PI2.0 syslog viewing

[SpongeRob]

Afroz - do we have access to server logs assuming one is linux savy, and/or are alerts and events our only recourse ?

Hi,

PI 2.0 still does not have complete support of syslogs.

AFAIK , Upcoming release of PI will have the complete support of syslogs and you should be able to view all the syslogs from PI.

[Vinod Arya · Accepted solution]

What do you mean by service logs? You mean logs generated by Linux OS itself? Or how to check syslogs in fiilesystem in Linux, sent by devices??

Some of our Customers in CSC has found a tweak to get all syslog sev levels by this :

Syslog is working on  PI2.0. by default Prime only accepts the severity 0 and 1. you will need  to modify a file in PI 2.0 to allow prime to accept Syslog messages.

change following file

/opt/CSCOlumos/conf/syslog_sev_filter.xml file (Bold lines have been added here):

<expression op='OR'>

        <!-- Error -->

        <condition field='severity' op='EQUALS' value='0' />

        <condition field='severity' op='EQUALS' value='1' />

        <condition field='severity' op='EQUALS' value='2' />

        <condition field='severity' op='EQUALS' value='3' />

        <condition field='severity' op='EQUALS' value='4' />

        <condition field='severity' op='EQUALS' value='5' />

        <condition field='severity' op='EQUALS' value='6' />

</expression>

**NOTE: THIS IS NOT CISCO TESTED. BUT SEEMS TO BE WORKING FOR MANY.

As per thread :

https://supportforums.cisco.com/discussion/11645481/prime-infrastructure-12-syslog?tstart=0&viewcondensed=

-Thanks

Vinod

**Encourage Contributors. RATE them**

[SpongeRob]

Vinod - thanks for lookin in :-)

We would like to view syslogs.  If there is an avenue via the server that may do for now.  Otherwise are 0 & 1 viewable thru PI ?

[Marvin Rhoads · Accepted solution]

Yes, as Vinod noted the changes to the xml file will add all severity log messages to the viewer. You can view the syslogs (default levels 0 and 1 or, after modifying the file above and restarting the server as noted above, levels 0 through 6) via Operate > Monitoring Dashboards > Incidents or Operate > Alarms & Events > Syslogs

[SpongeRob]

Marvin - thank ya much :-)

[SpongeRob]

Hi Marvin - another question about logging if I may - can the native/raw linux log file be parsed with something like Kiwi ?