Embedded Syslog Manager and Configuration Management

[Cory Anderson]

Hi All,

I'm looking for a solution to send configuration related logs to a separate syslog server. One syslog server would get all logs, the other would get filtered logs.

All devices have the following config as part of the baseline:

archive
 log config
 logging enable
 logging size 200
 hidekeys
 notify syslog

 Do I need ESM, or is there a more simple solution out there from the device itself?

[marce1000]

                          - This thread presents a solution based on ESM :
               https://community.cisco.com/t5/network-management/send-certain-syslog-messages-to-different-syslog-servers/td-p/2247930

 Not sure if it could work for your case , but personally I would for instance use 2 'full' syslog servers for redundancy ,and look for the configuration-changes with scripting solutions (e.g.)

 M.

[balaji.bandi]

I use simple send logs to syslog as below :

logging host x.x.x.x ( x.x.x.x where your syslog IP address)

still you like to use your exsiting config you can use as below :

logging buffered 256000

archive
 log config
 logging enable
 logging size 200
 hidekeys
 notify syslog contenttype plaintext

logging host x.x.x.x