Prabhakaran E,
Thank you for using the Application Centric Infrastructure Cisco Support Community!
In regards to your questions on Syslog Server Pre-Requisites, You mention you need help to deploy syslog server on our environment.
The configuration for Syslog messaging for the ACI Fabric is pretty similar to the Classic Cisco Switches & Routers. You simply setup a Syslog server in your network and the ACI nodes will send Syslog messages to that Syslog Server(s).
By default, a switch sends the output from system messages and debug privileged EXEC commands to a logging process. The logging process controls the distribution of logging messages to various destinations, such as the logging buffer, terminal lines, or a UNIX syslog server, depending on your configuration.
In the ADMIN->EXTERNAL DATA COLLECTORS section of the APIC GUI, The Syslog panel provides the options to create or delete a syslog monitoring destination group and contains a summary table that lists your existing syslog monitoring destination groups.
Using the Create Syslog Remote Destination Wizard
The syslog remote destination host enables you to specify syslog servers to which messages from the APIC and fabric nodes should be forwarded.
You add fields like:
Host
The host name or IP for export destination.
Severity
The severity of the event, alert, or issue that caused the syslog entry to be generated.
Port
The syslog service port of the remote destination. The range is from 0 to 65535; the default is 514.
Forwarding Facility
The facility to be used to send messages to this destination. The facility can be:
Management EPG that you will use.
You then configure the Syslog Source for the Fabric and Access Policies. As long as the Syslog Servers are accessible via the Management EPG you configured and the configured Syslog Port is allowed thru any firewalls, your Syslog server should receive messages for the ACI Node Switches.
I Hope this Information Helps
Cheers!
T.
