Hot answers tagged

7 votes
Accepted

Juniper Filesystem Full

There are 3 real ways to fix this, all of which are fairly simple. Automated Storage Cleanup Juniper has a system cleanup tool for handling this automatically. It operates almost exclusively under ...
user avatar
  • 5,449
6 votes
Accepted

Rate limit specific Cisco ISR syslog messages

Summary You should use Cisco's Embedded Syslog Manager. ESM can dynamically modify or throttle syslog messages when they are generated on the router. ESM Demo I built an example (see bottom of ...
user avatar
6 votes

Cisco 2960 Syslog - All logs not sent to Server

Is this output from after a reboot? You may have 1232 lines since you rebooted the device, but only 14 messages since you setup the syslog server. The switch won't send any old messages, just newly-...
user avatar
  • 1,589
5 votes

Log Messages In Juniper MX960

The syntax of the show log command is show log "filename". First try: show log This command will show you all files in the log directory. You will probably get the log entries you want simply by ...
user avatar
  • 141
5 votes
Accepted

How to view old Log messages on Junos

If you don't see those logs there anymore, they've most likely been rotated to reduce disk space used, but it could be that messages.19.gz contains logs from July, it all depends on when that log was ...
user avatar
  • 15.6k
5 votes

Juniper - minor host 0 /var partition usage is high

It looks like after taking the issue up with JTAC support, the /var partition was misrepresenting the amount of space that was actually in use. We haven't rebooted our switch in the last four years as ...
user avatar
5 votes
Accepted

How do I check if a Cisco switch is connected to a SYSLOG server?

Query 1: What does console, monitor, buffer & exception logging mean? The console is the console line interface. When console logging is enabled, log messages are sent to the serial console line. ...
user avatar
  • 93.5k
4 votes
Accepted

Dell switch Remote Log output structure

Found the manual that shows the format. The format is as follows: PRI Timestamp HostIP Address StackID Component Name Thread ID File name line number sequence number message
user avatar
  • 453
4 votes
Accepted

Send command lines to syslog server

You can send configuration commands to the syslog server with the notify syslog command (Cisco IOS Configuration Fundamentals Command Reference): archive ! archive configuration mode log ...
user avatar
  • 93.5k
4 votes

Problems with TCP-Syslog on Cisco devices?

Syslog streaming is independent of the router resources since it sends configured logs to an external Syslog server. Losing the syslog would mean that these logs go back to the internal buffer. The ...
user avatar
  • 400
3 votes
Accepted

Problems with TCP-Syslog on Cisco devices?

As far as I could see, there is no Cisco document that describes what happens in the scenario that you mention. But even if there was such a document, you would be best advised to verify the ...
user avatar
  • 2,396
3 votes
Accepted

Trigger a syslog message on ASR9k

The above requirement worked for me using the below command on ASR9k logmsg [your message]
user avatar
  • 859
3 votes
Accepted

Cisco EEM pass Syslog message to TCL script

Alright, so action policy POLICY_NAME $arg doesn't pass arguments to the script - had to switch to action cli command "tclsh flash:/script.tcl $arg"` which does, HOWEVER... EEM actions are unable ...
user avatar
  • 221
3 votes

Cisco 2960 Syslog - All logs not sent to Server

When logging to an external or syslog server, only new log entries are sent to the server. Old log entries will not be sent. You probably only have 14 log messages because that is all that have been ...
user avatar
  • 26.7k
3 votes

Cisco ASA logging to remote syslog question

The "debugging" level is way too detailed for most uses. As you can see, it generates a lot of messages; most are not helpful. Also, it puts a heavy load on the ASA. You can try logging trap info ...
user avatar
  • 62.5k
3 votes

Cisco ASA logging to remote syslog question

Trap logging: disabled That's the first problem. "trap" is the mechanism that sends to syslog hosts. logging trap informational will start messages flowing, but on an active firewall, there will a ...
user avatar
  • 29.6k
3 votes
Accepted

Log messages not leaving switch after changing source to management port

Set the VRF on the host entry. Your VRF should also be defined on the management interface itself. Please issue the commands: no logging host 10.10.10.10 transport udp port 10023 logging host 10.10....
user avatar
  • 4,481
3 votes
Accepted

Cisco ASA syslog messages, reversed source and destination for outbound communication?

Ok apparently that's what the Splunk plugin does as well. See "Splunk Add-on for Cisco ASA" https://splunkbase.splunk.com/app/1620/ # direction is inbound [...
user avatar
  • 183
2 votes
Accepted

Which is source IP and destination IP for this Cisco ASA Firewall Log?

A five second google search told me that: faddr = foreign address gaddr = global address (after NAT) laddr = local address (pre NAT) Since this is an inbound connection, the source IP address is ...
user avatar
  • 18.4k
2 votes
Accepted

Junos syslog filter Cron facility

Typically, log filtering is done on syslog servers, not on routers, but if you really want to do this on your router, it's possible. A very simple way to achieve it is to set your log level higher ...
user avatar
  • 15.6k
2 votes

Cisco IOS - Is it possible to change severity level of a single syslog message?

The closest IOS equivalent to the ASA's logging message command is the Embedded Syslog Manager (ESM) feature. It offers similar capabilities, but is far more flexible (and, consequently, more complex)....
user avatar
2 votes
Accepted

Is it possible to send syslog and SNMP traps to two different addresses concurrently?

Yes, you can with Cisco gear at least (and probably also with most other vendors). For syslog: logging 10.1.1.1 logging 10.1.1.2 For SNMP traps: snmp-server host 10.1.1.1 version 2c @str!ng snmp-...
user avatar
  • 949
2 votes
Accepted

How to capture the details of the network traffic by Cisco?

There's a protocol created by Cisco for this very purpose: netflow. You have to check if your version of IOS support it, and you need a netflow collector that will receive and record the ...
user avatar
  • 18.4k
2 votes
Accepted

Cisco Access Control Server ACS

Cisco ACS can't be used as syslog server, but it could be used as AAA server which is include Accounting: if you are looking to use ACS as accounting server for management account which is include ...
user avatar
  • 1,713
2 votes

Cisco ASA syslog filtering

You could write your firewall rules so that the "noisy" communication falls into a dedicated "Allow" rule and turn off logging for such rule.
user avatar
  • 183
2 votes
Accepted

Global IP sourced on my INSIDE interface to another global IP on OUTSIDE interface

Ok I believe I found the problem. My remote sites have their own routers with their own internet connection. We don,t really use it for anything other than an IPSEC tunnel back to HQ to use as a ...
user avatar
  • 403
1 vote
Accepted

2901 Router does not send Syslogs to the Syslog server

With these protocols running there has to be syslog messages for exchanges go between our devices and customer devices. "logging trap debugging" This command means that every log message is ...
user avatar
1 vote

Global IP sourced on my INSIDE interface to another global IP on OUTSIDE interface

When a public IP address shows up inside your private network you should track it down. Check the ARP table on the ASA whether the source is connected directly or work from there to the source router. ...
user avatar
  • 70.5k

Only top scored, non community-wiki answers of a minimum length are eligible