[Logwatch-Devel] cisco logs

TribalJedi tribal69@bellsouth.net
Wed, 11 Dec 2002 02:50:51 -0500


This is a multi-part message in MIME format.

------=_NextPart_000_0013_01C2A0C0.1E2659B0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit

I was wondering if anyone had a script for parsing Cisco logs.

 

Actually I wouldn't even need it to do any advanced parsing.  I just
need something to search through 2 files and send me everything from the
previous day.  I pretty much set it up so anything I care about is sent
to 2 files.  For instance:

 

/var/log/cisco/1010-debug

/var/log/cisco/6500-debug

 

I would need everything from those 2 files sent to me daily. However I
have no idea how to make a script file to do that.

 

It would be a nifty feature of logwatch to add Cisco support.  Many
companies have their routers/switches log to a linux server.  Currently
we just have to go in everyday and look at the files, however if
logwatch could parse those files and send emails about the relevant
stuff, it would make our job much easier.

 

 

Thanks for any help I can get.

 

Shane


------=_NextPart_000_0013_01C2A0C0.1E2659B0
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html>

<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">


<meta name=3DGenerator content=3D"Microsoft Word 10 (filtered)">

<style>
<!--
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman";}
a:link, span.MsoHyperlink
	{color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{color:purple;
	text-decoration:underline;}
span.EmailStyle17
	{font-family:Arial;
	color:windowtext;}
@page Section1
	{size:8.5in 11.0in;
	margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
	{page:Section1;}
-->
</style>

</head>

<body lang=3DEN-US link=3Dblue vlink=3Dpurple>

<div class=3DSection1>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>I was wondering if anyone had a script for parsing =
Cisco
logs.</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>Actually I wouldn&#8217;t even need it to do any =
advanced
parsing.&nbsp; I just need something to search through 2 files and send =
me
everything from the previous day.&nbsp; I pretty much set it up so =
anything I
care about is sent to 2 files.&nbsp; For instance:</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>/var/log/cisco/1010-debug</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>/var/log/cisco/6500-debug</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>I would need everything from those 2 files sent to me =
daily.
However I have no idea how to make a script file to do =
that.</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>It would be a nifty feature of logwatch to add Cisco
support.&nbsp; Many companies have their routers/switches log to a linux
server.&nbsp; Currently we just have to go in everyday and look at the =
files,
however if logwatch could parse those files and send emails about the =
relevant
stuff, it would make our job much easier.</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>Thanks for any help I can get.</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>Shane</span></font></p>

</div>

</body>

</html>

------=_NextPart_000_0013_01C2A0C0.1E2659B0--