Send router Logons to SysLog server?

Unanswered Question
Oct 14th, 2007

I want any wr mems or telnet Logons to be logged to my SysLog server from my Cisco 877 and 1841 routers, is this possible?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Richard Burts Sun, 10/14/2007 - 15:12


It is possible to send records to AAA accounting for level 15 commands. So if you are using AAA you could use the accounting facility to get write mem etc. I am not aware of any way to just send these to syslog.

There is a way to send telnet logins to syslog. It is a pretty new feature so you need to be running recent code to be able to do it. This link discusses the enhancements to login including the ability to send messages to syslog for successful login or for not successful login:



whiteford Sun, 10/14/2007 - 21:49

Hi, is aaa accounting ssh and radius logins? I just want to get some auditting put on the routers. I will look at this link.


guruprasadr Sun, 10/14/2007 - 23:52

HI Rick,

Have rated your POST and its very Helpful

Its interesting to know, how do you keep track of the Recent Features and Technologies ? ?

Best Regards,

Guru Prasad R

whiteford Mon, 10/15/2007 - 00:54

He's always a great help with detailed replies, even if the questions (like mine) are simple.

Hi Whiteford,

you can send logins attempted messages to syslog server by enabling the following command

"login on-success log [every login ]"

There is another command to track failed login attempts

" login on-failure log"

This feature is available for ios 12.3(4)T and above

Do let me know if these details have been helpful

Best wishes

Santhosh M.C



This Discussion