cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1448
Views
0
Helpful
17
Replies

no syslog received on syslog.log

olivier.daures
Level 1
Level 1

I've LMS 2.6 (CS 3.0.5 and RME 4.0.5) on windows 2003 SP2. In the NMSROOT\log\syslog.log, i don't receive any syslog message. All my devices are well configured to send syslog to the LMS.

All CiscoWorks and CWCS services are well started.

17 Replies 17

olivier.daures
Level 1
Level 1

There are NO firewalls and no ACL between all the devices and the ciscoworks server.

Please check if the crmlog services are started. Else execute net start crmlog from the server (commamd prompt).

try to delete the syslog.log (or rename if it has already some logs on it) from the server and restart daemon manger #

To Stop #

net stop crmdmgtd

To Start #

net start crmdmgtd

check the syslog.log should be there automatically and try generating some log messages on devices if they come through.

-Thanks Vinod **Rating Encourages contributors, and its really free. **

I've restarted the server and it is ok now, i receive syslog messages in the syslog.log file.

But when i try to generate a standard report from RME/Reports/Report Generator, i don't see any syslog messages.

In the attached file, u can see the config of the message filter

Check if the syslog collector is subscribed properly or not.

Check RME >Tools> Syslog> Syslog Collector status to check if the syslog collector has forwarded and other messages coming there or not.

Unsubscribe (is subscribed ) and resubscribe entring the LMS server IP Address.

wait for some time and check if the messages are there.

Only if the Syslog Collector is subscribed properly to collect messages

from syslog.log , the reports will be generated.

-Thanks Vinod **Rating Encourages contributors, and its really free. **

syslog collector seems subscribed properly

cf the attachement file

We can even see that there are messages filtered

So there should also be a report.

It could be if you are trying to generate a report for those devices which havent sent any syslog messges yet and they are not in the SyslogDb.

try generating a syslog report last 24 hour summary for all the devices and they should show all the syslog messges on it.

Check filter settings too.

http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_resource_manager_essentials/4.3/user/guide/syslog.html#wp1150419

-Thanks Vinod **Rating Encourages contributors, and its really free. **

I send you an extract of the syslog.log file

I send you a standard report which shows NO messages

I send you a screenshot of one of the device which sent a syslog seen in the syslog.log and well managed in RME

You can see that i still have a problem :-(

file 1

file2

sysog.log

Please check if the syslog Collector and analyzer is working properly or not.

Post the output of :

pdshow SyslogCollector && pdshow SyslogAnalyzer

(from command prompt and this is case sensitive)

-Thanks Vinod **Rating Encourages contributors, and its really free. **

Hi vinarya .

Return frome the weekend.

Hope U are fine !

Here the ouptut requested.

Seems to be good.

Report still not function.

With this, all it points towards the filters issue.

Please check and refresh the filter settings if they are blocking all the syslog messages.

Try to keep all of them in Keep and Enable mode once and check if the reports are coming through.

Please post filters.dat and please check the syslog FAQ :

http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_resource_manager_essentials/3.5/faq/ug_appa.html#wp1003948

-Thanks Vinod **Rating Encourages contributors, and its really free. **

here the filter.dat file.

As u see i am already in the Keep and Enable mode. And no reports are coming.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: