Need help on Ciscoworks Syslog

Unanswered Question
Apr 10th, 2008
User Badges:

Hi,


I am trying to setting up syslog function in Ciscoworks, and i notice that all the device group under syslog.log.


Is there any way to separate the logs that coming from different device(eg. router, asa and etc.)?


The reason i need to separate the log file is just because it is too big and hard to read.


My idea is whether Ciscoworks can separate the log file like eg: firewall_syslog.log or ASA_syslog.log?


Pls help, thanks.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Joe Clarke Thu, 04/10/2008 - 21:16
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

There is no way to do this. However, reading the log file is not the way one should be doing syslog analysis with RME. Instead, you should be running syslog reports against the RME database. You can either run the built-in reports (e.g. severity summary, 24-hour reports, etc.), or design your own. In this manner, you can filter the messages by device type or group. The syslog reports can be found under RME > Reports.

Actions

This Discussion