Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Collecting logs from Cisco Prime Infrastructure

Hi ,


I am currently working in integrating  Cisco Prime Infrastruture with the siem tool Qradar.

Can any one help me out in below issues:

1)How and where is the log stored in Cisco Prime.?

2)Does the logs contains the logs of the devices that Cisco Prime manages?

3)Is there any way to sent out the logs from Cisco Prime to a third party device.?

 

 

 

Everyone's tags (1)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Hi,1)How and where is the log

Hi,

1)How and where is the log stored in Cisco Prime.?

/opt/CSCOlumnos/logs

2)Does the logs contains the logs of the devices that Cisco Prime manages?

AFAIK,

In the prime infrastructure Syslogs are directly read from udp port 514 and then filtered
, the non SEV1 and SEV2 syslogs will be dropped and will not be entered into db . The
syslog messages will not be saved into log files .

Till now PI support only SEV 0,1 and 2 syslog.

 

3)Is there any way to sent out the logs from Cisco Prime to a third party device.?

unfortunately , this feature is not there in PI so far.

 

Thanks-

Afroz

***Ratings Encourages Contributors ****

 

 

 

 

Thanks- Afroz [Do rate the useful post] ****Ratings Encourages Contributors ****
5 REPLIES
Cisco Employee

Hi,1)How and where is the log

Hi,

1)How and where is the log stored in Cisco Prime.?

/opt/CSCOlumnos/logs

2)Does the logs contains the logs of the devices that Cisco Prime manages?

AFAIK,

In the prime infrastructure Syslogs are directly read from udp port 514 and then filtered
, the non SEV1 and SEV2 syslogs will be dropped and will not be entered into db . The
syslog messages will not be saved into log files .

Till now PI support only SEV 0,1 and 2 syslog.

 

3)Is there any way to sent out the logs from Cisco Prime to a third party device.?

unfortunately , this feature is not there in PI so far.

 

Thanks-

Afroz

***Ratings Encourages Contributors ****

 

 

 

 

Thanks- Afroz [Do rate the useful post] ****Ratings Encourages Contributors ****
New Member

Hi Afroz,Can you please tell

Hi Afroz,

Can you please tell me if the logs in the location"/opt/CSCOlumnos/logs" contains the logs of the devices it manages?

Cisco Employee

Hi , No ,these logs does not

Hi ,

 

No ,these logs does not contain logs from the devices , these logs are the logs respective to inventory ,config archive etc..

 

Thanks-

Afroz

*****Ratings Encourages Contributors ****

Thanks- Afroz [Do rate the useful post] ****Ratings Encourages Contributors ****
New Member

Hi Afroz,Thanks fro the

Hi Afroz,

Thanks fro the information.

I have read that Prime Infrastructure logs all error, informational, and trace messages generated by all devices that are managed by Prime Infrastructure.Do you know where these  logs are saved?

Cisco Employee

These logs are referring to

These logs are referring to same location shared before

/opt/CSCOlumnos/logs

 

Thanks-

Afroz

Thanks- Afroz [Do rate the useful post] ****Ratings Encourages Contributors ****
554
Views
0
Helpful
5
Replies