Syslog records lost after deleting device from DCR?

Unanswered Question
Apr 26th, 2007
User Badges:
  • Gold, 750 points or more

I had pairs of dupes in DCR in the form of "router" and "router.company.com", with the latter imported from csv. Is it plausible RME deleted the associated Syslog records when I deduped by deleting all the "router.company.com" ones? The only Syslogs listed under "router" are ones collected after my deduplication.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
omadrid Thu, 04/26/2007 - 07:22
User Badges:
  • Cisco Employee,

If you delete a device from the DCR then you are going to lose any related information like config archive, syslog, etc...


Was router also deleted? Were they in an alias state?

yjdabear Thu, 04/26/2007 - 07:31
User Badges:
  • Gold, 750 points or more

DCR didn't recognize any of them as dupes or aliases. The "router" ones are kept.


It doesn't make sense to me to have historical syslogs deleted since those are collected (by syslogd) independently of what LMS/RME is doing. Even in the case of truly retiring/deleting a device, users may still want to have a look back at the syslogs from within RME.

David Stanford Thu, 04/26/2007 - 07:33
User Badges:
  • Cisco Employee,

Are you talking about the Syslog report data being lost or the messages in the syslog.log or syslog_info?

yjdabear Thu, 04/26/2007 - 07:35
User Badges:
  • Gold, 750 points or more

The Syslog report data.


Ok, now it makes some sense, because of this step of selecting what devices I want to run the Syslog reports on. Still, in the case of dupes like I described, it shows an unintended downside.

Martin Ermel Thu, 04/26/2007 - 07:36
User Badges:
  • Blue, 1500 points or more

the messages should be deleted from the syslog DB but are still in the flat file..

(and I know that not everybody should have access to the flat file..)

and BTW - I aggree with you...

Actions

This Discussion