My 6509 is configured correctly to send syslog messages to my ManageEngine Eventlog analyzer. The messages are not arriving. I have a ASA FWSM in the 6509. I conduct a packet tracer and the traffic is allowed between the 6509 and Syslog server. I conduct a packet capture and see no UDP 514 traffic from 6509 to Syslog server. Show logging reveals that syslog server is configured correctly and messages are being logged.
6509 config:
logging buffered 32768 informational
no logging console
logging source-interface Vlan910
logging host 10.3.10.6
logging host 10.3.10.26
Show logging:
BLDG300-6509-SW1#sh logging
Syslog logging: enabled (0 messages dropped, 195693 messages rate-limited, 4 flushes, 0 overruns, xml disabled, filtering disabled)
No Active Message Discriminator.
No Inactive Message Discriminator.
Console logging: disabled
Monitor logging: level debugging, 222355 messages logged, xml disabled,
filtering disabled
Logging to: tty1(222307)
Buffer logging: level informational, 2968 messages logged, xml disabled,
filtering disabled
Exception Logging: size (4096 bytes)
Count and timestamp logging messages: disabled
Persistent logging: disabled
Trap logging: level informational, 37925 message lines logged
Logging to 10.3.10.6 (udp port 514, audit disabled,
link up),
37918 message lines logged,
0 message lines rate-limited,
0 message lines dropped-by-MD,
xml disabled, sequence number disabled
filtering disabled
Logging to 10.3.10.26 (udp port 514, audit disabled,
link up),
1250 message lines logged,
0 message lines rate-limited,
0 message lines dropped-by-MD,
xml disabled, sequence number disabled
filtering disabled
Logging Source-Interface: VRF Name:
Vlan910
