limit of 10 000 messages for syslog"s

Answered Question
Dec 30th, 2009

I am using LMS 3.2  as syslog server.

I have set purge settings. Ther is enaughe free space on a disk. But when the nmber of syslog messeges increases up to 10 000. it stops to collect them.

So all messages will be lost if it is fool.

How can I change 10 000 limit for about 100 000 ???

I have this problem too.
0 votes
Correct Answer by peter.mainwaring about 7 years 2 weeks ago

Hi,

Are you running the report job as an IMMEDIATE job? I seem to remember that this will limit the output to 10,000 syslog entries.

If you run the job as SCHEDULED, run it ONCE with a start time of say 5 minutes from the current time, I think it should show all syslog entries.

Give it a go anyway.

Pete

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
yjdabear Thu, 12/31/2009 - 06:46

If you're referring to the "SLCA0131: There are more than 10000 records generated for this date range.

Only 10000 records are being displayed, starting with the records generated on the end date." message when generating a syslog report, I don't think the answer has changed since this thread below:

http://supportforums.cisco.com/message/638820#638820Re: Cisco works cant display more then 10k of syslog error

Your syslogs are not being lost though. You can still view them in the raw syslog_info file(s) on the CLI.

laptev.valery Sun, 01/10/2010 - 22:11

to:

Thank you for help!
Very sad)
So, to see my syslogs i should search them on yhe device?(CLI run sh log) or I can chek them on ciscoworks server?

Correct Answer
peter.mainwaring Mon, 01/11/2010 - 08:13

Hi,

Are you running the report job as an IMMEDIATE job? I seem to remember that this will limit the output to 10,000 syslog entries.

If you run the job as SCHEDULED, run it ONCE with a start time of say 5 minutes from the current time, I think it should show all syslog entries.

Give it a go anyway.

Pete

Actions

This Discussion

Related Content