cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2742
Views
5
Helpful
1
Replies

logging suppress duplicates for IOS-XE

jean1
Level 1
Level 1

Hello,

 

I am looking for a command to disable duplicate syslog message in short time. I see several commands for IOS-XR but nothing for IOS-XE ? But i want to keep one copy of log because i am using EEM.

 

Example with Cisco IP Phone disconnected, there are two useless same log in a very short time.


Oct 10 14:20:22.164 : %ILPOWER-5-IEEE_DISCONNECT: Interface Gi1/0/22: PD removed
Oct 10 14:20:22.165: %ILPOWER-5-IEEE_DISCONNECT: Interface Gi1/0/22: PD removed

 

1 Reply 1

Hello,

 

 I think this can be usefull for you:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/esm/configuration/xe-3s/esm-xe-3s-book/reliable-del-filter.html

 

Message Discriminator
A message discriminator is a syslog processor. A message discriminator is associated with a syslog session and binds that session to a transport connection.


Optional rate limiting--Specifying a transmission rate of messages per time interval that is not to be exceeded. If the rate limit is exceeded, messages are either delayed or dropped, at the discretion of the device. The application of a rate limiter means that reliable delivery of syslog messages over that syslog session is no longer guaranteed. The purpose of a rate limiter is to avoid potential "flooding" at recipient syslog servers for applications that do not require guaranteed syslog delivery.

Correlating--Inspecting candidate event messages and possibly aggregating information across events, creating a new event that contains the aggregated information. Correlating functions include:

Elimination of duplicate messages by maintaining a message count and waiting a specific time period between sending the first message of a certain type and sending the next message of that type

Elimination of oscillating messages

Simple message correlation; for example, if one message is a symptom of a cause reported by another message, one consolidated message is reported

 

-If I helped you somehow, please, rate it as useful.-