asked on

cisco router logging to syslog

Hi everyone,

What is the behavior of cisco router when it is configured with

logging buffered 10000
logging host ipaddress

Does the router flushes the buffer to the syslog server when it's full? Or does it log at the same time?

Someone told me that if it's configured that way, it will dump the old buffer to a syslogd server when it's buffer is full.

Please enlighten me on this matter.

Thanks.

ASKER CERTIFIED SOLUTION

eumac

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

boyntont

The logging buffered 10000 command determines the size of the buffer used to store syslog messages so that they they can be viewed using the sh logging command. It does not empty when the buffer is full. It is just a revolving buffer. The old messages get removed from the buffer when new ones are added. This command is pretty much just for convenience so that the logged in user can view the recent messages produced by the IOS. The loggin host ipaddress points to the syslog server. Each time a message is produced it is sent immediately to that server as well as stored in the buffer so that it can be viewed by the sh logging command. You do not need the logging buffered 10000 command in order to get messages sent to the syslogd server.

boyntont

The default for loggin buffer size is 4096 bytes. You do not have to configure this. It is configured by default.

boyntont

If you have a CCO account @ Cisco you can view this url that will tell you all about it.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v53/config/commands.htm#xtocid223336

rcamara

ASKER

Btw, I just passed CCNA. What career path should I take? :-)

rcamara

ASKER

how come, i was actually accepting boyntont answer but it went to eumac.