Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

2 devices log to same PIX syslog server?

Status
Not open for further replies.

yert33

Programmer
Joined
Feb 19, 2002
Messages
255
Location
US
I have my PIX 520 successfully logging to a Cisco PIX Firewall Syslog Server v5.1(2). I want to start logging from my Cisco 2600 router also. Can I send logging from these 2 devices to the same syslog server?

TIA
 
Yes, you should be able to without trouble. Just specify the same logging host on both devices. I use Kiwi Syslogger and I pull syslog messages from a router and a PIX. Each syslog entry includes a source hostname anyway, so it's fairly easy to distinguish between the two hosts.

ShackDaddy
 
absolutely. Read up on using faculities (7 used) and local level (0-7)setting. You can configure the syslog server, in my case a Linux box, to have several directories and each one get certain device syslog messages.

Facilities can be considered pipes and direct the flow of the messages and the local level determines what messages will be sent.

You tell the device which pipe and level of message to send and on the syslog server, normally in /etc/syslog.conf, you will direct that pipe and message to a certain directory

Here is a step by step

MikeS


Find me at
"Take advantage of the enemy's unreadiness, make your way by unexpected routes, and attack unguarded spots."
Sun Tzu
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top