I have a 3060 Concentrator that I am trying to point events to a syslog. I have the syslog defined by IP in the Config>System>Events>Syslog setting with udp514 and local7. I also have Events to Syslog set to Use Event List, and the event list is set to ALL/SEV(1-13).
The target machine is a XP box with Kiwi running on it. just before my Syslog i have a Cat2960G and I setup a SPAN to a Network General Portable Sniffer and I am not seeing any packets come from the Concentrator destined for my Syslog.
any help is greatly appreciated.