Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Syslog Report Problem

Question on why this would occur. I turned off filtering of severity 7 msgs. After that I no longer got any Syslog msg's in a 24 hour syslog report.

I checked the Syslog log file and found it was still collecting all syslog msgs.

I turned on the filtering of Severity 7 msgs filter and now I am seeing syslog msg's in the 24 hour report.

My question is why would this prevent ALL msg's from showing up in the report? Also, why when I turn off the filter and run the 24 hour report why doesn't it pull up ALL the msg's, just pulls up the newest ones since I made the change. On a sidenote I have it set to keep filtered msgs and not drop them, so they're still in the log file.


Re: Syslog Report Problem


Can you revert in which router model you have tried this ?

I suspect that you have disabled the whole logging sent to the server while turning off the severity msgs.

Can you confirm the series of CLIs which you have tried for turning on and turning off...


New Member

Re: Syslog Report Problem

I'm sorry I forgot to specify this was for CiscoWorks LMS 2.5.

All my devices are sending proper Syslog msgs to the server. The problem is running a query within the RME module and having it show up blank. (Even though I can manually parse through the .log file and see msgs).

New Member

Re: Syslog Report Problem


I have had similar problem with Keep choice.

I suppose who are in RME > tools > Syslog > Message Filter with LMS 2.5

First consider what choice who have made Drop or Keep


Only SYSLOG with filter enable are keep and you can do report with them.

if you disable all filter all SYSLOG are keep on you can use them for report


Now if you chose DROP perhups if you disable all filter all SYSLOG are drop. If you enable one and more filter only those you are choice are drop

others are keep and can be use for report