Syslogs - output to a server

laidbackfreak

ok im trying to configure my core routers to output there syslogs to a central server (W2003) and use a 3rd party software to read the data.

however im struggling to acheive this, so far I've followed the information in here :-
http://www.cisco.com/univercd/cc/td/doc/cisintwk/intsolns/as5xipmo/sysmgt.htm#xtocid4

however I cant see the output of the file on the server....

can i check that in step 3 i specify the logging config as follows

logging 172.22.66.18
logging buffered 10000 debugging
logging trap debugging

as above, I am assume that the file will just be dumped on the route of the 172.22.66.18 server and I dont need to specify any further location ?

If thats the case I'm lost cos I cant find the file on the server.
Anyone able to clarify this further ??

gojericho0

Do a sh log just to confirm its being recorded by the cisco device as well. Also does it show any messages being sent when you first run the command?

What is the syslog software you are running in Windows?

APA

logging buffered shouldn't be necessary if you are saving to a syslog server......

The syslog software should have parameters within it it allowing you to specify where the file is to be saved........

forbesl

You also need to specify the following on your router:

logging facility <local0 thru local7>
logging source-interface <interface>

Set your syslog server to read the logs on the appropriate logging facililty.

mikearama

Knowing the make/model of the software you're using would help.

For example, the syslog server by Orion (solarwinds) doesn't require any server-side setup... it'll show anything sent to it by a listed resource.

On the other hand, WSyslogD requires adding the devices IP to the ini file... only then will the syslog server accept and save traps.

Sounds like you have something like the latter.

Mike

nice343

try this command

logging on

this will log any output to the router