cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1472
Views
0
Helpful
2
Replies

KIWIW Syslog server

Is there anyway to set up the KIWI syslog server to only return data about certain ports? I want my syslog server only to tell me when a trunk link between switches go down. Right now it tells me when every port of every switch goues up/down.I have KIWI and are there any settings I can use to only log certain ports on the switch?

1 Accepted Solution

Accepted Solutions

yjdabear
VIP Alumni
VIP Alumni

Well, on paper, if kiwi syslog server lets you insert filtering between its receiving and notification subsystems, you could define your filtering criteria in a script: http://www.kiwisyslog.com/kb/how-to:-setup-script_based-complex-filters/

Or, you could disable "logging event link-status" globally on the switches, and selectively enable "logging event link-status" per interface. Similarly, there're also "logging event trunk-status", "logging event spanning-tree status", "logging event bundle-status", etc: http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/12.2/25sg/command/reference/int_sess.html#wp2089249

View solution in original post

2 Replies 2

yjdabear
VIP Alumni
VIP Alumni

Well, on paper, if kiwi syslog server lets you insert filtering between its receiving and notification subsystems, you could define your filtering criteria in a script: http://www.kiwisyslog.com/kb/how-to:-setup-script_based-complex-filters/

Or, you could disable "logging event link-status" globally on the switches, and selectively enable "logging event link-status" per interface. Similarly, there're also "logging event trunk-status", "logging event spanning-tree status", "logging event bundle-status", etc: http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/12.2/25sg/command/reference/int_sess.html#wp2089249

This information and worked really well thank you.

Sent from Cisco Technical Support iPhone App