Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Webcast-Catalyst9k
New Member

syslog collector status all zeros

Hello,

I'm running RME 4.0.6 and used to get notifications via Automated Actions for specific facilities/keywords but those haven't come in a while. I checked the Syslog Collector Status and all columns have a zero count. This doesn't seem normal but hey I could be wrong....

thanks

js

7 REPLIES
Cisco Employee

Re: syslog collector status all zeros

Is this on Windows or Solaris?

New Member

Re: syslog collector status all zeros

This is on windows.

Cisco Employee

Re: syslog collector status all zeros

Check the syslog.log to see if new messages are arriving in this file. Make sure the crmlog service is running, and bound to UDP port 514.

New Member

Re: syslog collector status all zeros

The syslog service is running. However, the syslog.log file shows it is 4.3GB and was last modified on 3/12/09. I can't open it due to its size. Would this be the problem? Plenty of CPU and memory available.

Cisco Employee

Re: syslog collector status all zeros

You should consider zeroing it out. Stop the crmlog service, then run:

pdterm SyslogCollector SyslogAnalyzer

Then run:

logrot_trunc NMSROOT\log\syslog.log

That will zero out the file. Then restart the crmlog service, and run:

pdexec SyslogCollector SyslogAnalyzer

Then watch the file to see that new messages arrive. If they do, the syslog counts should increment.

New Member

Re: syslog collector status all zeros

Thanks much, this did the trick. Can this be scheduled via Ciscoworks or RME? Or somehow automatically managed?

Cisco Employee

Re: syslog collector status all zeros

You can configure logrot.pl to do this automatically. Consult the Common Services online help for more details on configuring logrot. Just search for "logrot". Once you have it configured, you can schedule it with the Windows AT command.

175
Views
0
Helpful
7
Replies
CreatePlease to create content