Solved: Configure Syslog logging Router

ranbeckycr · ‎12-26-2007

Hello Experts,

I can't get my router to log or syslog to a freeware KiwiSyslog monitoring software.

1- I can ping the syslog server from the router

2- The KiwiSyslog logs PIX syslog with no problem

3- This is the configuration I have on the router:

Router(config)# logging on

Router(config)# logging 1.1.1.1

Router(config)#logging trap informational

a- Router(config)# clock timezone CST -6

b- Router# clock set 10:50:00 Dec 26 2007

I'm puzzled experts..please help

Joe Clarke · ‎12-26-2007

1. This is sufficient for performing a packet capture, yes.

2. Simply enter config mode on the router, then exit, and a %SYS-5-CONFIG_I syslog message will be generated:

Router#config t

Router(config)#end

By default, IOS will send the syslog message using the local7 facility.

David Stanford · ‎12-26-2007

Enable a packet capture on the server side to see if the syslog UDP packets are reaching the server.

You can also try generating a syslog message with debug enabled to see if the message is getting sent.

ranbeckycr · ‎12-26-2007

Hi Davistan,

Thanks for the response.

1- To enable packet capture you mean a snifer like Wireshark/Ethereal?

2- How do I generat a syslog message with debug from the router?

I tried this command on the router and it didn't work: logging trap debug

(Side Note: If I use KiwiSyslogGenerator it works fine)

Joe Clarke · ‎12-26-2007

1. This is sufficient for performing a packet capture, yes.

2. Simply enter config mode on the router, then exit, and a %SYS-5-CONFIG_I syslog message will be generated:

Router#config t

Router(config)#end

By default, IOS will send the syslog message using the local7 facility.

ranbeckycr · ‎12-27-2007

Thanks.

I added this to the router as well:

logging facility syslog

added the "log" to the acl and bingo everything working.

Thanks!