LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
LinkBack Search this Thread
Old 08-11-2009, 05:42 AM   #1
steven.c.banks
Member
 
Registered: Dec 2007
Location: Virginia
Distribution: RHEL
Posts: 44
Blog Entries: 1

Rep: Reputation: 15
Configure Cisco 3560 to send logins to syslog


I have enabled logging in a Cisco 3560 switch, and forwarding of messages to syslog on a Linux server. Messages like line protocol up and down, and config changes, are being sent to syslog OK. What I am not seeing are messages when I log into the switch or change to enable mode.

I made the following config changes in the switch:
SWP01#config t
Enter configuration commands, one per line. End with CNTL/Z.
SWP01(config)#archive
SWP01(config-archive)#log config
SWP01(config-archive-log-cfg)#notify syslog
SWP01(config-archive-log-cfg)#end
SWP01#config t
Enter configuration commands, one per line. End with CNTL/Z.
SWP01(config)#logging 10.50.147.194
SWP01(config)#logging trap debug
SWP01(config)#end

When I enter show logging, I get:
SWP01#show logging
Syslog logging: enabled (0 messages dropped, 23 messages rate-limited, 0 flushes, 0 overruns, xml disabled, filtering disabled)
Console logging: level debugging, 244216 messages logged, xml disabled,
filtering disabled
Monitor logging: level debugging, 0 messages logged, xml disabled,
filtering disabled
Buffer logging: level debugging, 244238 messages logged, xml disabled,
filtering disabled
Exception Logging: size (4096 bytes)
Count and timestamp logging messages: disabled
File logging: disabled
Trap logging: level debugging, 121155 message lines logged
Logging to 10.50.147.194, 224 message lines logged, xml disabled,
filtering disabled

Is it possible to send login info to syslog, and if so, how? Thanks in advance...
 
Old 08-11-2009, 08:48 AM   #2
centosboy
Senior Member
 
Registered: May 2009
Location: london
Distribution: centos5
Posts: 1,137

Rep: Reputation: 116Reputation: 116
Quote:
Originally Posted by steven.c.banks View Post
I have enabled logging in a Cisco 3560 switch, and forwarding of messages to syslog on a Linux server. Messages like line protocol up and down, and config changes, are being sent to syslog OK. What I am not seeing are messages when I log into the switch or change to enable mode.

I made the following config changes in the switch:
SWP01#config t
Enter configuration commands, one per line. End with CNTL/Z.
SWP01(config)#archive
SWP01(config-archive)#log config
SWP01(config-archive-log-cfg)#notify syslog
SWP01(config-archive-log-cfg)#end
SWP01#config t
Enter configuration commands, one per line. End with CNTL/Z.
SWP01(config)#logging 10.50.147.194
SWP01(config)#logging trap debug
SWP01(config)#end

When I enter show logging, I get:
SWP01#show logging
Syslog logging: enabled (0 messages dropped, 23 messages rate-limited, 0 flushes, 0 overruns, xml disabled, filtering disabled)
Console logging: level debugging, 244216 messages logged, xml disabled,
filtering disabled
Monitor logging: level debugging, 0 messages logged, xml disabled,
filtering disabled
Buffer logging: level debugging, 244238 messages logged, xml disabled,
filtering disabled
Exception Logging: size (4096 bytes)
Count and timestamp logging messages: disabled
File logging: disabled
Trap logging: level debugging, 121155 message lines logged
Logging to 10.50.147.194, 224 message lines logged, xml disabled,
filtering disabled

Is it possible to send login info to syslog, and if so, how? Thanks in advance...
on syslog server

Code:
SYSLOGD_OPTIONS="-r -m 0"
on router

Code:
service timestamps log datetime localtime
no logging console
no logging monitor
logging 192.x.x.x facility 6

on syslog server in syslog.conf

Code:
local6.*                                                /var/log/cisco.log
then restart syslog
 
Old 08-12-2009, 02:03 PM   #3
centosboy
Senior Member
 
Registered: May 2009
Location: london
Distribution: centos5
Posts: 1,137

Rep: Reputation: 116Reputation: 116
any joy???
 
Old 08-13-2009, 02:06 PM   #4
steven.c.banks
Member
 
Registered: Dec 2007
Location: Virginia
Distribution: RHEL
Posts: 44
Blog Entries: 1

Original Poster
Rep: Reputation: 15
sorry - we've had production problems today - will try it tomorrow...
 
  


Reply

Tags
cisco, syslog


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
configure mysql to send errorlog to syslog sezam2 Linux - Server 3 03-07-2009 08:35 AM
cisco wlc and syslog jjsan Linux - Server 1 02-06-2008 04:15 PM
Radius & Cisco logins Goretex Linux - Software 0 07-26-2007 11:41 AM
Syslog logging Cron logins rhoekstra Fedora 4 02-17-2005 02:45 AM
syslog and normal user logins bujecas Slackware 9 12-20-2004 11:18 AM


All times are GMT -5. The time now is 05:21 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration