Remote Syslog Collector 4.3.0

[Enea Dyrmishi]

Hi,

I have installed RSAC 4.3.0, on a remote Win 2008 server, and it working fine. All devices are sending logs to this server, and "Collector Status", on the local LMS 3.2, is receiving logs fine from this RSAC server. Now the problem is:

How can I purge the syslog.log file, wich is getting bigger every day?

Tried through local RME, it not giving any effect on the remote syslog.log file.

Is there any solution for this scenario?

Thanks

[Vinod Arya]

Log files are not purged in ciscoworks.Purging is for directories which consist of job folders to keep the size under control.

For log files to keep the size under control, like syslo.log, there is a utility logrot, which rotates the log file to another directory after compresses the data and keep the original log file trim.

For more details please check :

http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_common_services_software/3.3/user/guide/admin.html#wp1144251

-Thanks

[Vinod Arya]

As per your last conversaiton in :

https://supportforums.cisco.com/message/3663157

The better solution would have been to use the local syslog collector and use logrot to move ur syslog.log to another directory on server as compressed file (which ciscoworks again restricts to specific numbers as per your logrot configuration) and use a customer bat script to move those syslog.log.1.gz compressed file to your 500Gb network drive.

If that 500GB HDD is a part of server as another drive, there is a way to change the location of syslog.log permanently from standard location of NMSROOT/logs to any local drive on server.

-Thanks

Vinod

[Enea Dyrmishi]

Hi Vinod,

With logrot utility, the problem is that the "Maximum Logrot Size = 4096 KB", wich means that if syslog.log goes 4 GB in size, it is deleted, and so will have syslogs saved maybe for 2 days, judging from the rate of increasment of the size of syslog.log file. Is it correct???

This 500 GB HDD is part of another server. Can we map it as a network drive on the local LMS, and so change the location of syslog.log file. Can you tell us how?

Thanks so much