LMS 3.2 Syslog

dtom — Fri, 21 Feb 2020 12:05:01 GMT

I am trying to run syslog reports in LMS. When I run the 24 hour syslog report nothing is found. No data on the report. I am trying to troubleshoot this. How can I tell if my traps are getting to the Ciscoworks server (10.223.241.32)? Is there something I can look at on the Ciscoworks server?

Here is what debug shows on the router:

ms-DUNCAN#sh log
Syslog logging: enabled (0 messages dropped, 0 messages rate-limited, 109 flushe
s, 0 overruns, xml disabled, filtering disabled)

No Active Message Discriminator.

No Inactive Message Discriminator.

    Console logging: level debugging, 31006 messages logged, xml disabled,
                     filtering disabled
    Monitor logging: level debugging, 0 messages logged, xml disabled,
                     filtering disabled
    Buffer logging: level debugging, 29155 messages logged, xml disabled,
                     filtering disabled
    Exception Logging: size (4096 bytes)
    Count and timestamp logging messages: disabled
    File logging: disabled
    Persistent logging: disabled

No active filter modules.

Trap logging: level informational, 31 message lines logged

Log Buffer (4096 bytes):

06:53:13: SNMP: Queuing packet to 10.223.248.83
06:53:13: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.26 = 1
ccmHistoryEventEntry.4.26 = 3
ccmHistoryEventEntry.5.26 = 2
06:53:13: SNMP: Queuing packet to 10.223.231.86
06:53:13: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.26 = 1
ccmHistoryEventEntry.4.26 = 3
ccmHistoryEventEntry.5.26 = 2
06:53:13: SNMP: Queuing packet to 10.223.241.32
06:53:13: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.26 = 1
ccmHistoryEventEntry.4.26 = 3
ccmHistoryEventEntry.5.26 = 2
06:53:13: SNMP: Packet sent via UDP to 10.223.248.83
06:53:13: SNMP: Packet sent via UDP to 10.223.231.86
06:53:13: SNMP: Packet sent via UDP to 10.223.241.32
06:53:16: SNMP: Queuing packet to 10.223.248.83
06:53:16: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.27 = 1
ccmHistoryEventEntry.4.27 = 2
ccmHistoryEventEntry.5.27 = 3
06:53:16: SNMP: Queuing packet to 10.223.231.86
06:53:16: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.27 = 1
ccmHistoryEventEntry.4.27 = 2
ccmHistoryEventEntry.5.27 = 3
06:53:16: SNMP: Queuing packet to 10.223.241.32
06:53:16: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.27 = 1
ccmHistoryEventEntry.4.27 = 2
ccmHistoryEventEntry.5.27 = 3
06:53:16: SNMP: Packet sent via UDP to 10.223.248.83
06:53:16: SNMP: Packet sent via UDP to 10.223.231.86
06:53:16: SNMP: Packet sent via UDP to 10.223.241.32
06:53:23: %LINK-5-CHANGED: Interface FastEthernet1/0/1, changed state to adminis
tratively down
06:53:28: %LINK-3-UPDOWN: Interface FastEthernet1/0/1, changed state to down
06:53:28: SNMP: Queuing packet to 10.223.248.83
06:53:28: SNMP: V1 Trap, ent ciscoSyslogMIB.2, addr 10.0.9.77, gentrap 6, spectr
ap 1
clogHistoryEntry.2.5 = LINK
clogHistoryEntry.3.5 = 4
clogHistoryEntry.4.5 = UPDOWN
clogHistoryEntry.5.5 = Interface FastEthernet1/0/1, changed state to down
clogHistoryEntry.6.5 = 2480801
06:53:28: SNMP: Queuing packet to 10.223.231.86
06:53:28: SNMP: V1 Trap, ent ciscoSyslogMIB.2, addr 10.0.9.77, gentrap 6, spectr
ap 1
clogHistoryEntry.2.5 = LINK
clogHistoryEntry.3.5 = 4
clogHistoryEntry.4.5 = UPDOWN
clogHistoryEntry.5.5 = Interface FastEthernet1/0/1, changed state to down
clogHistoryEntry.6.5 = 2480801
06:53:28: SNMP: Queuing packet to 10.223.241.32
06:53:28: SNMP: V1 Trap, ent ciscoSyslogMIB.2, addr 10.0.9.77, gentrap 6, spectr
ap 1
clogHistoryEntry.2.5 = LINK
clogHistoryEntry.3.5 = 4
clogHistoryEntry.4.5 = UPDOWN
clogHistoryEntry.5.5 = Interface FastEthernet1/0/1, changed state to down
clogHistoryEntry.6.5 = 2480801
06:53:28: SNMP: Packet sent via UDP to 10.223.248.83
06:53:28: SNMP: Packet sent via UDP to 10.223.231.86
06:53:28: SNMP: Packet sent via UDP to 10.223.241.32
06:53:41: %SYS-5-CONFIG_I: Configured from console by micros on vty0 (10.194.32.
88)

Re: LMS 3.2 Syslog

Jia Liu — Mon, 13 Sep 2010 22:35:37 GMT

You can run a packet capture on the Ciscoworks server to see if it's getting any traffic from the router.

topic Re: LMS 3.2 Syslog in Network Security

LMS 3.2 Syslog

Re: LMS 3.2 Syslog