logging on syslog

Unanswered Question
Oct 14th, 2008

i use a linux box as a syslog server,i want to collect the log infomation of a cisco router , after colleting the log, i find that the format (or the content) of router log can not meet my satification.

the content of my log is like following :

Oct 14 16:32:58 x.x.x.x 66: *Oct 14 16:37:23: %SYS-5-CONFIG_I: Configured from console by cisco on vty0 (10.10.10.2)

Oct 14 16:33:28 x.x.x.x 67: *Oct 14 16:37:53: %SYS-5-CONFIG_I: Configured from console by cisco on vty0 (10.10.10.2)

could any one help

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Joe Clarke Tue, 10/14/2008 - 09:48

These messages are valid, and point to a config change on the devices in question. What do you feel is missing?

mezgani.ali Tue, 10/14/2008 - 10:17

How can i get more verbosity with it, i need to inspect the crash of my router.

Joe Clarke Tue, 10/14/2008 - 15:58

If you want to customize the body of a message, you will have to use the Embedded Syslog Manager feature available in IOS 12.3(2)T and higher (more on ESM can be found at http://www.cisco.com/en/US/docs/ios/12_3t/12_3t2/feature/guide/gt_esm.html). However, you can adjust the types of messages sent by increasing the logging trap severity. For example, to send debug messages from your router (including stack traces from crashes), configure:

logging trap debug

Actions

This Discussion