cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1983
Views
1
Helpful
1
Replies

Debug voice call data to syslog server, comes out of order

pdub206
Level 1
Level 1

We are trying to send debug output from a Cisco ISR 4K to a syslog server.  I have configured the logging server, logging trap debugging, and enabled the specific debugs we want to see sent to the syslog server.  When the messages arrive, they are out of order and unreadable for the most part.  We would like to be able to see this data in the same format that it is shown when viewing debug output from the CLI.

This is likely due to UDP/514 being the method in which we deliver syslog data to the syslog server; it is inherently unreliable and does not come in a single session.  With that in mind, I have also tried using a logging server using TCP/601.  This did not appear to improve the out of order issue.


Is there any other way we can send debug output to a syslog server, or improvements/configuration suggestions? Here is a sample:

Router#show run | inc log

service timestamps log datetime msec localtime show-timezone
logging buffered 64400 informational
no logging monitor
logging trap debugging
logging host 192.168.1.1

Router#show debug
IOSXE Conditional Debug Configs:

Conditional Debug Global State: Stop


IOSXE Packet Tracing Configs:

Packet Infra debugs:

Ip Address Port
------------------------------------------------------|----------

CCAPI:
debug voip ccapi inout is ON (filter is OFF)
CCSIP SPI: SIP Call Statistics tracing is enabled (filter is OFF)
CCSIP SPI: SIP Call Message tracing is enabled (filter is OFF)

Throwing packets since 2012
1 Reply 1

collab_ccie
Cisco Employee
Cisco Employee

The correct configuration for that platform 44XX is this:

 

Collecting debugs in Syslog server

----------------------------------

Router#configuration terminal

Router(config)#no logging console

Router(config)#no logging monitor

Router(config)#ntp update-calendar

Router(config)#ntp server <IP Address of NTP Server>

Router(config)#service timestamps log datetime msec

Router(config)#service sequence

Router(config)#logging <Hostname or IP Address of SYSLOG server>

Router(config)#logging trap debug

Router(config)#exit

Router#

I hope this can help you out.

 

Review Cisco Networking for a $25 gift card