cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1260
Views
0
Helpful
1
Replies

Cisco switch log forwarding tp Wazuh

We receive up/down logs of ports from switches. But we cannot get the device names and IPs of the switches in those logs at Wazuh. Wazuh experts wrote that "i think that this could help you:
https://community.cisco.com/t5/switching/hostname-in-syslog/td-p/3605024 As i see at cisco community , you need to add the origin-id string to your log naming them as the host name." but I cant figure out. Who has any idea for fixing this problem? cisco ss.png

1 Reply 1

balaji.bandi
Hall of Fame
Hall of Fame

Try below :

(config)#logging origin-id ?
hostname Use origin hostname as ID
ip Use origin IP address as ID
ipv6 Use origin IPv6 address as ID
string Define a unique text string as ID
<cr>

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Quick Links