Cisco Syslog Agent errors happening each night

[VON CLAWSON]

Getting the following error each night.

At Wed Mar 25 22:12:51 PDT 2015 on node x.x.x.x, the following SyslogSeverityMatchFound events generated: 
SeverityMatch : Critical
MatchedEvent : Mar 25 22:12:24 CCM-PUB authpriv 2 sudo: pam_unix(sudo:auth): auth could not identify password for [informix]
AppID : Cisco Syslog Agent
ClusterID : 
NodeID : CCM-PUB
 TimeStamp : Wed Mar 25 22:12:24 PDT 2015

Can anyone help me determine why we are seeing these errors?

Thanks

[Manish Gogna · Accepted solution]

Hi,

Its a cosmetic issue and can be ignored.

https://tools.cisco.com/bugsearch/bug/CSCuj34009/?reffering_site=dumpcr

Alerts with message "auth could not identify password for [informix]"

CSCuj34009

Description

Symptom:
Customers get nightly emails with this alert in them when custom RTMT alerts are setup for SyslogSeverityMatchFound events :
authpriv 2 sudo: pam_unix(sudo:auth): auth could not identify password for [informix]

Conditions:
CM 9.1.2

Workaround:
None, it is a cosmetic error and can be ignored.

HTH

Manish

[Robert Rhodes]

This problem still exists in CM 11.0.1.20000-2.

[Gordon Ross]

It's a different BugID for CUCM 11.0 CSCuu78454

It's supposed to be fixed in CUCM 11.5

GTG

[hpsisupport]

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuj34009/?referring_site=ss&dtid=osscdc000283