Need help on Ciscoworks Syslog

Subash Sharma · ‎04-10-2008

Hi,

I am trying to setting up syslog function in Ciscoworks, and i notice that all the device group under syslog.log.

Is there any way to separate the logs that coming from different device(eg. router, asa and etc.)?

The reason i need to separate the log file is just because it is too big and hard to read.

My idea is whether Ciscoworks can separate the log file like eg: firewall_syslog.log or ASA_syslog.log?

Pls help, thanks.

Joe Clarke · ‎04-10-2008

There is no way to do this. However, reading the log file is not the way one should be doing syslog analysis with RME. Instead, you should be running syslog reports against the RME database. You can either run the built-in reports (e.g. severity summary, 24-hour reports, etc.), or design your own. In this manner, you can filter the messages by device type or group. The syslog reports can be found under RME > Reports.