SysLog: How exclude link-status

[PeterJacobsen]

Hi

I have a SysLog server running and I would like to log severity 4 and up from my switches (2950,2960,3500XL). But I?m NOT interested in all the link status up/down (%LINK-3-UPDOWN) being send to SysLog. These link statuses should however still be shown in the devises log.

How can I do that?

TIA

Peter

[abhishek_nandavat]

Hi,

On your device, enter the following commands:

- enable

- configure terminal

- logging trap 4

- logging console 7

These commands would fulfill your requirements.

Hope this helps!

Regards,

AbhisheK

Please rate all posts!!!

[PeterJacobsen]

Hi Abhishek

With this configuration I still get %LINK-3-UPDOWN in my Syslog, properly because %LINK-3-UPDOWN is in severity 3.

CU

Peter

[abhishek_nandavat]

If you are still getting those log messages then instead of "logging trap 4" command, use the "logging trap 2", so as to set the trap level at severity level 2, that is the critical level.

Hope this helps!

Regards,

AbhisheK

Please rate all posts!!!

[PeterJacobsen]

Hi Abniskek

Yes, but my problem is that I would like to get severity 4 messages. So yours suggestion will unfortunately not help me.

[miheg]

I know in ciscworks you can filter

RME -> Tools -> Syslog -> Message Filters

But maybe you have another syslog server?

Cheers,

Michel

[PeterJacobsen]

Hi Michel

P.t. i use SysLog Server from Solarwinds but consider to switch to Kiwi, if I can solve my problem ;-)

Thanks

Peter

[PeterJacobsen]

Hi guys

Am I really the only person that sees this as a problem? Are you really interested in seeing all link status in your syslog server?

If not, how do you solve it?

I have tried the ?no logging event link-status? per interface. But then you don?t have the event in the device log.

Thanx

Peter

[David Stanford]

In this case its an all or none situation.

If you want to enable other messages at this level then you are stuck with the link/up down messages, unless you exclude them per interface.If you exclude them on an interface then they won't show in the device logs.

About the best thing to do as mentioned above is to add a filter to CW to block these messages from reaching RME. They would still be in the syslog.log file though.