cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5074
Views
0
Helpful
3
Replies

cisco Prime 3.5 + Syslog Server

Jay_Work
Level 1
Level 1

Can anyone tell me the steps in order to get my switches to log events into Cisco Prime, so effectively using prime as a syslog server. I want this for scenarios where I am going to distribute images to switches and want the logs to be sent to prime so in the event of something going wrong I can raise a TAC call. 

 

I can see there are options for using Prime as a syslog server but the instructions and documents i've seen on the web on this arent particularity good. Anyone else using prime as as a syslog server?

3 Replies 3

When adding devices in prime, my guess is, it will automatically be configured as syslog server to send to.

I primarily use Prime for monitoring the wireless controllers (no switches) so not sure about this

if not, create a template for syslog server, apply this to the switches and in Prime open the path:

     Monitor / Monitoring Tools / Syslog Viewer

 

Prime Infrastructure support specific syslog type only. Following  Change Audit Report Settings:

 

Generate a Change Audit Report

The Change Audit report lists the actions that users have performed using thePrime Infrastructure features. The following table provides examples of what may appear in a Change Audit report.

 

Feature

Examples

Device management

Device '209.165.202.159' Added

User management

User ‘mmjones' added

Administration

Logout successful for user jlsmith from 209.165.202.129

Authentication Failed. Login failed for user fjclark from 209.165.202.125

Configuration changes

CLI Commands : ip access-list standard testremark test

Monitoring policies

Monitoring Template 'IF Outbound Errors (Threshold)' Created

Configuration templates

Configuration Template 'Add-Host-Name-IOS-Test' Created

Jobs

'Show-Users-On-Device-IOS_1' job of type Config Deploy - Deploy View scheduled.

Inventory

Logical File '/bootflash/tracelogs/inst_cleanup_R0-0.log.19999.20150126210302' deleted.

Configuraion Archive

STARTUP-CONFIG Changed

DELETED:dot11 guest

INSERTED:archive

INSERTED:log config

INSERTED:Permit icmp any any nd-na

Software Image Management

 

View Change Audit Details

Procedure


Step 1

Log in to Prime Infrastructure as an administrator

Step 2

Choose Monitor > Tools > Change Audit Dashboard.

The Change Audit Dashboard displays the network audit logs and change audit data of device management, user management, Virtual Domain, logging, Change Audit Notification, Configuration Archive,configuration template management, device community and credential changes, and inventory changes of devices. The Change Audit report and Change Audit dashboard display the details irrespective of the virtual domain you are logged in.

Note 

The audit details of the deleted devices will be available under Root-Domain only.

You can click the export icon to download the audit details as CSV or PDF file.

Distribute Image File Name(s):[ct5760-ipservicesk9.SPA.03.03.04.SE.150-1.EZ4.bin]