?
Solved

unable to log messages to syslog server

Posted on 2013-12-10
5
Medium Priority
?
475 Views
Last Modified: 2013-12-10
Hello EE,

I have installed Kiwi Syslog Server on Windows 2008 R2.

I have configured the switch as follows

logging on

logging 10.1.2.46

logging trap local severity 6.

However, the PC is not recieving any messages. Here is the output of sh logging on my switch

Syslog logging: enabled (0 messages dropped, 10 messages rate-limited, 0 flushes
, 0 overruns)
    Console logging: level debugging, 68 messages logged
    Monitor logging: level debugging, 0 messages logged
    Buffer logging: level debugging, 78 messages logged
    Exception Logging: size (4096 bytes)
    Count and timestamp logging messages: disabled
    Trap logging: level informational, 39 message lines logged
        Logging to 10.1.2.46, 3 message lines logged


I can ping to PC from Switch and vice versa.


Please any help

Thanks
0
Comment
Question by:cciedreamer
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 57

Accepted Solution

by:
giltjr earned 2000 total points
ID: 39709389
Can you run wireshark on the Kiwi server to do a packet capture to verify the messages are getting to the PC.

According to your show log, the switch sent at least 3 messages.
0
 
LVL 22

Expert Comment

by:Matt V
ID: 39709582
Verify that the SNMP service on Windows is not running as it will interfere with the Kiwi server.
0
 
LVL 3

Author Comment

by:cciedreamer
ID: 39709633
Thanks it is resolved now. I ran the wire shark and I captured packets to see on what IP address of the switch he syslog server was listening to since I have HSRP scenario.

Last thing to confirm

I have configured severity 6 on switch so I should receive logs for following events Right ?

emergency
alert
critical
error
warning
notification
0
 
LVL 57

Expert Comment

by:giltjr
ID: 39709659
Yes, you should see all messages level 0 - 6.
0
 
LVL 3

Author Closing Comment

by:cciedreamer
ID: 39709670
Thanks for the support. I appreciate.
0

Featured Post

Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Originally, this post was published on Monitis Blog, you can check it here . It goes without saying that technology has transformed society and the very nature of how we live, work, and communicate in ways that would’ve been incomprehensible 5 ye…
Make the most of your online learning experience.
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…
Suggested Courses

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question