Filter syslog messages

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-09-2016 02:24 AM
Hi,
I want to filter multiple syslog messages. With the discriminator command i seem to filter only one message not more. Anybody know how to do this the best way?
With kind regards,
Martijn
- Labels:
-
Network Management

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-09-2016 04:56 AM
I found that ESM (Embedded Syslog Manager) can solve this. You can upload a tcl script who changes the messages you want to block to blank. Anybody got a example script to go on? Found a couple on the internet but when i filter i don't get any messages anymore.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-09-2016 05:10 AM
This is my tcl script. When i upload it to the switch turn it on, i don't get any logging anymore.....why?
#logging filter flash:syslog-filter.tcl
#logging host 172.25.75.52 filtered
if { $::mnemonic == UPDOWN } {
return ""
} else {
return "$::orig_msg"
}
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-10-2016 11:07 AM
Discriminator can filter more than one message. See this link: https://supportforums.cisco.com/discussion/12349441/filtering-logging-messages-syslog-server-catalyst-switch-using-logging
What is your requirement for filtering messages?
