https://community.cisco.com/t5/wireless/how-to-get-entire-syslog-from-ap-by-wlc/m-p/2923601#M114463 <P>If you want to see what exactly going on at AP level, you need to get AP console logs available. If you troubleshoot AP join/disconnect issues it may be valuable (I know it is practically difficult to get if your APs already mounted)</P> <P>Another option is directly get syslog from your AP to a syslog server. (again if AP having problem of getting IP, then there is no way to send those logs to your server)</P> <P></P> <P>HTH</P> <P>Rasika</P> Wed, 29 Jun 2016 05:24:33 GMT Rasika Nayanajith 2016-06-29T05:24:33Z https://community.cisco.com/t5/wireless/how-to-get-entire-syslog-from-ap-by-wlc/m-p/2923600#M114462 <P>Hello everyone,</P> <P>I want to extract syslog from remote site AP, when I utilize "show ap eventlog" command on WLC, only a small fraction syslog has been displayed, and also found the reflash frequency is very slow, how to get the entire syslog via WLC ?</P> <P>(DESCHWLC03) &gt;show ap eventlog B281-01<BR />AP event log download completed.<BR />&nbsp;======================= AP Event log Contents ===================== <BR />*Oct 5 05:05:41.043: %CAPWAP-3-ERRORLOG: Retransmission count exceeded max, ignoring as the ethernet is overloaded<BR />*Oct 5 05:05:44.044: %CAPWAP-3-ERRORLOG: Retransmission count exceeded max, ignoring as the ethernet is overloaded<BR />*Oct 5 05:05:47.044: %CAPWAP-3-ERRORLOG: Retransmission count exceeded max, ignoring as the ethernet is overloaded<BR />*Oct 5 05:05:50.044: %LWAPP-3-CLIENTEVENTLOG: Switching to Standalone mode<BR />*Oct 5 05:05:50.176: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 163.157.156.101:5246<BR />*Oct 5 05:05:50.177: %WIDS-5-DISABLED: IDS Signature is removed and disabled.<BR />*Oct 5 05:05:50.178: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY<BR />*Oct 5 05:06:50.001: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 163.157.156.12 peer_port: 5246<BR />*Oct 5 05:06:50.001: %CAPWAP-5-CHANGED: CAPWAP changed state to &nbsp;<BR />*Oct 5 05:06:51.496: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 163.157.156.12 peer_port: 5246<BR />*Oct 5 05:06:51.496: %CAPWAP-5-SENDJOIN: sending Join Re</P> Mon, 05 Jul 2021 12:19:51 GMT https://community.cisco.com/t5/wireless/how-to-get-entire-syslog-from-ap-by-wlc/m-p/2923600#M114462 DuJin0509 2021-07-05T12:19:51Z https://community.cisco.com/t5/wireless/how-to-get-entire-syslog-from-ap-by-wlc/m-p/2923601#M114463 <P>If you want to see what exactly going on at AP level, you need to get AP console logs available. If you troubleshoot AP join/disconnect issues it may be valuable (I know it is practically difficult to get if your APs already mounted)</P> <P>Another option is directly get syslog from your AP to a syslog server. (again if AP having problem of getting IP, then there is no way to send those logs to your server)</P> <P></P> <P>HTH</P> <P>Rasika</P> Wed, 29 Jun 2016 05:24:33 GMT https://community.cisco.com/t5/wireless/how-to-get-entire-syslog-from-ap-by-wlc/m-p/2923601#M114463 Rasika Nayanajith 2016-06-29T05:24:33Z