What make are the switches, Randy? On Cisco switches, setting "no logging link-status" on the uninteresting ports will eliminate syslog messages when they change state. HP switches have a command that does much the same.
Evan On Thu 10/06/03 13:10 , Michael Graziano [email protected] sent: > If Andrey's solution isn't viable in your case you can always set up a > simple SNMP Comparison probe to check ifStatus on the ports you care > about and use either InterMapper's SNMP Trap notifier type or a > command-line notifier to generate an appropriate trap for Splunk. > > -MG > On Jun 3, 2010, at 1:02 PM, an > [email protected]> wrote: > > > > Is there a reason why you monitor all user ports in IM? > I usually > > only "display" the uplink ports. Ifdown generates a > warning I > > believe and sends an notification with the name of the > port. > > > > > Is that what you are asking? > > > > > > > > > -------------- > > > Andrey Khomyakov | Senior Network Engineer | > +1.617.879.5945 > > > > > > > > > > > > > > Confidentiality Note: This e-mail, and any attachment > to it, is > > intended to be confidential and might be legally > privileged. It is > > intended solely for the use of the addressee. If you > are not the > > intended recipient, you are hereby notified that > reading, copying, > > disseminating or distributing this email is strictly > prohibited. If > > you have received this e-mail in error, please > immediately return it > > to the sender and delete it from your system. Thank > you. > > -----Original Message----- > > > From: [email protected] > > [[email protected] > > ] On Behalf Of Randy Baker > > > Sent: Thursday, June 03, 2010 12:58 PM > > > To: InterMapper Discussion > > > Subject: [IM-Talk] Notifiers per device port > > > > > > Hi: > > > > > > Unless I am overlooking something, it seems that you > cannot put a > > notifier on a switch port. > > > > > > The application I have for this feature is as follows: > We typically > > have multiple uplink ports per switch, so monitoring > the device is > > not completely effective. We are running Splunk to > capture all > > syslog events, and every time a user turns on or off > their computer > > we get messages indicating that a port is up or down. > It would be > > nice to no longer trap for ports up or down on the > device as I > > cannot discriminate as to what ports I want to watch. > Ideally, I > > would like Intermapper to detect the loss of only the > uplink ports > > to a switch and to send a SNMPT trap notification to > Splunk to > > record the event. > > > > > > If there is a way to do this, I would appreciate some > pointers. > > Otherwise, this would be a nice feature in future > releases. > > > > > Thank you > > > Randy Baker > > > > ____________________________________________________________________ > > List archives: > > > http://www.mail-archive.com/intermapper-talk%40list.dartware.co > m/ > > To unsubscribe: send email to: [email protected] > > > > > > ____________________________________________________________________ > > List archives: > > > http://www.mail-archive.com/intermapper-talk%40list.dartware.co > m/ > > To unsubscribe: send email to: [email protected] > > > > > > ____________________________________________________________________ > > List archives: > > http://www.mail-archive.com/intermapper-talk%40list.dartware.co > m/ > To unsubscribe: send email to: [email protected] > > > > > ____________________________________________________________________ List archives: http://www.mail-archive.com/intermapper-talk%40list.dartware.com/ To unsubscribe: send email to: [email protected]
