10-21-2021 08:24 AM
Hi All,
I'm looking for a solution to send configuration related logs to a separate syslog server. One syslog server would get all logs, the other would get filtered logs.
All devices have the following config as part of the baseline:
archive log config logging enable logging size 200 hidekeys notify syslog
Do I need ESM, or is there a more simple solution out there from the device itself?
10-21-2021 09:15 AM
- This thread presents a solution based on ESM :
https://community.cisco.com/t5/network-management/send-certain-syslog-messages-to-different-syslog-servers/td-p/2247930
Not sure if it could work for your case , but personally I would for instance use 2 'full' syslog servers for redundancy ,and look for the configuration-changes with scripting solutions (e.g.)
M.
10-21-2021 10:41 AM
I use simple send logs to syslog as below :
logging host x.x.x.x ( x.x.x.x where your syslog IP address)
still you like to use your exsiting config you can use as below :
logging buffered 256000
archive log config logging enable logging size 200 hidekeys notify syslogcontenttype plaintext
logging host x.x.x.x
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide