it would be possible to recommend the best backup solution on the router log messages in case of failure uplink connectivity or reboot the router? In case of failure of connectivity and reboot the router would not want to lose log messages and at best is additionally send the syslog server for further processing. I know I can send log messages to as FLASH memory, but can also reverse router to send these messages to a Syslog server communication has been reestablished?
I do not believe that syslog over TCP would help. Using TCP will use a reliable transport and if the first attempt to send is not successful then the router would retry. But there is a limit to the number of retries and then the router will drop the syslog packet. What you are looking for would be something that would store log packets until connectivity is restored. I believe that it would be possible to write something using EEM that would satisfy your requirements. I would think that EEM could use IP SLA to track reachability of the syslog server and during periods when it was not reachable could write syslog records to a file in flash and when connectivity was restored could transmit the records.
And what Rick states would work as well. You would need two scripts from what I figure though: 1 to start writing logs to flash when syslog stops responding, and then another script to copy that file somewhere for later merging/analysis.
The link that you provided for writing syslog to flash is an interesting alternative and certainly would provide a solution to the issue of router reboot since the recent log messages would be in flash after a reboot. I notice that what they show as the way to copy syslog from flash to an external receiver is using a manual entered command. I would think that some way to automate that would be very helpful to provide a complete solution to the requirements of the original poster.
I think my requirements are correctly understood. Unfortunately scripting in Cisco understand, but if anyone knows the solution I will be very happy. Once again, if the disintegration of the line then move the logs somewhere (eg flash) and at a later reconnect to send everything to the syslog server. The same in case of rebooting the box. Thanks a lot.
We are pleased to announce availability of Beta software for 16.6.3.
16.6.3 will be the second rebuild on the 16.6 release train targeted
towards Catalyst 9500/9400/9300/3850/3650 switching platforms. We are
looking for early feedback from customers befor...
Introduction Featured Speakers Luis Espejel is the Telecommunications
Manager of IENova, an Oil & Gas company. Currently he works with Cisco
IOS® and Cisco IOS XE platforms, and NX to some extent. He has also
worked as a Senior Engineer with the Routing P...
In this session you can learn more about Layer 3 multicast and the best
practices to identify possible threats and take security measures. It
provides an overview of basic multicast, the best security practices for
use of this technology, and recommendati...