Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
New Member

Cisco MARS and MS SQL Server

In my env. i have multiple MS SQL servers, how can i get a syslog messages to MARS from SQL audit logs?


Re: Cisco MARS and MS SQL Server

You can rapidly deploy MARS by forwarding messages from existing syslog-ng or Kiwi syslog servers. This feature eliminates the network and device changes required to insert MARS into an operational network. You no longer have to configure each network device to publish its syslog messages directly to MARS, which saves time, avoids device change approval processes, preserves packet processing performance of the network devices, and ensures that daily network operations proceed uninterrupted.

If your network devices already publish syslog messages to syslog-ng or Kiwi syslog servers, simply configure those servers to forward messages to the MARS Appliance and identify the syslog servers in MARS.

New Member

Re: Cisco MARS and MS SQL Server

I don't think this answers his question since it's about MS SQL server.

There is a thread from Jul 22 2008 that talks about MS SQL. The concensus is that it doesn't work as is. The thread was written over a year ago and looks like it pertains to MARS 5.x

At any rate, you will need to use the SNARE agent to collect this type of information from a windows system.


New Member

Re: Cisco MARS and MS SQL Server

SNARE agent for MS SQL is not a freeware product, do u now another agent for mssql? I just need to collect logs and forward them to cs-mars in syslog packets.

CreatePlease to create content