cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

121
Views
0
Helpful
0
Replies
Highlighted
Beginner

Use ESM to prevent ISE messages going to syslog server

Hello,

 

I would like to create a filter (stream) to prevent %MAB and %DOT1X messages from going to my syslog server. I have an idea how it is supposed to work, but not sure how to do the [my_procedure_to_check_this_message] portion of the script.

 

So if the message contains %MAB or %DOT1X then return null, else return the original message.

 

Here is basically what I have:

 

if { [my_procedure_to_check_this_message] == 1 } {
     return ""
} else {
     return $::orig_msg
}

 

Thanks in advance!!

CreatePlease to create content
Content for Community-Ad
July's Community Spotlight Awards