Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Community will be in read-only mode on 12/14/2017 from 12:00 am pacific to 11:30 am.

During this time you will only be able to see content. Other interactions such as posting, replying to questions, or marking content as helpful will be disabled for few hours.

We apologize for the inconvenience while we perform important updates to the Community.

New Member

PI2.0 syslog viewing

Afroz - do we have access to server logs assuming one is linux savy, and/or are alerts and events our only recourse ?

Hi,

PI 2.0 still does not have complete support of syslogs.

AFAIK , Upcoming release of PI will have the complete support of syslogs and you should be able to view all the syslogs from PI.

2 ACCEPTED SOLUTIONS

Accepted Solutions
Cisco Employee

What do you mean by service

What do you mean by service logs? You mean logs generated by Linux OS itself? Or how to check syslogs in fiilesystem in Linux, sent by devices??

Some of our Customers in CSC has found a tweak to get all syslog sev levels by this :

Syslog is working on  PI2.0. by default Prime only accepts the severity 0 and 1. you will need  to modify a file in PI 2.0 to allow prime to accept Syslog messages.

change following file

/opt/CSCOlumos/conf/syslog_sev_filter.xml file (Bold lines have been added here):

 

<expression op='OR'>

        <!-- Error -->

        <condition field='severity' op='EQUALS' value='0' />

        <condition field='severity' op='EQUALS' value='1' />

        <condition field='severity' op='EQUALS' value='2' />

        <condition field='severity' op='EQUALS' value='3' />

        <condition field='severity' op='EQUALS' value='4' />

        <condition field='severity' op='EQUALS' value='5' />

        <condition field='severity' op='EQUALS' value='6' />

</expression>

**NOTE: THIS IS NOT CISCO TESTED. BUT SEEMS TO BE WORKING FOR MANY.

As per thread :

https://supportforums.cisco.com/discussion/11645481/prime-infrastructure-12-syslog?tstart=0&viewcondensed=

 

-Thanks

Vinod

**Encourage Contributors. RATE them**

-Thanks Vinod **Rating Encourages contributors, and its really free. **
Hall of Fame Super Silver

Yes, as Vinod noted the

Yes, as Vinod noted the changes to the xml file will add all severity log messages to the viewer. You can view the syslogs (default levels 0 and 1 or, after modifying the file above and restarting the server as noted above, levels 0 through 6) via Operate > Monitoring Dashboards > Incidents or Operate > Alarms & Events > Syslogs

5 REPLIES
Cisco Employee

What do you mean by service

What do you mean by service logs? You mean logs generated by Linux OS itself? Or how to check syslogs in fiilesystem in Linux, sent by devices??

Some of our Customers in CSC has found a tweak to get all syslog sev levels by this :

Syslog is working on  PI2.0. by default Prime only accepts the severity 0 and 1. you will need  to modify a file in PI 2.0 to allow prime to accept Syslog messages.

change following file

/opt/CSCOlumos/conf/syslog_sev_filter.xml file (Bold lines have been added here):

 

<expression op='OR'>

        <!-- Error -->

        <condition field='severity' op='EQUALS' value='0' />

        <condition field='severity' op='EQUALS' value='1' />

        <condition field='severity' op='EQUALS' value='2' />

        <condition field='severity' op='EQUALS' value='3' />

        <condition field='severity' op='EQUALS' value='4' />

        <condition field='severity' op='EQUALS' value='5' />

        <condition field='severity' op='EQUALS' value='6' />

</expression>

**NOTE: THIS IS NOT CISCO TESTED. BUT SEEMS TO BE WORKING FOR MANY.

As per thread :

https://supportforums.cisco.com/discussion/11645481/prime-infrastructure-12-syslog?tstart=0&viewcondensed=

 

-Thanks

Vinod

**Encourage Contributors. RATE them**

-Thanks Vinod **Rating Encourages contributors, and its really free. **
New Member

Vinod - thanks for lookin in

Vinod - thanks for lookin in :-)

We would like to view syslogs.  If there is an avenue via the server that may do for now.  Otherwise are 0 & 1 viewable thru PI ?

Hall of Fame Super Silver

Yes, as Vinod noted the

Yes, as Vinod noted the changes to the xml file will add all severity log messages to the viewer. You can view the syslogs (default levels 0 and 1 or, after modifying the file above and restarting the server as noted above, levels 0 through 6) via Operate > Monitoring Dashboards > Incidents or Operate > Alarms & Events > Syslogs

New Member

Marvin - thank ya much :-)

Marvin - thank ya much :-)
New Member

Hi Marvin - another question

Hi Marvin - another question about logging if I may - can the native/raw linux log file be parsed with something like Kiwi ?

144
Views
10
Helpful
5
Replies
CreatePlease to create content