SYSLOG

[lobo66]

How do you fine tune syslog messages, I am running a syslog and for i.e. I have a router that is pulgged into a switch thats complaining about duplex mismatch .. Well short story I have 300 + router in teh field so its hard to tell which one.. thx all..

 

[AJ1982]

You can tell SYSLOG to show the IP Address of the sending device.

Also you can do some stuff with Class of message, never worked it out properly tho.

AJ

===

Fatman Superstar (Andrew James)

CCNA, CCAI

 

[lobo66]

Hmmm how do I tell it to show the IP address?

THX..

 

[AJ1982]

Dependant on your SYSLOG application

===

Fatman Superstar (Andrew James)

CCNA, CCAI

 

[lobo66]

I am just dumping the data to a unix box..

 

[lgarner]

What kind of syslog messages are you getting? Normally they'll contain either the IP address or name of the reporting host, depending upon whether the syslog server can reverse-resolve the address.

 

[plshlpme]

u can specify logging source-interface in the router... and all log entries will begin with its host.

if you are using syslog-ng there is a nice little example here

http://www.badapple.net/old/tech/logging.html

it will create a dir in your /var/log called cisco
and then create a seperate log file for each host...

you might be able to figure out how to customize it further though if you like it.