QTS 5.2.11.3661
I have customer that wants to know when their router has failed over to metered cellular service and when it flips back.
They have a CISCO ASA that dumps syslogs to the QNAP. QNAP is capturing the logs perfectly! The QNAP is already sending backup reports and email also works perfectly.
Inside the syslogs stored on the QNAP, I can clearly see when the router is failing over to the cellular connection.
“%ASA-6-622001: Removing tracked route” (when their main fiber line goes down and flips to cellular)
“%ASA-6-622001: Adding tracked route” (when their main fiber comes back on-line)
I have tried setting up “QuLog Center” and “Syslog Server” Event Notifcations using Keyword filter with NO success.
I have tried the following “includes” triggers…
%ASA-6-622001: Removing tracked route
%ASA-6-622001: Adding tracked route
%ASA-6-622001
622001
Removing tracked route
Adding tracked route
Not one email event notifications has been sent.
Ideally I would like to trigger two emails. One for when it goes down and another when it restores. Each having a unique subject for customer.
Example…
Subject: Alert-Primary ISP Failure-Using Emergency Cellular Service
Subject: Restored-Primary ISP Service is back on-line.
I would settle for one for event 622001, but right now I am not getting any notices at all.
Cellular is metered and there is charge per 1gb, so customer reasonably wants to know when this service activates and restores.
I have spent days trying to get it send any message and not having any luck.
What is the trick to get this to work?
Thanks in advance!