recivining and analyzing syslog messages from facility local3 on LMS4.2 soft appliance.

[kerim mohammed]

                   HI,

all of our enterprise switches are sert to send syslog messages from facility local3. this is partly because our linux syslog server loggs its boot syslog  messages from  facility local7 an we could't use the default  facility of local7 on our cisco switches. LMS4.2s syslog daemon is set to recieve syslog messages from facility local7. how can i change it so that it can listen for facility local3 and also make sure the syloganalyzer and automated action  work fine.

thanks,

Kerim

[kerim mohammed]

Hi All,

I thought it is a good idea to share the workaround my colleague came up with for this prolem. there is a file called syslog-entries.txt under /opt/CSCOpx/conf. he added all the entries we needed like :

local3.*     /var/log/syslog_info

local5.*   /var/log/syslog_info

the change was automatically reflected on syslog.conf

now we receve alerts from facilities 3 and 5 besides 7.  hope this helps anyone who run into the same issue.