Email notification from MARS not happening for successfull AAA login to devices

[Mohamed Shafeer Kunhu]

Hi

We are trying to configure the CSMARS to send email notification whenever someone login into critical devices like firewall.

We have created a rule to detect the successfull login into devies like ASA.

But even after login, no emails are coming. We tested the email configuration with another rule which detects entering into config mode.

That one is working perfect.

But the successfull authentication rule somehow is not firing the email.

Your quick response is highly appreciated.

Regards,

Shaf

[Farrukh Haroon]

I think you have to focus on the actual rule itself (and if its firing). If the rule fires; then the email alerting should be like any other rule. As you have already mentioned that other rules are working fine; can you check if the appropriate incident is being generated on the successfull login?

Regards

Farrukh