Forum Discussion

grantae's avatar
4 years ago

Info Level Alarm being Marked as Error Level Syslog Message

We send syslog messages from ISE to LM. It looks like this alert is marked as INFO but LM treats it as Error level. Is there a way to set this alert as Warning instead of Error?

--------------------------------------------------------------

Host: <HOSTNAME>

Eventsource: Cisco_Syslog

Message: CISE_Alarm INFO: EAP Connection Timeout : Server=<HOSTNAME>; NAS IP Address=<IP>; NAS Identifier=N/A

Level: error

Admin: ##ADMIN##

Hostname: <HOSTNAME>

Hostdesc:

Level: error

Value: CISE_Alarm INFO: EAP Connection Timeout : Server=<HOSTNAME>; NAS IP Address=<IP>; NAS Identifier=N/A

Threshold: ##THRESHOLD##

Alerttype: eventAlert

Eventsource: Cisco_Syslog

Datasource: Cisco_Syslog

Generalcode: ##GENERALCODE##

Specificcode: ##SPECIFICCODE##

Facility: local use 3 (local3)

Message: CISE_Alarm INFO: EAP Connection Timeout : Server=<HOSTNAME>; NAS IP Address=<IP>; NAS Identifier=N/A