05-19-2008 01:33 AM - edited 03-03-2019 09:59 PM
Hi,
I have 'logging buffered 8192 warnings
' on one of my routers, is this the only part I need to change to gove me more info on the router. It's just I'm not seeing much on my syslog server.
Thanks
Solved! Go to Solution.
05-19-2008 01:36 AM
Logging buffered affects the level written to the routers buffer.
You need to edit the "logging trap" ie.
logging trap warnings
The logging trap determines what is sent to the syslog server.
Jon
05-19-2008 01:36 AM
Logging buffered affects the level written to the routers buffer.
You need to edit the "logging trap" ie.
logging trap warnings
The logging trap determines what is sent to the syslog server.
Jon
05-19-2008 02:19 AM
Thanks, let me test this, so is it good to keep both the same?
05-19-2008 02:22 AM
Yes, having the router log to a syslog server and the buffer is a common setup.
Jon
05-19-2008 02:37 AM
Sorry John, my wording - is it a good idea to set the buffer log level to the same as trap level.
05-19-2008 02:43 AM
Yes unless you are doing some troubleshooting. Basically you want important messages to be sent to your syslog server while making sure you don't get a continuous flood of messages across the network.
Same principle for buffer on router, when the buffer is full it will overwrite so you don't want it filling up too quickly.
Errors/warnings are about the right level.
Jon
05-19-2008 02:53 AM
Thanks Jon,
I'm just trying to work out how to log:
logons to the router,
changes to the config,
any any level above.
I need to have an audit history, am I on the right path? I think it might be level 5 I need which is notify.
I added the follwoing to the router for logins:
archive
log config
logging enable
logging size 200
hidekeys
login on-failure log
login on-success log
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: