Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi,I've added over 10 domain controllers to be monitored with a CS-MARS but when I look at the raw message, I can only see the half of the message. I know the event log message is longer but the raw message box only shows a few lines and it usually s...
Hi all,I need to create a new rule based on a keyword. I'm able to add an inspection rule but not a drop rule. The problem is Cisco MARS is showing up lots of events from a reporting IPS who is blocking that events. In this manner, the IPS is tagging...
Hi,Does anybody know if there's any tool or manner to customize the reports sending by the CS-MARS? I mean, I'd like to change the Cisco logo, language, etc.Thanks a lot.
Hi,We have a CS-MARS 100 with the last 4.2.1 and I've configured several reports to be sending by email. I'd like to change the default subject that it's shown as "System Scheduler (scheduler)" in the email client (Outlook, p.e.) and if it's possible...
Hi,That's a question in very relationship with another I've posted. I can create lots of inspection rules based on keywords but I can not create a drop rule based on that. P.e. There's a lot of logs originated in domain controllers that I'm able to c...
Hi Beth,Excuse me but I don't understand what you mean with that string. What I'm saying is there's no way to create a drop rule using a keyword. P.e. I want to drop all events from the matching rule called "Password scan" where the keyword "Administ...
Thanks. I've just to see the new XML feature. I'm not very used to work with XML so I'll try to pipe the email to a script and I'll ask my partner for help with XML. He's configured other graphs and metric reports from other devices in XML environmen...
Concerning to SNMP Traps, Have you configured SNARE in the servers? Anyway, you'll have to be sure SNMP is up and working to get that information from the CS-MARS device. To check that, try to SNMP query the server from another platform or tool (from...
As far as I know, you'll have to add the MSFC3 device and configuring like Raj says. Then, you can add the Layer 2 Cisco switch as a "Cisco Switch-IOS 12.2" and you'll see there's an option for "Add Available Module". Look for the MSFC3 device create...
