Syslog Passive Monitor Instance

Enter the appropriate information in the following fields.

Name. The name of the monitor as it appears in the Passive Monitor Library.
Description. The description of the monitor as it appears in the Passive Monitor Library.
Match On. You can click the Add button and this will take you to the Expression Editor where you can create your expression, test it, and compare it against potential payloads you can receive. After creating the expression, clicking OK will insert that string into the Match on box. NOTE: If you have multiple payload "match on" expressions, they are linked by "OR" logic - not "AND" logic. Example: If you have two expressions, one set to "AB" and the other to "BA", it will match against a trap containing any of the following: "AB" or "BA" or "ABBA".

Click OK and this event is now listed in the Passive Monitor Library as a Syslog Passive Monitor.

For an example of why you might create a Syslog Event, see Sample of a Syslog Monitor (Event).