Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Blue

Syslog records lost after deleting device from DCR?

I had pairs of dupes in DCR in the form of "router" and "router.company.com", with the latter imported from csv. Is it plausible RME deleted the associated Syslog records when I deduped by deleting all the "router.company.com" ones? The only Syslogs listed under "router" are ones collected after my deduplication.

5 REPLIES
Cisco Employee

Re: Syslog records lost after deleting device from DCR?

If you delete a device from the DCR then you are going to lose any related information like config archive, syslog, etc...

Was router also deleted? Were they in an alias state?

Blue

Re: Syslog records lost after deleting device from DCR?

DCR didn't recognize any of them as dupes or aliases. The "router" ones are kept.

It doesn't make sense to me to have historical syslogs deleted since those are collected (by syslogd) independently of what LMS/RME is doing. Even in the case of truly retiring/deleting a device, users may still want to have a look back at the syslogs from within RME.

Cisco Employee

Re: Syslog records lost after deleting device from DCR?

Are you talking about the Syslog report data being lost or the messages in the syslog.log or syslog_info?

Blue

Re: Syslog records lost after deleting device from DCR?

The Syslog report data.

Ok, now it makes some sense, because of this step of selecting what devices I want to run the Syslog reports on. Still, in the case of dupes like I described, it shows an unintended downside.

Re: Syslog records lost after deleting device from DCR?

the messages should be deleted from the syslog DB but are still in the flat file..

(and I know that not everybody should have access to the flat file..)

and BTW - I aggree with you...

120
Views
0
Helpful
5
Replies
CreatePlease to create content