09-11-2009 02:53 AM
I've LMS 2.6 (CS 3.0.5 and RME 4.0.5) on windows 2003 SP2. In the NMSROOT\log\syslog.log, i don't receive any syslog message. All my devices are well configured to send syslog to the LMS.
All CiscoWorks and CWCS services are well started.
09-11-2009 03:03 AM
There are NO firewalls and no ACL between all the devices and the ciscoworks server.
09-11-2009 07:52 AM
Please check if the crmlog services are started. Else execute net start crmlog from the server (commamd prompt).
try to delete the syslog.log (or rename if it has already some logs on it) from the server and restart daemon manger #
To Stop #
net stop crmdmgtd
To Start #
net start crmdmgtd
check the syslog.log should be there automatically and try generating some log messages on devices if they come through.
09-11-2009 08:09 AM
09-11-2009 08:46 AM
Check if the syslog collector is subscribed properly or not.
Check RME >Tools> Syslog> Syslog Collector status to check if the syslog collector has forwarded and other messages coming there or not.
Unsubscribe (is subscribed ) and resubscribe entring the LMS server IP Address.
wait for some time and check if the messages are there.
Only if the Syslog Collector is subscribed properly to collect messages
from syslog.log , the reports will be generated.
09-11-2009 08:54 AM
09-11-2009 09:15 AM
So there should also be a report.
It could be if you are trying to generate a report for those devices which havent sent any syslog messges yet and they are not in the SyslogDb.
try generating a syslog report last 24 hour summary for all the devices and they should show all the syslog messges on it.
Check filter settings too.
09-11-2009 09:51 AM
I send you an extract of the syslog.log file
I send you a standard report which shows NO messages
I send you a screenshot of one of the device which sent a syslog seen in the syslog.log and well managed in RME
You can see that i still have a problem :-(
09-11-2009 09:55 AM
09-11-2009 09:57 AM
09-11-2009 09:57 AM
09-11-2009 12:17 PM
Please check if the syslog Collector and analyzer is working properly or not.
Post the output of :
pdshow SyslogCollector && pdshow SyslogAnalyzer
(from command prompt and this is case sensitive)
09-14-2009 12:25 AM
09-15-2009 05:21 AM
With this, all it points towards the filters issue.
Please check and refresh the filter settings if they are blocking all the syslog messages.
Try to keep all of them in Keep and Enable mode once and check if the reports are coming through.
Please post filters.dat and please check the syslog FAQ :
09-15-2009 08:43 AM
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: