cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
8839
Views
0
Helpful
4
Replies

Suppress specific syslog messages

BRIAN FLINTE
Level 1
Level 1

Does anyone know of a way to suppress a specific syslog messages from being generated? I would like to filter these from all syslogs (buffer, terminal, syslog server). I would like all other messages to generate as normal. For instance, drop anything containing a specific word or phrase.

I'm wondering if there is a method using EEM.

4 Replies 4

Joe Clarke
Cisco Employee
Cisco Employee

In the future, you should post these kind of questions to the Network Infrastructure > Network Management forum.  I am much more likely to spot them there.

Yes, you can do what you want, but not using EEM.  You want to use the Embedded Syslog Manager or syslog message discriminators.  If you provide the exact version(s) of code, and a specific example of what you want to do, I can provide an example of how to use both solutions.

--

Please support CSC Helps Haiti

https://supportforums.cisco.com/docs/DOC-8895

https://supportforums.cisco.com

So I tried a few variations of message discriminators, but I can't seem to get any of them to work correctly.I am trying to filter out all "CNG tone sent" messages. Below is my configuration.

logging discriminator suppress mnemonics drops CNG
logging buffered discriminator suppress 16384

I also tried...

logging discriminator suppress mnemonics drops CNG*
logging discriminator suppress mnemonics drops "CNG tone sent"
logging discriminator suppress mnemonics drops tone

Also, how would I filter out mutliple messages? For instance, anything with "CNG" and also anything with "SEC-6-IPACCESSLOGP"?

Thanks for your help!

Sorry, I completely missed your reply.  Exactly what are the syslog messages you are seeing that you would like to filer out?  Also, what is the IOS version?  It sounds like we may have to use ESM to do exactly what you want.

shailesh.h
Level 1
Level 1

Which system / device with IOS version?

I confronted with following link which may help you to some extent...

http://www.cisco.com/en/US/partner/docs/ios/12_4t/12_4t11/htnmsylg.html

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Innovations in Cisco Full Stack Observability - A new webinar from Cisco