<div dir="ltr">Bill,<div><br></div><div>I will check that out, looks like it could be handy.</div><div><br></div><div>My solution for the time being is to send all syslog messages to a solarwinds server. That server looks for NAK's and checks for the OUI of the gear I'm using and passes it off to another script to sleep and process the reboot command. Then solarwinds discards all messages from the DHCP server. I will be looking for a server that I can setup standalone as I don't care for solarwinds much and certainly don't like the fact that it runs on windows, but it does seem to be a good logging server and there aren't any licensing fees attached to that(since we already have the Orion software). Splunk would be a great option if they weren't also so proud about their software.</div><div><br></div><div>Thanks for all the input for those that chimed in!</div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><br><div><div style="font-size:small">Mark Spring<br></div><span style="font-size:small">Information Systems Manager</span><br></div></div></div></div></div></div>
<br><div class="gmail_quote">On Fri, Jul 21, 2017 at 3:14 AM, Bill Shirley <span dir="ltr"><<a href="mailto:bill@c3po.polymerindustries.biz" target="_blank">bill@c3po.polymerindustries.biz</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
  
    
  
  <div text="#000000" bgcolor="#FFFFFF">
    You might look into Simple Event Correlator (SEC)
    <a class="m_-323584048796695910moz-txt-link-freetext" href="https://simple-evcorr.github.io/" target="_blank">https://simple-evcorr.github.<wbr>io/</a><br>
    <br>
    It can monitor your log files and trigger events.  It's an rpm on
    Fedora; don't know about<br>
    other distros.  There's a mailling list and Risto, the author, is
    always responsive.<span class="HOEnZb"><font color="#888888"><br>
    <br>
    Bill</font></span><div><div class="h5"><br>
    <br>
    <div class="m_-323584048796695910moz-cite-prefix">On 7/19/2017 8:18 PM, Mark Spring
      wrote:<br>
    </div>
    </div></div><blockquote type="cite"><div><div class="h5">
      <div dir="ltr">I am having some issues with network gear, and
        while arguing with vendors about who's problem it really is..I
        noticed that my device receives a NAK before it receives the
        proper IP address from our server(when the gear comes back
        online). If I can track this down in the logs then I can look
        for the ACK that follows, login to the device and reboot it
        properly. 
        <div><br>
        </div>
        <div>I wrote a script to try and tail the log file with bash and
          I have been able to pick off the traffic but the buffer when
          tailing in bash leaves me with a case where time before the
          device is handled is indefinite.</div>
        <div><br>
        </div>
        <div>I have read about the "on commit" in the config and that
          doesn't seem to help, the expiry and other options don't seem
          to fit my needs either.</div>
        <div><br>
        </div>
        <div>I'm not necessarily committed to BASH, it just seemed to be
          the quickest go to without a lot of fluff...considered PERL
          PHP or Python. Don't have a lot of experience with one
          particular language, just use what works for each scenario.</div>
        <div><br>
        </div>
        <div>Let me know where I can fill in blanks! <br clear="all">
          <div>
            <div class="m_-323584048796695910gmail_signature" data-smartmail="gmail_signature">
              <div dir="ltr">
                <div>
                  <div dir="ltr"><br>
                    <div>
                      <div style="font-size:small">Mark Spring<br>
                      </div>
                      <span style="font-size:small">Information Systems
                        Manager</span><br>
                    </div>
                  </div>
                </div>
              </div>
            </div>
          </div>
        </div>
      </div>
      <br>
      </div></div><span class=""><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">NKTelco</span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)">
      <span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">301
        W. South St.</span>
      <div><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">New
          Knoxville, OH 45871</span></div>
      <div><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)"><br>
        </span></div>
      <div><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">Phone:
          1-888-NKTELCO</span></div>
      <div><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">Fax:
          <a href="tel:(419)%20753-2950" value="+14197532950" target="_blank">419-753-2950</a></span>
        <div><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)">
          <span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">This
            message and the file(s) attached are confidential and
            proprietary</span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)">
          <span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">information
            of NKTelco for the sole use of the intended recipient. Any </span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)">
          <span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">unauthorized
            review, distribution, disclosure, copying, use, or </span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)">
          <span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">dissemination,
            either whole or in part, is strictly prohibited. Do not </span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)">
          <span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">transmit
            these documents, in any form, to any third party without
            the </span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)">
          <span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">expressed
            written permission of NKTelco.</span></div>
      </div>
      <br>
      <fieldset class="m_-323584048796695910mimeAttachmentHeader"></fieldset>
      <br>
      <pre>______________________________<wbr>_________________
dhcp-users mailing list
<a class="m_-323584048796695910moz-txt-link-abbreviated" href="mailto:dhcp-users@lists.isc.org" target="_blank">dhcp-users@lists.isc.org</a>
<a class="m_-323584048796695910moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/dhcp-users" target="_blank">https://lists.isc.org/mailman/<wbr>listinfo/dhcp-users</a></pre>
    </span></blockquote>
    <br>
  </div>

<br>______________________________<wbr>_________________<br>
dhcp-users mailing list<br>
<a href="mailto:dhcp-users@lists.isc.org">dhcp-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/dhcp-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/<wbr>listinfo/dhcp-users</a><br></blockquote></div><br></div>

<br>
<span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">NKTelco</span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)"><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">301 W. South St.</span><div><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">New Knoxville, OH 45871</span></div><div><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)"><br></span></div><div><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">Phone: 1-888-NKTELCO</span></div><div><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">Fax: 419-753-2950</span><div><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)"><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">This message and the file(s) attached are confidential and proprietary</span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)"><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">information of NKTelco for the sole use of the intended recipient. Any </span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)"><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">unauthorized review, distribution, disclosure, copying, use, or </span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)"><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">dissemination, either whole or in part, is strictly prohibited. Do not </span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)"><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">transmit these documents, in any form, to any third party without the </span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)"><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">expressed written permission of NKTelco.</span></div></div>