Hi guys, I've put in a ticket with solarwinds and haven't had much luck on this. The technician didn't seem to really understand the problem after i explained it a dozen times. The struggle is real.
Real time Change Detection: Enabled
Product: Cisco ASA 5520 running software version 8.4(5)
Format: Syslog reporting to solarwinds
Template used: Built-in template "Cisco Adaptive Security Appliance"
My issue appears to be two-fold.
1. Whenever I'm connecting into the ASA with the ASDM it does a heartbeat every 30 seconds that generates a syslog notice "Begin configuration: <my ip address> reading from http [POST]". This triggers the alert I have setup in syslog to tell RTCD to go in and take a look. This is the EXACT same notification that is created whenever someone ACTUALLY makes a change in the ASA.
This wouldn't be a problem if the second issue wasn't happening:
2. Everytime Solarwinds connects to the ASA to download the config it also seems to be saving the config. The issue here is 1) It's saving without my permission and 2) when it saves the config it modifies the commented line at the top of the config stating who last modified the config. This TRIGGERS another RTCD and solarwinds connects back into the ASA and saves the config (which modifies the config "last modified by" comment). This causes a pretty big loop and I get spammed with email notifications about all these 'changes'.
So I have set up an exclusion to ignore commented lines to stop the looping issue, however I need to get solarwinds to stop saving the config to begin with.
Can anyone please help?
Thanks so much!
Tom
