Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Webcast-Catalyst9k
New Member

primary secondary syslog

hello ,

We have multiiple syslog server in our network , I was adding 6509 switch to send logs to these server .

I want to configure them in primary secondary mode  cant find command to make one syslog primary and second secondary . as I dont want to send logs to secondary syslog when primary is avaiable

2 ACCEPTED SOLUTIONS

Accepted Solutions
Hall of Fame Super Blue

primary secondary syslog

Amit

I don't think you can do this. I think you have to send the syslog messages to both servers.

In fact this would be what you want. Imagine if the main syslog server crashed and you needed to see the logs before and after the server crashed. If you set it up the way you want then the secondary server would only have syslog messages after the primary server had crashed so you would not get the full picture.

I appreciate it means more network traffic but it would better, in my opinion, to have both syslog servers logging all messages all of the time.

Jon

Hall of Fame Super Blue

primary secondary syslog

Amit

Yes, you should use the -

"logging "

for each syslog server you have and the 6500 should send the messages to both servers.

Jon

4 REPLIES
Hall of Fame Super Blue

primary secondary syslog

Amit

I don't think you can do this. I think you have to send the syslog messages to both servers.

In fact this would be what you want. Imagine if the main syslog server crashed and you needed to see the logs before and after the server crashed. If you set it up the way you want then the secondary server would only have syslog messages after the primary server had crashed so you would not get the full picture.

I appreciate it means more network traffic but it would better, in my opinion, to have both syslog servers logging all messages all of the time.

Jon

New Member

Re:primary secondary syslog

Is it requirement, why because if primary fail it will send to secondary and primary come back it will send primary. ..so half of log will there in primary and half will have secondary...I dont know is there any mechanism to synch primary and secondary syslog..
But You can achieve with help of EEM with sla

New Member

primary secondary syslog

thanks for reply , I understood that idea was not right , I have one more query

so if I put config as below , it will send the logs all the time(if they are avaiable ) to primary and secondary servers right ?

logging primary server

logging secondary server

Hall of Fame Super Blue

primary secondary syslog

Amit

Yes, you should use the -

"logging "

for each syslog server you have and the 6500 should send the messages to both servers.

Jon

237
Views
0
Helpful
4
Replies
CreatePlease to create content