We receive up/down logs of ports from switches. But we cannot get the device names and IPs of the switches in those logs at Wazuh. Wazuh experts wrote that "i think that this could help you: https://community.cisco.com/t5/switching/hostname-in-syslog/td-p/3605024 As i see at cisco community , you need to add the origin-id string to your log naming them as the host name." but I cant figure out. Who has any idea for fixing this problem?
(config)#logging origin-id ? hostname Use origin hostname as ID ip Use origin IP address as ID ipv6 Use origin IPv6 address as ID string Define a unique text string as ID <cr>