Solved

Can I send an email alert when a user logs into Prism Central or Prism Element?

  • 4 August 2022
  • 8 replies
  • 184 views

Userlevel 2
Badge +3

Hi

Is there a way to setup an email alert when a user logs into Prism (Central and element) and an extension to this is there a way to send an email when a patch update is started and ends?

 

Thanks

Eric

 

icon

Best answer by JeroenTielen 25 October 2022, 09:42

View original

8 replies

Userlevel 2
Badge +3

Hmm No answer was the stern reply!

Userlevel 5
Badge +6

Hello Eric,

I can't find you can you that through Prism, however you could do that through configuring Syslog server.

Userlevel 2
Badge +3

Hi

I have looked through the RLog documents but I can’t see any reference to security logs that might contain the logged in user details - any ideas which log contains the information?

 

Thanks

Userlevel 4
Badge +6

Hey,

 

We spent a lot of time with syslog... It is a convoluted mess of documentation and skew between PE and PC but we managed to get there.

We have the prism and aplos logs enabled and get good results. I can dig out the specifics if you like.

 

Userlevel 2
Badge +3

Hi Kcmount

 

I would  appreciate information on how you got it to work, we are trying to use Opmanager syslog viewer but I haven't found how to even get the logs out of the Prism.

 

Thanks

 

Eric

Userlevel 6
Badge +8

You can do this via SYSLOG in Prism Central. 

The login part is in api_audit information. 

This is how the message looks like: 

 

Userlevel 4
Badge +6

Thanks Jeroen :)

 

One thing to be aware of (I'm burnt from syslog setup) is if you aren't careful you can wipe your config out when moving between PC and PE settings.

Let me know if you need a dump of our config process, it works.... (For now!)

Userlevel 2
Badge +3

You can do this via SYSLOG in Prism Central. 

The login part is in api_audit information. 

This is how the message looks like: 

 

Thank you for this, and apologies for the delayed respose, i have been on holiday and just got back.  I will try this out in a short while and feedback.

 

 

Reply