cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1463
Views
0
Helpful
1
Replies

Cisco-Syslog-MIB

getwithrob
Level 3
Level 3

If the CISCO-SYSLOG-MIB is loaded and compiled, can ALL log message be Interpreted by the trap receiver?

I'm afraid some functionality or messages may be lost by taking the SNMP CISCO-SYSLOG-MIB route as opposed to the syslog server route...

1 Accepted Solution

Accepted Solutions

Joe Clarke
Cisco Employee
Cisco Employee

All clogMessageGenerated notifications from devices should be properly decoded by the management station. The entire message is encapsulated. Whether or not processing messages using the syslog-to-trap encapsulation is more useful that the syslog itself depends on your management station. I happen to think RME (4.x in any event) does a good job with processing syslog messages and turning them into external actions.

Since the trap breaks out facility and severity into separate varbinds, the trap manager also has a good chance of doing useful thinks with the syslog notifications, but this may require more scripting work on your end.

View solution in original post

1 Reply 1

Joe Clarke
Cisco Employee
Cisco Employee

All clogMessageGenerated notifications from devices should be properly decoded by the management station. The entire message is encapsulated. Whether or not processing messages using the syslog-to-trap encapsulation is more useful that the syslog itself depends on your management station. I happen to think RME (4.x in any event) does a good job with processing syslog messages and turning them into external actions.

Since the trap breaks out facility and severity into separate varbinds, the trap manager also has a good chance of doing useful thinks with the syslog notifications, but this may require more scripting work on your end.