01-26-2014 08:12 PM
Hello all,
As i know...prime Infrastructure 2.0 is ready to receive syslog up to severity 6 with a workaround... the question is.. does anyone know where is located the syslog file where all these logs are archived?
I will appreciate your help,
Thank you so much,
Regards,
Luis
01-26-2014 08:33 PM
Hi Luis,
In the prime infrastructure Syslogs are directly read from udp port 514 and then filtered , the non SEV1 and SEV2 syslogs will be dropped and will not be entered into db . The syslog messages will not be saved into log files . Regarding PI syslog performance: there is a limitation in the current PI releases, at the time of writing, PI only can process/show high severity syslogs (Severity 1, 2 and 3). There has been enhancement bug opened on the this matter, and is currently under evaluation by the business unit. Bug Details is here: http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&b
ugId=CSCud66666
Thanks-
Afroz
[Do rate the useful post]
01-27-2014 09:46 AM
It appears they are parsed and stored in several files as folllows (i.e. the ones with 12:44 (current time when I looked) timestamp):
ade # pwd
/opt/CSCOlumos/decap/data
ade # ls -al
total 128332
drwxrwxr-x 2 root root 4096 Jan 23 14:38 .
drwxrwxr-x 10 root root 4096 Nov 13 15:49 ..
-rw-r--r-- 1 root root 335552513 Jan 27 12:44 FaultEventQ
-rw-r--r-- 1 root root 0 Jan 23 14:34 FaultEventQ.lock
-rw-r--r-- 1 root root 335552513 Jan 27 12:44 SyslogProc_Java_Main_514
-rw-r--r-- 1 root root 0 Jan 23 14:33 SyslogProc_Java_Main_514.lock
-rwxrwxrwx 1 root root 335552513 Jan 27 12:45 SyslogProc_Main_514
-rwxrwxrwx 1 root root 0 Jan 23 14:25 SyslogProc_Main_514.lock
-rwxrwxrwx 1 root root 335552513 Jan 27 12:44 SyslogRcv_Main_514
-rwxrwxrwx 1 root root 0 Jan 23 14:25 SyslogRcv_Main_514.lock
-rwxrwxrwx 1 root root 16801793 Jan 23 14:25 TraceProc_2000_0
-rwxrwxrwx 1 root root 0 Nov 13 16:21 TraceProc_2000_0.lock
-rw-r--r-- 1 root root 335552513 Jan 27 12:44 TrapProc_Java_Main_162
-rw-r--r-- 1 root root 0 Jan 23 14:38 TrapProc_Java_Main_162.lock
-rwxrwxrwx 1 root root 335552513 Jan 27 12:44 TrapRcv_Main_162
-rwxrwxrwx 1 root root 0 Jan 23 14:26 TrapRcv_Main_162.lock
-rw-r--r-- 1 root root 335552513 Jan 27 12:45 xmp_poller
-rw-r--r-- 1 root root 0 Jan 23 14:32 xmp_poller.lock
-rw-r--r-- 1 root root 335552513 Jan 27 12:43 xmp_poller_persistrow
-rw-r--r-- 1 root root 0 Jan 23 14:32 xmp_poller_persistrow.lock
ade #
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide