Logging Messages To A Unix Syslog Daemon - Cisco Catalyst 3550 series Software Configuration Manual

Chapter 26 Configuring System Message Logging

Logging Messages to a UNIX Syslog Daemon

Before you can send system log messages to a UNIX syslog server, you must configure the syslog
daemon on a UNIX server. Log in as root, and perform these steps:
Some recent versions of UNIX syslog daemons no longer accept by default syslog packets from the
Note
network. If this is the case with your system, use the UNIX man syslogd command to determine what
options must be added to or removed from the syslog command line to enable logging of remote syslog
messages.
Add a line such as the following to the file /etc/syslog.conf:
Step 1
local7.debug /usr/adm/logs/cisco.log
The local7 keyword specifies the logging facility to be used; see
information on the facilities. The debug keyword specifies the syslog level; see
for information on the severity levels. The syslog daemon sends messages at this level or at a more severe
level to the file specified in the next field. The file must already exist, and the syslog daemon must have
permission to write to it.
Step 2 Create the log file by entering these commands at the UNIX shell prompt:
$ touch /var/log/
$ chmod 666 /var/log/
Step 3 Make sure the syslog daemon reads the new changes:
$ kill -HUP `cat /etc/syslog.pid`
For more information, see the man syslog.conf and man syslogd commands on your UNIX system.
Configuring the UNIX System Logging Facility
When sending system log messages to an external device, you can cause the switch to identify its
messages as originating from any of the UNIX syslog facilities.
Beginning in privileged EXEC mode, follow these steps to configure UNIX system facility message
logging:
Command
Step 1
configure terminal
Step 2
logging host
Step 3 logging trap level
78-11194-09
cisco.log
cisco.log
Purpose
Enter global configuration mode.
Log messages to a UNIX syslog server host by entering its IP address.
To build a list of syslog servers that receive logging messages, enter this
command more than once.
Limit messages logged to the syslog servers.
Be default, syslog servers receive informational messages and lower. See
Table 26-3 on page 26-9
Catalyst 3550 Multilayer Switch Software Configuration Guide
Configuring System Message Logging
Table 26-4 on page 26-12
Table 26-3 on page 26-9
for level keywords.
for
26-11