Hi All Good morning.
My customer wants Forwarding DCNM syslogs messages to a syslog server ( Splunk) i found KB addressing the issue Article Number: 000019598 , This was last updated in 2020 wonder anyone know any updates please. Thanks a million in advance.
User Requirement:
The user requirement was to check if we could forward the syslog NATIVE content to Splunk syslog server.
In our attempts, we did select Splunk IP and port 514 and selected syslogs and all wildcard.
The Splunk server is not a trap receiver and only listens on 514.
In the end, there was a possibility to check if user could move the MDS logging server functions from splunk to DCNM and allow DCNM to be the syslog aggregator/forwarder.
Future Enhancement in DCNM:
Cisco Development Team confirmed that, DCNM currently only supports forwarding syslogs as SNMP traps or email.
DCNM does not support forwarding as native syslogs. Syslog content would be packaged as varbind/s in SNMP trap or embedded in email.
