can't get firewall sysloging to work

Unanswered Question
Mar 17th, 2008
User Badges:

I am running a Linux syslog server (called syslog-ng) and I point the firewall to send all its syslog messages to that server. I believe that I don't have the correct syslog level configured on the firwall, because the syslog server is picking up all syslog messages from the rest of the CAT37505 switches, but not the firewall.


Here's my firewall logging config:


logging enable

logging timestamp

logging console informational

logging buffered notifications

logging trap errors

logging asdm informational

logging mail emergencies

logging facility 16

logging host Inside 192.168.200.54 format emblem

logging permit-hostdown


I can ping this IP address, the routing is ok, nevertheless no syslog messages are reaching the syslog server.


Please assist

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Joe Clarke Mon, 03/17/2008 - 10:54
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

Is it that no syslog messages are making it to the server, or is syslog-ng ignoring them? Are you certain the firewall is generating messages? Your trap severity is set to errors which mean only messages level 3 and lower will be sent as syslogs.

scristian Tue, 03/18/2008 - 10:53
User Badges:

try to put this

snmp-server enable traps syslog

ronshuster Tue, 03/18/2008 - 11:07
User Badges:

That did the trick:


snmp-server enable traps syslog


All the messages went to the buffer and console and none made it to the syslog server, it is now working.


Thanks!!!

Actions

This Discussion