Event logs not to be missed

trendkill
Here to help

Event logs not to be missed

Hi Fam, 

 

I trying to build a script which would notify me for any specific events occurred in a network. Any suggestions what event logs i should be looking for. I have a full stack meraki env with MX, MS & MR. i would like to avoid the the events which we already get notified with the meraki internal alerts. 

 

Thanks.

 

 

5 Replies 5
sungod
Kind of a big deal

Is this real time? For that I'd say look at webhooks, syslog, snmp, netflow etc. plus Dashboard's native alerts, to see what you can get with each, the common factor is you need to operate server(s) to accept the incoming events.

https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Meraki_Device_Repor...

 

Which one(s) to use depend on what you are trying to do.

 

If not real time, there are specific API calls for events and security events.

 

https://developer.cisco.com/meraki/api-v1/#!get-network-events is not ideal as there's no option to specify start-end times, you get the lot, but they seem to be returned most recent first so you can stop calling once you have gone back far enough. There's great variability in return data depending on event type, these aren't documented, you need to gather samples and figure out how to handle the ones you are interested it.

 

https://developer.cisco.com/meraki/api-v1/#!get-network-events-event-types gives you the possible event types for a network.

 

For security events...

https://developer.cisco.com/meraki/api-v1/#!get-organization-appliance-security-events

https://developer.cisco.com/meraki/api-v1/#!get-network-appliance-security-events

 

JasonM
Meraki Employee
Meraki Employee


@sungod wrote:

webhooks, syslog, snmp, netflow


Love the callout for all the integration points. +1 on this answer.

alemabrahao
Kind of a big deal
Kind of a big deal

Why don't you use Zabbix to monitor your network? It's a powerful tool.

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
PhilipDAth
Kind of a big deal
Kind of a big deal

I haven't personally used it, but I understand Pager Duty has good Meraki webhook support as well (in case you want a commercial solution).

https://www.pagerduty.com/ 

yujiterada
Meraki Employee
Meraki Employee

I agree with PagerDuty. Very simple to catch trends and filter out unnecessary alerts.

Get notified when there are additional replies to this discussion.