Syslog message customization

Unanswered Question
Nov 23rd, 2009

Hey guys,

I have a question about syslog messages. When syslog messages are received on a syslog server, they usually look like this:

<syslog-count>: <sequence-number>: <timestamp>:%<facility>-<severity>-<mnemonic>:<message-text>
For example: 24:000024:02:18:37:%SYS-5-CONFIG_I:Configured from console by console

I want to get rid of <syslog-count> and <sequence-number> values. I've found a way to omit the <sequence-number> value by using the "no service sequence-numbers" global configuration command. But I still can't find a way to get rid of the <syslog-count> value. I tried to use Embedded Syslog Manager (ESM), but no luck. If someone knows how to do that your help will be greatly appreciated.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (2 ratings)
Loading.
Nuno Moreira Thu, 02/16/2012 - 07:29

Hello... I have the exact same problem, but unfortunately on a IOS Version 12.2(18)SXF7 fitted at a cisco WS-C6509-E (R7000)... the command "no logging message-counter syslog" is not available on this IOS version... any ideas on how-to disable syslog message counter?

Thank you and regards

Martin Ermel Thu, 02/16/2012 - 08:57

without seeing a syslog message as an example, I can just assume that you don't have syslog message counters enabled, but only sequence numbers. Try

    no service sequence-numbers

to get rid of them.

Nuno Moreira Thu, 02/16/2012 - 09:09

yep, sure...

here the log message received:

Feb 16 17:01:41 172.22.1.1 78: 000096: Feb 16 17:01:05: %SYS-5-CONFIG_I: Configured from console by admin onvty0 (172.22.3.22)

78 is the number I want to get ride of.

the syslog message should be received like this [ taken from a C2960 with IOS 12.2(55)SE1 ]:

Feb 16 17:00:38 172.21.1.11 : 038306: Feb 16 17:00:37: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/4, changed state to up

on the 2960 the no logging message-counter syslog did the job

Nuno Moreira Thu, 02/16/2012 - 09:15

the "no service sequence-numbers" removed the sequence number

log w/service sequence-numbers
Feb 16 17:01:41 172.22.1.1 78: 000096: Feb 16 17:01:05: %SYS-5-CONFIG_I: Configured from console by admin onvty0 (172.22.3.22)


log w/no service sequence-numbers
Feb 16 17:09:33 172.22.1.1 79: Feb 16 17:08:57: %SYS-5-CONFIG_I: Configured from console by admin onvty0 (172.22.3.22)

Actions

This Discussion

Related Content