ISSUE: Cisco syslog traps not processing as configured in $SPECROOT/SS/CsVendor/Cisco_Router/Rtr.txt file in Spectrum 10.0 and 10.1. Instead of asserting the event as configured in the $SPECROOT/SS/CsVendor/Cisco_Router/Rtr.txt file, Spectrum is asserting the generic syslog event/alarm. This also affects the $SPECROOT//SS/CsVendor/Ctron_CAT/Switch.txt and $SPECROOT/SS/CsVendor/CiscoPIX/Pix.txt files as well.
CAUSE: A defect in the code that checks the Rtr.txt, Switch.txt and Pix.txt files for processing of specific syslog messages.
RESOLUTION: Patch PTF_10.1.004 addresses this issue. Please contact CA Spectrum Support for a copy of this patch.
ADDITIONAL INFORMATION: For more information on processing Cisco syslog traps, please reference the "Syslog Trap Support" section of the Spectrum 10 document. This is also discussed in knowledge document TEC518945 "How to configure a unique event for a Cisco syslog message in SPECTRUM".