LMS 3.2 Syslog

Unanswered Question
Sep 13th, 2010
User Badges:

I am trying to run syslog reports in LMS.  When I run the 24 hour syslog report nothing is found.  No data on the report.  I am trying to troubleshoot this.  How can I  tell if my traps are getting to the Ciscoworks server (10.223.241.32)?  Is there something I can look at on the Ciscoworks server?


Here is what debug shows on the router:


ms-DUNCAN#sh log
Syslog logging: enabled (0 messages dropped, 0 messages rate-limited, 109 flushe
s, 0 overruns, xml disabled, filtering disabled)

No Active Message Discriminator.


No Inactive Message Discriminator.


    Console logging: level debugging, 31006 messages logged, xml disabled,
                     filtering disabled
    Monitor logging: level debugging, 0 messages logged, xml disabled,
                     filtering disabled
    Buffer logging:  level debugging, 29155 messages logged, xml disabled,
                     filtering disabled
    Exception Logging: size (4096 bytes)
    Count and timestamp logging messages: disabled
    File logging: disabled
    Persistent logging: disabled

No active filter modules.

    Trap logging: level informational, 31 message lines logged

Log Buffer (4096 bytes):

06:53:13: SNMP: Queuing packet to 10.223.248.83
06:53:13: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.26 = 1
ccmHistoryEventEntry.4.26 = 3
ccmHistoryEventEntry.5.26 = 2
06:53:13: SNMP: Queuing packet to 10.223.231.86
06:53:13: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.26 = 1
ccmHistoryEventEntry.4.26 = 3
ccmHistoryEventEntry.5.26 = 2
06:53:13: SNMP: Queuing packet to 10.223.241.32
06:53:13: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.26 = 1
ccmHistoryEventEntry.4.26 = 3
ccmHistoryEventEntry.5.26 = 2
06:53:13: SNMP: Packet sent via UDP to 10.223.248.83
06:53:13: SNMP: Packet sent via UDP to 10.223.231.86
06:53:13: SNMP: Packet sent via UDP to 10.223.241.32
06:53:16: SNMP: Queuing packet to 10.223.248.83
06:53:16: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.27 = 1
ccmHistoryEventEntry.4.27 = 2
ccmHistoryEventEntry.5.27 = 3
06:53:16: SNMP: Queuing packet to 10.223.231.86
06:53:16: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.27 = 1
ccmHistoryEventEntry.4.27 = 2
ccmHistoryEventEntry.5.27 = 3
06:53:16: SNMP: Queuing packet to 10.223.241.32
06:53:16: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.27 = 1
ccmHistoryEventEntry.4.27 = 2
ccmHistoryEventEntry.5.27 = 3
06:53:16: SNMP: Packet sent via UDP to 10.223.248.83
06:53:16: SNMP: Packet sent via UDP to 10.223.231.86
06:53:16: SNMP: Packet sent via UDP to 10.223.241.32
06:53:23: %LINK-5-CHANGED: Interface FastEthernet1/0/1, changed state to adminis
tratively down
06:53:28: %LINK-3-UPDOWN: Interface FastEthernet1/0/1, changed state to down
06:53:28: SNMP: Queuing packet to 10.223.248.83
06:53:28: SNMP: V1 Trap, ent ciscoSyslogMIB.2, addr 10.0.9.77, gentrap 6, spectr
ap 1
clogHistoryEntry.2.5 = LINK
clogHistoryEntry.3.5 = 4
clogHistoryEntry.4.5 = UPDOWN
clogHistoryEntry.5.5 = Interface FastEthernet1/0/1, changed state to down
clogHistoryEntry.6.5 = 2480801
06:53:28: SNMP: Queuing packet to 10.223.231.86
06:53:28: SNMP: V1 Trap, ent ciscoSyslogMIB.2, addr 10.0.9.77, gentrap 6, spectr
ap 1
clogHistoryEntry.2.5 = LINK
clogHistoryEntry.3.5 = 4
clogHistoryEntry.4.5 = UPDOWN
clogHistoryEntry.5.5 = Interface FastEthernet1/0/1, changed state to down
clogHistoryEntry.6.5 = 2480801
06:53:28: SNMP: Queuing packet to 10.223.241.32
06:53:28: SNMP: V1 Trap, ent ciscoSyslogMIB.2, addr 10.0.9.77, gentrap 6, spectr
ap 1
clogHistoryEntry.2.5 = LINK
clogHistoryEntry.3.5 = 4
clogHistoryEntry.4.5 = UPDOWN
clogHistoryEntry.5.5 = Interface FastEthernet1/0/1, changed state to down
clogHistoryEntry.6.5 = 2480801
06:53:28: SNMP: Packet sent via UDP to 10.223.248.83
06:53:28: SNMP: Packet sent via UDP to 10.223.231.86
06:53:28: SNMP: Packet sent via UDP to 10.223.241.32
06:53:41: %SYS-5-CONFIG_I: Configured from console by micros on vty0 (10.194.32.
88)

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Jia Liu Mon, 09/13/2010 - 15:35
User Badges:
  • Cisco Employee,

You can run a packet capture on the Ciscoworks server to see if it's getting any traffic from the router.

Actions

This Discussion