I have set up my cisco to send the syslog to a syslog server, but it is showing link down on that ip address for the server.
Has anyone done this and know why it is showing link down?
Below is the configuration.
Console logging: level debugging, 991 messages logged, xml disabled,
filtering disabled
Monitor logging: level debugging, 0 messages logged, xml disabled,
filtering disabled
Buffer logging: level warnings, 757 messages logged, xml disabled,
filtering disabled
Exception Logging: size (4096 bytes)
Count and timestamp logging messages: disabled
Persistent logging: disabled
Trap logging: level warnings, 1034 message lines logged
Logging to x.x.x.x (tcp port 515, audit disabled,
link down),
0 message lines logged,
0 message lines rate-limited,
0 message lines dropped-by-MD,
xml disabled, sequence number disabled
filtering disabled
Logging to x.x.x.x (tcp port 514, audit disabled,
link down),
0 message lines logged,
0 message lines rate-limited,
0 message lines dropped-by-MD,
xml disabled, sequence number disabled
filtering disabled
Logging Source-Interface: VRF Name:
GigabitEthernet0/1
because it may not succeed in opening the socket on tcp port 514 (e.g.: the syslog server may not be listening on that port).
It is usually easier to let logs flow through udp port 514
hope this helps
max