Table of Contents
Advertisement
Implementing Logging Services
Syslog Source Address Logging
By default, a syslog message contains the IP address (IPv4 and IPv6 are supported) of the interface it uses to
leave the router when sent to syslog servers. To set all syslog messages to contain the same IP address,
regardless of which interface the syslog message uses to exit the router, use the logging source-interface
command in global configuration mode.
UNIX Syslog Daemon Configuration
To configure the syslog daemon on a 4.3 BSD UNIX system, include a line such as the following in the
/etc/syslog.conf file:
local7.debug /usr/adm/logs/cisco.log
The debugging keyword specifies the syslog level; see
294
for a general description of other keywords. The local7 keyword specifies the logging facility to be used;
see
Table 32: Syslog Message Severity Levels, on page 294
The syslog daemon sends messages at this level or at a more severe level to the file specified in the next field.
The file must already exist, and the syslog daemon must have permission to write to it.
Archiving Logging Messages on a Local Storage Device
Syslog messages can also be saved to an archive on a local storage device, such as the hard disk or a flash
disk. Messages can be saved based on severity level, and you can specify attributes such as the size of the
archive, how often messages are added (daily or weekly), and how many total weeks of messages the archive
will hold.
Setting Archive Attributes
To create a logging archive and specify how the logging messages will be collected and stored, use the logging
archive command in global configuration mode. The logging archive command enters the logging archive
submode where you can configure the attributes for archiving syslogs.
This table lists the commands used to specify the archive attributes once you are in the logging archive
submode.
Table 29: Commands Used to Set Syslog Archive Attributes
Command
archive-length weeks
archive-size size
Cisco ASR 9000 Series Aggregation Services Router System Monitoring Configuration Guide, Release 4.2.x
UNIX Syslog Daemon Configuration
Table 32: Syslog Message Severity Levels, on page
for a general description of other keywords.
Description
Specifies the maximum number of weeks that the
archive logs are maintained in the archive. Any logs
older than this number are automatically removed
from the archive.
Specifies the maximum total size of the syslog
archives on a storage device. If the size is exceeded
then the oldest file in the archive is deleted to make
space for new logs.
291
Advertisement
Table of Contents
