17-55
User
Guide

for

the

Cisco

Application

Networking

Manager

5.2
OL-26572-01
Chapter
17






Monitoring

Your

Network
Monitoring
Events
Step
3
(Optional)
To

download

a

copy
of
the
data

dictionary

in
zip
file

format,

click
Download
Data
Dictionary.
Step
4
To
save
the
current

data

file

purging

policy,
click
Save.
Related
Topics

•
Configuring
SMTP

for

Email

Notifications,

page
17-68
Monitoring
Events
The
events

captured

in

the

Events

table

include

both

ACE

syslog

events

and

SNMP

trap

events.

A
procedure
for

viewing

both

types

of

events

and

details

of

information

extracted

from

the

syslog

are
shown
below.

Fields

providing

traffic-oriented

sorting

capability,

specifically

the

information

signified
by
the

column

heads

in

the

Events

Fields

window,

shown

in

Ta

b

l

e


17-19

(Source

IP,

Sour

ce

Port,
Destination
IP,

Destination

Port,

and

Protocol)

are

only

available

for

the

ACE

syslogs.
Note
We
do

not


recommend

that
you
send

a

hi

gh

volume

of

sysl

ogs

to

ANM.
ANM
will

onl

y
process

and
persist
syslogs

at

100

messages

per

second.

Any

additional

syslogs

sent

to

ANM

beyond

that

rate

will
be
discarded.

To

address

this

behavior,

set

the

syslog

severity

level

to

a

setting

that

is

no

higher

than

the
warning
level

(a

severity

level

of

4-Warning).

See

the

“Configuring

Virtual

Context

Syslog

Settings”
section
on

page

6-19

for

details.
Assumptions
To
receive

events

from

devices,

the

devices

must

have

syslog

and

SNMP

traps

configured

correctly.

See
the
“Configuring

Virtual

Context

Syslog

Settings”

section

on

page

6-19

and

the

“Configuring

SNMP

for
Virtual
Contexts”

section

on

page

6-27 .
Procedure
Step
1
Choose
Monitor
>

Events.
ANM
displays

all

events

received

from

ACE

for

Syslog

and

SNMP

traps

for

all

virtual

contexts.

See
Ta
b

l

e


17-19

for


a

description

of

the

di

splayed

information,

which

is

extracted

from

the

sysl

og.
You
can

sort

information

in

the

table

by

clicking

on

a

column

heading.

This

allows

you

to

group

events
and
help

troubleshooting

traffic

information.
Ta
b

l

e


17-19
Monitor
>

Events

Fields
Field
Description
Syslog
ID/SNMP
ID
Displays
the

Syslog

ID

and

SNMP

ID.

If

the

event

is

a

trap,

this

field

is

empty.
Severity
Indicates
the

syslog

severity

level

as

described

in

Ta

b

l

e


6-5 .
Origination
Time
Date
and

time

that

the

event

was

last

changed

in

the

database.
Source
IP
Displays
the

source

name

that

is

reporting

the

event,

for

example,

<chassis/slot>:virtual_context.
Source
Port
Displays
the

source

port.
Destination
IP
Displays
the

IP

address

of

the

destination

if

available.