06-15-2007 10:17 AM
I am having trouble getting debug messages into the syslog. This is what I know:
1. Syslog messages are being sent from the device. I verified this with a sniffer.
2. Information messages (conf t, exit) ARE making it into syslog.
3. Went to filters and disabled Sev 7 message filter
4. Turned on debug logging on CW. I never see an indication of the debug messages being received in AnalyzerDebug.log I DO see the informational messages being received.
What am I missing?
Thanks - Jeff
Solved! Go to Solution.
06-15-2007 11:16 AM
Your latter statement is correct. Debugging output is not in a format that SyslogCollector understands. Those messages will never be put in the RME database. The Sev 7 message filter are for debugging MESSAGES that are formatted like proper syslog messages, and contain a facility-severity-mnemonic header.
06-15-2007 10:40 AM
Sounds like you're conflating debug logging from two different sources: 1-3 are syslogging from network devices, while 4 is the internal app debug logging of LMS.
Since LMS reads from local7.info, I think that precludes Syslog Analysis from ever reading in the debug syslogs. Someone from Cisco once told me the debug syslogs have a different format that CiscoWorks can't handle, when explaining why my LMS 2.2 Syslog Analysis had no end of trouble after local7.info was changed to local7.debug.
06-15-2007 11:16 AM
Your latter statement is correct. Debugging output is not in a format that SyslogCollector understands. Those messages will never be put in the RME database. The Sev 7 message filter are for debugging MESSAGES that are formatted like proper syslog messages, and contain a facility-severity-mnemonic header.
06-15-2007 11:26 AM
OK, well that is an interesting "feature". Guess I'll just configure my sniffer to capture the frames and extract the messages from the capture files.
Thanks for the info!
06-15-2007 11:55 AM
I found a more interesting solution. Kiwi syslogd freeware. Tried it and verified that it does capture debug messages.
06-15-2007 11:56 AM
Anything incorrect?
06-15-2007 12:02 PM
Nope. You are apparently correct - LMS 2.6 will not handle debug messages.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide