Hi Vijay,
The alert action needs to be configures to execute the following
C:\Program Files (x86)\SolarWinds\Orion\SolarWinds.NCM.RTNForwarder.exe ${IP_Address},RealtimeNotification,${DateTime},${Message}
This should be already configured OOTB and visible by opening the SYSLOG viewer application on the orion Server, and then editing the Cisco IOS rule.
You can replicate this action based on any alert condition such as receiving a trap/ syslog message / high CPU, change of hardware health status etc.
Hope that helps,
Thanks,
Tony