Syslog collect the log of switch

dellpe · 02-20-2014, 03:08 AM

I set up one syslog server, and I want to collect the log of my huawei switch S5700-28C-EI,In switch,the configure is very easy ,just logging 192.168.1.100,but I have no idea about syslog server.

unSpawn · 02-21-2014, 12:47 PM

For Rsyslogd you'd use something like

Code:

:fromhost-ip, isequal, "192.168.1.100"            /var/log/switch.log
& ~

*though these days you should use "stop" instead of "~" IIRC?..

donglee · 03-08-2014, 03:01 AM

Maybe you should use splunk to collect the log of your network device.But we often use splunk to monitor cisco device,like WS-C3560X-24T-L and so on.I think huawei is just ok.But you only can use 500MB everyday if you use free license.