How to export log to syslog server?

[jiangcaixia]

I can't get the log messages from nexus 1000v on my ubuntu server. I configured nexus 1000v with the following commands:

Nexus1000v# conf t

Nexus1000v(config)# show logging server
Logging server:                 disabled
Nexus1000v(config)# logging server 10.117.4.49 7
Nexus1000v(config)# show logging server
Logging server:                 enabled
{10.117.4.49}
        server severity:        debugging
        server facility:          local7
        server VRF:             management

Then I configured on my ubuntu9.10 server:

1. sudo apt-get install sysklogd

2. insert a line to /etc/syslog.conf:

local*.*                    /home/caixia/cisco.log

3. change SYSLOGD="" to SYSLOGD="-r" in /etc/default/syslogd

4. sudo iptables -I INPUT -p udp -i eth0 -s 10.117.4.0/24 --dport 514 -j ACCEPT

5. touch /home/caixia/cisco.log

6. chmod 666 /home/caixia/cisco.log

7. sudo /etc/init.d/sysklogd restart

I found cisco.log was changed to the owner syslog:adm. But there is no content in cisco.log.

Is there any wrong setting? Any help?

Thanks,

Caixia

[pakishan]

Hi  Caixia,

You N1KV configuration is fine. Kindly check your Ubuntu server.

Can you try giving IP of any exisiting and running syslog server?

Sample Red Hat Enterprise Linux config:

0) Check for firewall settings

1) In RHEL5/RHEL4, sample config file:
"cat /etc/sysconfig/syslog"
SYSLOGD_OPTIONS="-r -m 0"
KLOGD_OPTIONS="-x"
SYSLOG_UMASK=077
2) service syslog restart
3) ps -ef | grep syslog*
root 7373 1 0 07:16 ? 00:00:00 syslogd -r -m 0
4) tail -f /var/log/messages --> you should be seeing syslog's from N1KV

regards

Kishan

[anaiyar]

Hi,

Please go through the following document for correct configuration guidelines and to verify your syslogging configurtion on the switch.

http://www.cisco.com/en/US/partner/docs/switches/datacenter/nexus1000/sw/4_0_4_s_v_1_2/troubleshooting/configuration/guide/trouble_1overview.html#wp1061211

Also are you able to ping the ubuntu server from the switch and vice versa?

please check for furewall, if any and the syslog server software installed.

Also just to isolate the issue, try hooking any windows machine with any known good syslog server software such as Kiwi and see if works fine with it or not.

Thanks and Regards

Arun Naiyar