ACI message timestamp - include year

[Stefan Engel]

Hi Community, 

We recently configured syslog in ACI. What I'm looking for is to include the year in the message timestamp. 

Our messages look like this: 

May 22 16:00:40 192.168.10.1 <1030> May 22 23:00:40 apic1
%LOG_LOCAL0-6-SYSTEM_MSG
[E4205213][transition][info][subj-[uni/userext/user-nancy]/mod-4294967339] User nancy created

It should be possible to include the year, but I cant find any document/information on how/where to set this. --> Cisco APIC Faults, Events, and System Messages Management Guide - System Messages [Cisco Application Policy Infrastructure Controller (APIC)] - Cisco

• TIMESTAMP

  The year, month, date, and time of day when the message was generated.

Any help to point me in the right direction is appreciated. 

Thanks,

Stefan

[jiarchen · Accepted solution]

HI, Stefan 

Thank you for reaching out via community. 

Syslog on APIC is RFC 5424 compliant. You can change the display setting to NX-OS type format. 

If you're using GUI, here's the change format option. 

Enabling Syslog to display in NX-OS CLI format, using the REST API
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/4-x/troubleshooting/Cisco-APIC-Troubleshooting-Guide-42x/Cisco-APIC-Troubleshooting-Guide-42x_chapter_0110.html#id_32297

The SyslogGroup is the Syslog monitoring destination group, the SyslogRemoteDest is the name you previously configured for your syslog server, and the host is the IP address for the previously configured Syslog Server. 

If you find my reply solved your question or issue, kindly click the 'Accept as Solution' button and vote it as helpful.

You can also learn more about Cisco ACI through our live Ask the Experts (ATXs) session. Check out the ATXs Resources [https://community.cisco.com/t5/data-center-and-cloud-knowledge/cisco-aci-ask-the-experts-resources/ta-p/4394491] to view the latest schedule for upcoming sessions, as well as the useful references, e.g. online guides, FAQs.