BGP Not logging too Syslog Server

bret · ‎05-14-2012

I have an issue where my bgp logs are not being sent to a syslog server. I am getting %SYS-5-CONFIG_I: Configured from console by user on vty0 (x.x.x.x), so there is proof logging is working. Howerver, when I do a clear ip bgp A.B.C.D the following are generated and not sent to the syslog server.

May 14 18:35:32: %BGP-5-ADJCHANGE: neighbor x.x.x.x Down User reset

May 14 18:35:32: %BGP_SESSION-5-ADJCHANGE: neighbor 10.255.215.2 IPv4 Unicast topology base removed from session User reset

May 14 18:35:40: %BGP-5-ADJCHANGE: neighbor x.x.x.x Up

Since these log messages are notifications, and my config is set for notifications, I would think all notifications would be sent to the syslog server. Am I missing something, in this regard, does BGP require something else to send syslogs?

Lines from router config:

service timestamps log datetime
logging buffered 50000 notifications
logging console notifications
logging history notifications
logging trap notifications
logging facility local5
logging source-interface Loopback0
logging x.x.x.x
snmp-server enable traps syslog

bgp log-neighbor-changes

Thanks in advance!

Bret

Kevin P Sheahan · ‎05-14-2012

Hi Bret,

Please post the output of "Show logging".

Kind Regards,

Kevin

Kind Regards, Kevin Sheahan, CCIE # 41349

bret · ‎05-14-2012

Syslog logging: enabled (0 messages dropped, 2 messages rate-limited, 1 flushes, 0 overruns, xml disabled, filtering disabled)

No Active Message Discriminator.

No Inactive Message Discriminator.

    Console logging: level notifications, 155 messages logged, xml disabled,
                     filtering disabled
    Monitor logging: level debugging, 0 messages logged, xml disabled,
                     filtering disabled
    Buffer logging: level notifications, 87 messages logged, xml disabled,
                    filtering disabled
    Exception Logging: size (4096 bytes)
    Count and timestamp logging messages: disabled
    Persistent logging: disabled
    Trap logging: level notifications, 54 message lines logged
        Logging to 208.238.173.202 (udp port 514, audit disabled,
              link up),
              54 message lines logged,
              0 message lines rate-limited,
              0 message lines dropped-by-MD,
              xml disabled, sequence number disabled
              filtering disabled
        Logging Source-Interface:       VRF Name:
        Loopback0

Log Buffer (50000 bytes):

May 14 18:43:16: %SYS-5-CONFIG_I: Configured from console by bret on vty0 (x.x.x.x)

May 14 18:55:11: %SYS-5-CONFIG_I: Configured from console by bret on vty0 (x.x.x.x)

May 14 18:55:20: %BGP-5-ADJCHANGE: neighbor x.x.x.x Down User reset

May 14 18:55:20: %BGP_SESSION-5-ADJCHANGE: neighbor x.x.x.x IPv4 Unicast topology base removed from session User reset

May 14 18:55:21: %BGP-5-ADJCHANGE: neighbor x.x.x.x Up

May 14 18:43:16: %SYS-5-CONFIG_I: Configured from console by bret on vty0 (x.x.x.x)

May 14 18:55:11: %SYS-5-CONFIG_I: Configured from console by bret on vty0 (x.x.x.x)

May 14 18:55:20: %BGP-5-ADJCHANGE: neighbor x.x.x.x Down User reset

May 14 18:55:20: %BGP_SESSION-5-ADJCHANGE: neighbor x.x.x.x IPv4 Unicast topology base removed from session User reset

May 14 18:55:21: %BGP-5-ADJCHANGE: neighbor x.x.x.x Up

cadet alain · ‎05-14-2012

Hi,

are there any logs sent to the server? have you got reachability to the server from this source ?

Regards.

Alain.

Don't forget to rate helpful posts.

bret · ‎05-14-2012

Yes I am getting logs to the syslog server.

I am able to get this log to the sysog server. %SYS-5-CONFIG_I: Configured from console by user on vty0 (x.x.x.x)

fb_webuser · ‎05-14-2012

you would need "bgp log-neighbor-changes" command under router bgp configurations.

---

Posted by WebUser Neeraj Jagga from Cisco Support Community App

bret · ‎05-14-2012

log-neighbor-changes is in bgp.