Cisco Switch

Once Cisco Switch is configured to deliver events to EventTracker Manager; alerts, dashboards and reports can be configured into EventTracker.

Some of the Knowledge Packs available in EventTracker are listed below. For more information, please refer Integration Guide.

Reports

Cisco Switch -Access denied This report provides information related to connection denial events occurring on router or switch which includes Source address, Source Port, Destination Address, Destination port and Packets Transferred fields.
Cisco Switch-VLAN management This report provides information related to activities that occurs within the VLAN.
Cisco Switch -Administrative account activity This report provides information related to account activities that is done by the administrator.
Cisco Router-VTP management This report provides information related to activities that occurs with the VTP.

Alerts

Cisco Switch : Interface down or detached This alert is generated when interface down or detached event occurs.
Cisco Switch : Internal software error This alert is generated when internal software error occurs.
Cisco Switch : Line protocol down This alert is generated when line protocol is down.
Cisco Switch : Runaway processes This alert is generated when runaway processes occur.

Reports

Cisco Switch -Port status change This report provides information related to port status changed from UP to DOWN or vice-versa which includes Device Address, Interface Name and Port Status fields.
Cisco Switch -Authentication failure This report provides information related to authentication failure that is whenever the user tries to login into one of the Cisco Switch .

Alerts

Cisco Switch : Configuration changed This alert is generated when any configuration change event occurs.

Reports

Cisco Switch -User logon success This report provides information related to user logon success which includes User Name, Source Address and Source Port fields.
Cisco Switch -User logon failure This report provides information related to user logon failure which includes User Name, Source Address, Source Port and Reason fields.
Cisco Switch -Configuration changed This report provides information related to configuration changes which include Device Address, User Name, and Command Issued fields.
Cisco Router-Port security This report provides information related to port security violation.

The configurations detailed in this guide are consistent with EventTracker Enterprise version 7.X and later, Cisco Switch 12.x and 15.x

For more information please refer to the Integration guide.