Syslog Question

[tom.taylor]

I am capturing syslog events from numerous cisco switches and have noticed my 2950 switches generate link up/down as errors when a connected device is rebooted. I obviously need to collect all error level events from these switches but do not really consider these link up/down messages as being at the error level. Is there any way to change these events from being considered errors to being considered informational events?

[ahmednaas]

You can change the logging level on the switch. You should have a statement like:

logging trap critical

There are seven levels:

0 emergencies

1 alerts

2 critical

3 errors

4 warnings

5 notifications

6 debugging

[Richard Burts]

Ahmed

Tom's original post specified that he wants to continue to collect all error level messages except for the link up/down messages. Changing the logging level would prevent that.

HTH

Rick

[ahmednaas]

Oops, I did not read carefully.

[Richard Burts]

Tom

Try configuring no logging event link-status.

HTH

Rick

[tom.taylor]

I agree that no logging event link-status default works on my layer three switches, for sure on my 6509 as that command is already there. However, on my layer two 2950's this command does not exist. I have looked around and can find no way to turn link up/down messages off. Can they be turned off?

[Richard Burts]

Tom

I do not know if it is a version difference, feature set difference, or what, but it works fine on my 2950.

SW1#sh ver

Cisco Internetwork Operating System Software

IOS (tm) C2950 Software (C2950-I6K2L2Q4-M), Version 12.1(22)EA6, RELEASE SOFTWARE (fc1)

SW1(config)#int fa0/7

SW1(config-if)#no logging event link-status

SW1(config-if)#

SW1(config-if)#^Z

SW1#sh run int fa0/7

Building configuration...

Current configuration : 150 bytes

!

interface FastEthernet0/7

switchport mode access

switchport nonegotiate

no logging event link-status

no cdp enable

spanning-tree portfast

end

HTH

Rick