Syslog Verification

Unanswered Question
Jun 25th, 2008

Hi,

I have configured syslog on my Catalyst 6509.I have used following commands.

----------------------------------------

logging buffered 16384

logging trap notifications

logging facility local7

logging 10.112.64.7

service timestamps debug datetime localtime show-timezone msec

service timestamps log datetime localtime show-timezone msec

----------------------------------------

When i use "sh logging", it shows me only last days messages.I mean to say , i feel, it is not showing me all messages which are logged in Syslog server.

Following is the output, i am getting when i use "show logging"

Syslog logging: enabled (0 messages dropped, 0 messages rate-limited, 0 flushes, 0 overruns)

Console logging: level debugging, 8746 messages logged

Monitor logging: level debugging, 0 messages logged

Buffer logging: level debugging, 5938 messages logged

Exception Logging: size (4096 bytes)

Count and timestamp logging messages: disabled

Trap logging: level notifications, 8768 message lines logged

Logging to 10.112.64.7, 5938 message lines logged

Log Buffer (16384 bytes):

How can i see all messaages logged into syslog server.???

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Surya Dathan Thu, 06/26/2008 - 00:04

Hi,

U mean u want to see all the syslog message in your switch?

In that case, you should issue this command, "logging trap debug". It will see all the message including debugging and information too.

Here is some sample for the syslog message type:

06-26-2008 15:47:42 Local1.Notice 10.50.199.7 473050: Jun 26 15:47:39.582 SGT: %SYS-5-CONFIG_I: Configured from console by net1 onvty0 (10.10.101.26)

06-26-2008 15:47:56 Local1.Info 10.50.199.7 473055: Jun 26 15:47:53.410 SGT: %SEC-6-IPACCESSLOGP: list Network_MGMT permitted tcp 10.50.100.99(45412) -> 0.0.0.0(23), 1 packet

Hope this help. Thanks

satish_zanjurne Thu, 06/26/2008 - 00:23

Hi Subhash,

Thanks for the information.

But your command , just changes the logging level, it will log all messages.

But my query is , i see only last days messages, i want to know, whether my syslog server is logging the messages.???

If it is logging then, if i use "show logging" , why does not it show messages which were logged 2 weeks back for that matter 2 days back ???

Actions

This Discussion