cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
368
Views
0
Helpful
4
Replies

Placing SNMP messages in system log

one_w_borg
Level 1
Level 1

Does anyone know a way that we can place our SNMP messages in with our syslog? That way we could correlate our SNMP traps with our syslogs.

Thank you,

Bill

1 Accepted Solution

Accepted Solutions

No you can not do that, snmp traps are sent in an snmp format to an snmp server. The console can not display you those headers and the content of the snmp message.

But, traps are triggered by events that can be seen on the syslog usually, depending what events you want to monitor.

Another thing you can do is generate SNMP traps for RMON events for example if cpu is above xx%. That will create a syslog messsage that is also encapsulated as SNMP trap.

Also, EEM can generate syslog messages for certain actions on the router.

But to see the snmp message itself, only a packet capture or the receiving snmp server will show it to you, not the syslog message.

View solution in original post

4 Replies 4

Lucien Avramov
Level 10
Level 10

You can send syslog messages in snmp traps but you can not do the opposite: send snmp messages in syslog.

The only thing you may do is set your syslog level at debug and turn debug snmp packet, which i do NOT recommend as a simple snmpwalk with debug on, will spike your cpu.

HTH

Sorry.. I may have not been real clear on what I was trying to do.

My real question is - is it possible for me to send snmp traps not only to the snmp-server I specify, but also to the router's logging buffer - so that I can see the traps when I do a "show log".

No you can not do that, snmp traps are sent in an snmp format to an snmp server. The console can not display you those headers and the content of the snmp message.

But, traps are triggered by events that can be seen on the syslog usually, depending what events you want to monitor.

Another thing you can do is generate SNMP traps for RMON events for example if cpu is above xx%. That will create a syslog messsage that is also encapsulated as SNMP trap.

Also, EEM can generate syslog messages for certain actions on the router.

But to see the snmp message itself, only a packet capture or the receiving snmp server will show it to you, not the syslog message.

Thank you for your help on this. I was hoping there was an easier way. :-)

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Innovations in Cisco Full Stack Observability - A new webinar from Cisco