Excellent, your syslog is receiving the messages so now you just need to set the alerting up.
So go into syslog viewer and into View and select Alerts/Filter Rules. Mine had created a rule called NCM Rule: Cisco IOS Realtime Change Notifications. If you don't have it then Add New Rule.
General Tab: Give it a name
DNS Hostname Tab: leave as is
Message TAB: Add the following into the Syslog Message Pattern.
*Configured from console*
It needs the asterisk.
Severity/ Facility: leave as is
Time of Day: leave as is
Trigger Threshold: leave as is
Alert Actions: I have to following - change it to the correct path.
C:\Program Files (x86)\SolarWinds\Orion\SolarWinds.NCM.RTNForwarder.exe ${IP_Address},RealtimeNotification,${DateTime},${Message}
This is also written starting on page 123 of the NCM Administrator's Guide.
Now open up Solarwinds web, Go to Settings, click on NCM Setting (in the Settings section).
Now click on Configure Real-Time Change Detection (in the Real-Time Change Detection section).
Now fill out step 3, 4 and 5 and on step 6 Enable the real-time notifications.
If you have any issues, let us know!