Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Migration from Kiwi to CW Syslog

My Syslog collector shows as "up" and also shows the following output...

Forwarded - 1598

Invalid - 210

Filtered - 0

Dropped - 0

Received - 1808

What would cause the syslog message to be invalid, and what does the "Forwarded" mean?

1 REPLY
Cisco Employee

Re: Migration from Kiwi to CW Syslog

Forwarded is the good state. It means the message passed all of the filters and was handed over to the SyslogAnalyzer for insertion into the RME database. Invalid messages are those which are not properly formatted Cisco syslog messages. A high invalid count is expected on Windows as Daemon Manager writes its messages to the same syslog.log, and those are not valid Cisco syslog messages.

308
Views
0
Helpful
1
Replies