Smarts NCM: How to configure Cisco IOS router and switch packages to match syslog strings when device is in VSS mode

Products

• VMware Smart Assurance

Environment

VMware Smart Assurance - NCM

Resolution

NCM has the ability to trigger a pull based on syslog events received from devices. When Cisco devices are in VSS mode (Virtual switch), the configuration string changes and NCM does not trigger a pull.

In order to catch the proper syslog event for a Cisco Switch, copy the CiscoIOSSwitchSysLog.xml from $VOYENCE_HOME/custompackage/pkgxml/CiscoIOSSwitch/ to $VOYENCE_HOME/custompackage/pkgxml/CiscoIOSSwitch,

For a Cisco Router, copy CiscoIOSRouterSysLog.xml from $VOYENCE_HOME/package/pkgxml/CiscoIOSRouter/ to $VOYENCE_HOME/custompackage/pkgxml/CiscoIOSRouter/


Add the second <event> section to the file in the /custompackage/ directory make it work.

<!--
Copyright (c) 2011 EMC Corporation, All Rights Reserved

Version 21.0.104
$Date: 2009-02-23 19:56:04 $
$RCSfile: CiscoIOSSwitchSysLog.xml,v $
$Revision: 1.5 $

Do not change any information in this file. All scripts in this file
will be overwritten during the update process.
-->
<SysConfig>
<Package>
<IsActive>true</IsActive>
<PackageID>2</PackageID>
<Event>
<MatchString>SYS-5-CONFIG</MatchString>
<ChangedBy>from (.*) by .* on .*</ChangedBy>
<ChangedBy>from .* by (.*) on .*|from .* by (.*)</ChangedBy>
<ChangedBy>from .* by .* on (.*)</ChangedBy>
<PullConfig>1</PullConfig>
</Event>
<Event>
<MatchString>SYS-SW.*-5-CONFIG</MatchString>
<ChangedBy>from (.*) by .* on .*</ChangedBy>
<ChangedBy>from .* by (.*) on .*|from .* by (.*)</ChangedBy>
<ChangedBy>from .* by .* on (.*)</ChangedBy>
<PullConfig>1</PullConfig>
</Event>
</Package>
</SysConfig>