syslog

[alsayed]

Hi Experts!

I have an entreprise network;But we have not a SYSLOG Server.i need to build this Server From where should i begin?

10xs

Ali

[ariela]

Hi,

fast answer:

on your cisco try something like that:

logging buffered 16384 debugging

no logging console

no logging monitor

logging trap debugging

logging source-interface (FastEthernet0/0)

logging (unix ip)

and on your unix management server (syslog.conf):

local7.debugging /var/log/cisco.log

more info here:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/ffun_c/fcfprt3/fcf013.htm#wp1001168

HTH

Andrea

[abhishek_nandavat]

Hi!

You need to first build a server and then install some syslogging software on that.(Kiwi syslog is the best and its available for free!!!)

Then you need to add this server as the syslog server in all the devices from which you want logs to be stored.

On all the devices from which you want logs, enter the following commands:

- enable

- configure terminal

- logging host a.b.c.d

- logging trap '0-7'

logging level 0 is the most severe and logging level 7 is the lowest in severity.

You can also configure services so that all your logs have a time stamp with the date and time.

Enter the following commands:

- enable

- configure terminal

- service timestamps log datetime

For more please refer the following link -->

http://www.cisco.com/en/US/products/hw/switches/ps646/products_configuration_guide_chapter09186a00801f0a4e.html#1031634

Download Kiwi syslog daemon from the following link-->

http://www.kiwisyslog.com/php/download.php?syslogdV8_kiwitools&v=8.0.2

Hope this helps.

Please rate all posts.

Regards,

AbhisheK

[hemendoz]

Hello,

If you are in need of a syslog server, Kiwi is an excellent choice.

http://www.kiwisyslog.com/index.php

Hope that helps! If so, please rate.

[alsayed]

Hi!

the log message contain waht;when i browse it in the Kiwi syslog?

up/down interface

error ibnterface

lop

collision

edidting configuration.like these i see in the syslog server

10xs

[steve_miller]

Kiwi is not the best but may be the simplest for you to get up and running. Most every unix variant has a syslog daemon that you can use to store or forward syslog messages.

I would say that syslog-ng is the best free syslog server available if you are looking for something that is amazingly configurable and unix based. It is an absolutely phenomenal syslogd replacement.