Migration from Kiwi to CW Syslog

Unanswered Question
Dec 22nd, 2008

My Syslog collector shows as "up" and also shows the following output...

Forwarded - 1598

Invalid - 210

Filtered - 0

Dropped - 0

Received - 1808

What would cause the syslog message to be invalid, and what does the "Forwarded" mean?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Joe Clarke Mon, 12/22/2008 - 12:41

Forwarded is the good state. It means the message passed all of the filters and was handed over to the SyslogAnalyzer for insertion into the RME database. Invalid messages are those which are not properly formatted Cisco syslog messages. A high invalid count is expected on Windows as Daemon Manager writes its messages to the same syslog.log, and those are not valid Cisco syslog messages.

Actions

This Discussion