10-21-2021 08:24 AM
Hi All,
I'm looking for a solution to send configuration related logs to a separate syslog server. One syslog server would get all logs, the other would get filtered logs.
All devices have the following config as part of the baseline:
archive log config logging enable logging size 200 hidekeys notify syslog
Do I need ESM, or is there a more simple solution out there from the device itself?
10-21-2021 09:15 AM
- This thread presents a solution based on ESM :
https://community.cisco.com/t5/network-management/send-certain-syslog-messages-to-different-syslog-servers/td-p/2247930
Not sure if it could work for your case , but personally I would for instance use 2 'full' syslog servers for redundancy ,and look for the configuration-changes with scripting solutions (e.g.)
M.
10-21-2021 10:41 AM
I use simple send logs to syslog as below :
logging host x.x.x.x ( x.x.x.x where your syslog IP address)
still you like to use your exsiting config you can use as below :
logging buffered 256000
archive log config logging enable logging size 200 hidekeys notify syslogcontenttype plaintext
logging host x.x.x.x
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: