i am aware that duplicate ip address is inside syslog as well as inside DFM. which one is sending out alert to user if there is any duplicate ip address problem occurs? i configure duplicate ip address trap inside DFM as well as configure syslog level to debugging.but i still don't receive any trap sending out to user as well as any syslog regarding about duplicate IP address.on the switch,i can see duplicate IP address logging and when i use kiwi syslog deamon, i also see duplicate ip address syslog.actually,in syslog collector status,receive syslog number increasing and filter syslog is also increasing.forward syslog is not much.why messages are filtered by LMS since i configured the syslog analyzer log level to debugging.any idea what is happening?please help me to find out the solution as there is ciritical virus outbreak on one switch.thanks in advance.
If you want to accept all messages, you should disable or delete all filters and set the mode to Keep.
More information on logrot can be found in the LMS online help in the "Maintaining Log Files" chapter. logrot_trunc is merely a supporting tool that logrot uses to do truncation of large files.