cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
655
Views
0
Helpful
2
Replies

PI 2.0 Syslog file

luisdhernandez
Level 1
Level 1

Hello all,

As i know...prime Infrastructure 2.0 is ready to receive syslog up to severity 6 with a workaround... the question is.. does anyone know where is located the syslog file where all these logs are archived?

I will appreciate your help,

Thank you so much,

Regards,

Luis

2 Replies 2

AFROJ AHMAD
Cisco Employee
Cisco Employee

Hi Luis,

In the prime infrastructure Syslogs are directly read from udp port 514 and then filtered
, the non SEV1 and SEV2 syslogs will be dropped and will not be entered into db . The
syslog messages will not be saved into log files .

Regarding PI syslog performance: there is a limitation in the current PI releases, at the
time of writing, PI only can process/show high severity syslogs (Severity 1, 2 and 3).
There has been enhancement

bug opened on the this matter, and is currently under evaluation by the business unit. Bug
Details is here:

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&b
ugId=CSCud66666

Thanks-

Afroz

[Do rate the useful post]

Thanks- Afroz [Do rate the useful post] ****Ratings Encourages Contributors ****

Marvin Rhoads
Hall of Fame
Hall of Fame

It appears they are parsed and stored in several files as folllows (i.e. the ones with 12:44 (current time when I looked) timestamp):

ade # pwd

/opt/CSCOlumos/decap/data

ade # ls -al

total 128332

drwxrwxr-x  2 root root      4096 Jan 23 14:38 .

drwxrwxr-x 10 root root      4096 Nov 13 15:49 ..

-rw-r--r--  1 root root 335552513 Jan 27 12:44 FaultEventQ

-rw-r--r--  1 root root         0 Jan 23 14:34 FaultEventQ.lock

-rw-r--r--  1 root root 335552513 Jan 27 12:44 SyslogProc_Java_Main_514

-rw-r--r--  1 root root         0 Jan 23 14:33 SyslogProc_Java_Main_514.lock

-rwxrwxrwx  1 root root 335552513 Jan 27 12:45 SyslogProc_Main_514

-rwxrwxrwx  1 root root         0 Jan 23 14:25 SyslogProc_Main_514.lock

-rwxrwxrwx  1 root root 335552513 Jan 27 12:44 SyslogRcv_Main_514

-rwxrwxrwx  1 root root         0 Jan 23 14:25 SyslogRcv_Main_514.lock

-rwxrwxrwx  1 root root  16801793 Jan 23 14:25 TraceProc_2000_0

-rwxrwxrwx  1 root root         0 Nov 13 16:21 TraceProc_2000_0.lock

-rw-r--r--  1 root root 335552513 Jan 27 12:44 TrapProc_Java_Main_162

-rw-r--r--  1 root root         0 Jan 23 14:38 TrapProc_Java_Main_162.lock

-rwxrwxrwx  1 root root 335552513 Jan 27 12:44 TrapRcv_Main_162

-rwxrwxrwx  1 root root         0 Jan 23 14:26 TrapRcv_Main_162.lock

-rw-r--r--  1 root root 335552513 Jan 27 12:45 xmp_poller

-rw-r--r--  1 root root         0 Jan 23 14:32 xmp_poller.lock

-rw-r--r--  1 root root 335552513 Jan 27 12:43 xmp_poller_persistrow

-rw-r--r--  1 root root         0 Jan 23 14:32 xmp_poller_persistrow.lock

ade #