Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Basic question on logging, limited storage on syslog and router

Hello folks, I am new to syslog so I want to confirm the following:

Currently I have the below configured on MY4507:

Question:
Imagine I create an ACL "permit tcp any any eq 80 log-input" and apply to one of the inbound interfaces so that I can monitor hits to server network on port 80. Let's say I get too many hits. My understanding is that MY4507 would be protected against overflow by the command in red below, correct?

How about my syslog server? Is the 'logging size 500' also limit the information that I sent to my syslog server? Please let me know what is the best way to make sure that my syslog server will not crash in case I end up sending too many log output messages to it.

MY4507#show run | i logging
logging buffered 20000
logging event link-status global
logging event trunk-status global
  logging enable
  logging size 500
ip sla logging traps
logging source-interface Loopback0
logging 192.168.1.1

!-end

1 REPLY
Cisco Employee

Re: Basic question on logging, limited storage on syslog and rou

The size is the internal buffer kept for logs in IOS.

The syslogs server should protect itself againsta overflows (purging), the router cannot do anything about it.

I hope it helps.

PK

321
Views
0
Helpful
1
Replies
CreatePlease to create content