Solved: Syslog not working

michael.m.williams · ‎07-31-2008

I am having problems with syslog. I can't get any mesg to show up. When I go to syslog collector status I have 0 accross the board.

I went to the syslog collector log and saw this

propFiled:/CSCOpx\MDC\tomcat\webapps\rme\WEB-INF\classes\com\cisco\nm\rmeng\csc\data\Collector.properties

SyslogCollector - [Thread: main] INFO , 31 Jul 2008 08:18:58,083, Logging System Initialized.

SyslogCollector - [Thread: main] INFO , 31 Jul 2008 08:18:58,083, System Initialized.

SyslogCollector - [Thread: main] WARN , 31 Jul 2008 08:19:05,036, Unable to resurrect connection to a subscriber.

SyslogCollector - [Thread: main] INFO , 31 Jul 2008 08:19:05,052, Service started...

SyslogCollector - [Thread: Thread-10] WARN , 31 Jul 2008 08:20:05,661, Unable to add monitor for netmgt01

prior to this a recived a TOMCAT error and then it purged all my logs.

help

Mike

Joe Clarke · ‎07-31-2008

If you're seeing a non-zero Forwarded count, then it's working.

View solution in original post

Joe Clarke · ‎07-31-2008

If you're seeing 0, this means that SyslogCollector is not receiving any messages. Check your syslog.log file to make sure new messages are coming in. Make sure casuser has full control over this log file.

michael.m.williams · ‎07-31-2008

I deleted my subscribtion and then restarted cisco works. Once I restrted the server, then I statred seeing some syslog msgs coming in.

I went to the syslog collector file again and saw this.

SyslogCollector - [Thread: main] INFO , 31 Jul 2008 11:05:45,301, Logging System Initialized.

SyslogCollector - [Thread: main] INFO , 31 Jul 2008 11:05:45,301, System Initialized.

SyslogCollector - [Thread: main] WARN , 31 Jul 2008 11:05:52,567, Unable to resurrect connection to a subscriber.

SyslogCollector - [Thread: main] INFO , 31 Jul 2008 11:05:52,582, Service started...

SyslogCollector - [Thread: Thread-10] WARN , 31 Jul 2008 11:07:00,317, Unable to add monitor for netmgt01

IS it still not working correctly?

I have a casusers with full control

Thanks

Mike

Joe Clarke · ‎07-31-2008

If you're seeing a non-zero Forwarded count, then it's working.

michael.m.williams · ‎07-31-2008

I am seeing 7 forwarded now.

Thanks

Mike

mwynen · ‎09-24-2008

I'm not getting rid of these 0s, but the Syslog.log file is bigger than 2Gig. :-(

Joe Clarke · ‎09-24-2008

Please start a new thread for your issue.