I have just installed Kiwi Syslog Server and is trying to capture Syslog messages from my Cisco 2960 Switches. Based on the docs online I have created following configuration:
logging 192.168.1.5 logging trap 7 logging facility local7 service timestamps debug datetime localtime msec year service sequence-numbers archive log config logging enable logging size 1000 exit exit clock timezone IST +5 30 logging source-interface vlan 1
Now I dont see all the logs being sent to the Server. Here is the result of Show logging:
G01#sh logging Syslog logging: enabled (0 messages dropped, 0 messages rate-limited, 0 flushes, 0 overruns, xml disabled, filtering disabled) No Active Message Discriminator. No Inactive Message Discriminator. Console logging: level debugging, 1228 messages logged, xml disabled, filtering disabled Monitor logging: level debugging, 0 messages logged, xml disabled, filtering disabled Buffer logging: level debugging, 1228 messages logged, xml disabled, filtering disabled Exception Logging: size (4096 bytes) Count and timestamp logging messages: disabled File logging: disabled Persistent logging: disabled No active filter modules. Trap logging: level debugging, 1232 message lines logged Logging to 192.168.1.5 (udp port 514, audit disabled, authentication disabled, encryption disabled, link up), 14 message lines logged, 0 message lines rate-limited, 0 message lines dropped-by-MD, xml disabled, sequence number disabled filtering disabled Log Buffer (4096 bytes):
Could someone please tell me why even though 1232 message lines are logged by the trap only 14 are sent to the server itself?
My key goals are to ensure that any interface up/down, any kind of debug information any kind of configuration changes are all logged and sent to Syslog server.