Hi Jochen I cannot create exceptions alerts via email, because in the messages, that I get from the Cisco switch there is no source IP.
This is a user's access to the Cisco switch: 23] at 09:20:08 CET Tue May 10 2016 *Thank you so much for your support* *Seba* On Friday, May 6, 2016 at 11:47:14 AM UTC+2, Seba wrote: > > *Dear all,* > > > > > *How can I set a streaming rule, in order to not send a notification, when > access to the switch is not coming from known IP’s? My Cisco Catalyst 3750X > doesn’t add the source IP in the notification for logins, but it does when > somebody modifies the settings.* > > > > *I have been trying to find a solution for the last few days without > success. * > > > > *Thank you so much for your support* > > *Seba* > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/1fe54897-873a-4221-8a81-5b1eff84102c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
