and the two AUTH events 222 (login) and 28 (disconnect). I have set my events to email to "use event list"

I get my severity 1-3 event sent to email but not the AUTH events. What have I missed?

1 Reply 1

gfullage
Cisco Employee
Cisco Employee

The highest severity alert that will be emailed is Sev 3, regardless of what you select in the Event Class. When you add in an email recipient you have to specify what the lowest sev alert is that this person will receive, that can only be 1, 2 or 3. This overrides anything you specify in the Event Class. If you click Help on the Event screen and the Email Recipient screen this is explained in detail.

Hope that helps.