Prime Infrastructure syslog export

[oizetbegovic]

Hi everyone,

I’m using Prime Infrastructure 2.0 and I’d like to know is there a  way to export collected syslog messages to a third party tool?

Old LMS 3.2 had a possibility to execute a script which would export  syslog messages. It also had a possibility to automate some actions. Can  something similar be done in PI?

[AFROJ AHMAD · Accepted solution]

Hi ,

Currently PI (even 2.0) does not support forwarding of syslogs based on what I know. 

there are few open Enhancement for complete syslog support in PI and I hope in future we 
may have similar feature that we had in LMS

Thanks-
Afroz
[Do rate the useful post]

[oizetbegovic]

Is there a way to do it manually, to create a workaround? I'd like to find a file in which syslog messages are saved, read it and forward them to a third party location using a custom made script. Where are syslog messages saved?

[AFROJ AHMAD]

Hi ,

/opt/CSCOlumos/decap/data  . this is the location where you can see the raw syslogs.

Hope it will help

Thanks-

Afroz

[Do rate the useful post]

[oizetbegovic]

Looking at this folder I see 9 files, each having a lock on it. Is there a specific file in which raw syslog is saved? This is the file list I'm having:

-rw-rw-rw- 1 root gadmin 335552513 Jan 30 08:04 FaultEventQ

-rw-rw-rw- 1 root gadmin         0 Jan 28 16:49 FaultEventQ.lock

-rw-rw-rw- 1 root gadmin 335552513 Jan 30 08:04 SyslogProc_Java_Main_514

-rw-rw-rw- 1 root gadmin         0 Jan 28 16:48 SyslogProc_Java_Main_514.lock

-rwxrwxrwx 1 root gadmin 335552513 Jan 30 08:04 SyslogProc_Main_514

-rwxrwxrwx 1 root gadmin         0 Jan 28 16:45 SyslogProc_Main_514.lock

-rwxrwxrwx 1 root gadmin 335552513 Jan 30 08:04 SyslogRcv_Main_514

-rwxrwxrwx 1 root gadmin         0 Jan 28 16:45 SyslogRcv_Main_514.lock

-rwxrwxrwx 1 root gadmin  16801793 Jan 28 16:45 TraceProc_2000_0

-rwxrwxrwx 1 root root           0 Jan 23 11:22 TraceProc_2000_0.lock

-rw-rw-rw- 1 root gadmin 335552513 Jan 30 08:04 TrapProc_Java_Main_162

-rw-rw-rw- 1 root gadmin         0 Jan 28 16:51 TrapProc_Java_Main_162.lock

-rwxrwxrwx 1 root gadmin 335552513 Jan 30 08:04 TrapRcv_Main_162

-rwxrwxrwx 1 root gadmin         0 Jan 28 16:45 TrapRcv_Main_162.lock

-rw-rw-rw- 1 root gadmin 335552513 Jan 30 08:04 xmp_poller

-rw-rw-rw- 1 root gadmin         0 Jan 28 16:48 xmp_poller.lock

-rw-rw-rw- 1 root gadmin 335552513 Jan 30 07:52 xmp_poller_persistrow

-rw-rw-rw- 1 root gadmin         0 Jan 28 16:48 xmp_poller_persistrow.lock

[AFROJ AHMAD]

check these files

-rwxrwxrwx 1 root gadmin 335552513 Jan 30 08:04 SyslogRcv_Main_514

-rwxrwxrwx 1 root gadmin         0 Jan 28 16:45 SyslogRcv_Main_514.lock

[oizetbegovic]

Thanks, I think that's the one!

I have one more question regarding PI and device configuration archiving. Do you know where are the config files (running, startup) saved to? I can see that configurations for some devices are gathered (fetch status) but I cannot see them in PI console.

[AFROJ AHMAD]

HI ,

Kindly open a new thread..

If this post is answered , please mark it resolved

Thanks-

Afroz

[Do rate the useful post]

[AFROJ AHMAD]

You can check the below thread

https://supportforums.cisco.com/message/3975460#3975460

hope it will help

Thanks-

Afroz

[Do rate the useful post]