6509 syslog setup

[wbrowning]

I have a 6509 running in hybrid mode. My question is if I set logging on the CatOS portion of the device to a syslog server, will it still log locally to the device?

As well, I understand all the different server facility parameters I can set, and the default is LOCAL7. Some configuration examples set it to LOCAL5, and some to LOCAL0, and I'm wondering what exactly this facility represents and what I should set it to, if I need change it at all.

My ideal outcome is to continue logging the same level I am currently at, and have the log messages sent to the server as well as appear on the local device.

[kimlong]

Hi,

Yes, you can have the syslog messages display to the console/telnet session and spool to the syslog server. The commands to do that on a 6xxx are

the logging level cdp 5 default (for example).

The 'local 7', 'local 5' refer to the facility on the server. You could have,

for instance, all your 6xxx series switches log to local7 and all your 3550's

log to local5. You just need to decide what you want to do. Or you could

have all your switches use one facility.

An example in your syslog.conf file might look like this:

#local7.debug local7.info /var/adm/6000series.log

#local7.notice

local5.info /var/adm/3550series.log

-------- or -------

local5.notice /var/adm/switches.log (for everything)

You set the facility with the command set logging server facility LOCALx.

The facility is the process on the server you want to use.

The severity is the level of messages you want to see. The higher the

number (7) the more messages you will see. The lower (1) numbers

are less frequent but more important.

The final step is to be sure that you have turned logging on (set logging enable)

and that you have defined a syslog server (set logging server x.x.x.x)

Kim