https://community.cisco.com/t5/network-security/how-to-mirror-switch-logs/m-p/4115885#M1071872 <P>Can anyone suggest how you would mirror the logs of your switch without turning on both TX and RX (so not to generate duplicate entries) ?</P><P>I am monitoring RX packets which doesn't include the local switch logs, which I want to capture also !</P> Sat, 11 Jul 2020 09:07:34 GMT ksherwood 2020-07-11T09:07:34Z https://community.cisco.com/t5/network-security/how-to-mirror-switch-logs/m-p/4115885#M1071872 <P>Can anyone suggest how you would mirror the logs of your switch without turning on both TX and RX (so not to generate duplicate entries) ?</P><P>I am monitoring RX packets which doesn't include the local switch logs, which I want to capture also !</P> Sat, 11 Jul 2020 09:07:34 GMT https://community.cisco.com/t5/network-security/how-to-mirror-switch-logs/m-p/4115885#M1071872 ksherwood 2020-07-11T09:07:34Z https://community.cisco.com/t5/network-security/how-to-mirror-switch-logs/m-p/4117604#M1071986 <P>&nbsp;</P><P>Ok, I have worked it out.</P><P>All you have to do is create two layer three interfaces (or switch virtual interfaces) and connect them together.</P><P>The RX monitor interface is one of them and the same interface is the set as the 'logging source interface'.</P><P>Make sure you turn off CDP on both interfaces.</P> Mon, 13 Jul 2020 11:29:16 GMT https://community.cisco.com/t5/network-security/how-to-mirror-switch-logs/m-p/4117604#M1071986 ksherwood 2020-07-13T11:29:16Z