How to enable SYSLOG collector on Prime Infrastructure 2.0?

[Shrenik Shah]

I am trying to collect SYSLOG on Prime Infrastructure tool 2.0. I have configured few devices to send the SYSLOG messages to the Prime Infrastructure 2.0. I can see the port-up port-down events as Alarms but not under the SYSLOG option in Operate->Alarms and Events -> Syslogs

Also, what is the SYSLOG configuration option in the Administration->Logging->Syslog logging options used for? Do I have to enable it for syslog collection? I am not sure I understand Syslog Host field there which asks for an IP address.

Any help would be much appreciated.

[AFROJ AHMAD · Accepted solution]

Hi

what is the SYSLOG configuration option in the Administration->Logging->Syslog logging options used for?

It is used  to enable collecting and processing system logs.

Syslog Host IP address of the interface from which the message is to be transmitted.

check the below link :

http://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/1-2/user/guide/prime_infra_ug/maint_sys_health.html#pgfId-1053346

AFAIK , you don't need to enable anything on PI for syslog collection , just make sure your devices are sending the syslog to the PI server with this command   {  logging <Ip address of the PI server>  }.

Thanks-

Afroz

***Ratings Encourages Contributors ****

[Shrenik Shah]

Hello Afroz,

Thank you for the information. So the SYSLOG option needs to be "enabled" from the Logging settings in order to start collecting the syslogs? I looked at the link posted by you and still not sure about the host IP address. Should that address be the PI IP address?

Thank you

[Marvin Rhoads · Accepted solution]

Note that by default PI only displays severity 0-2 syslog messages. If you want to see all syslog severity level events, there is an (unsupported) method you can use to modify the filter PI uses "under the covers".

Please see this post for details.

[Shrenik Shah]

Hello Marvin,

Thank you for the information about the workaround. I will give it a try.

Shrenik

[ohassairi]

Mr Marvin

can you please tell me what is the unsupported method we can use to modify the filter PI uses "under the covers" ?

thanks