cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2402
Views
0
Helpful
8
Replies

Syslog

myasirt
Level 1
Level 1

Hi team,

can anyone help me to understand what this log means?

Apr 19 17:14:06 CST: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 192.168.1.100 port 514 started - reconnection

 

8 Replies 8

balaji.bandi
Hall of Fame
Hall of Fame

Looks like you have small interruption between device and syslog server.

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

I think this relate to AAA account of login to SW/R
are you use AAA account ?

myasirt
Level 1
Level 1

sorry for the late reply!!

my switch is up for almost 38 weeks but so far it generated only 184 logs and that too not recieving at my syslog servers.
see the output below

Router1>sh logging
Syslog logging: enabled (0 messages dropped, 1 messages rate-limited, 0 flushes, 0 overruns, xml disabled, filtering disabled)

No Active Message Discriminator.

 

No Inactive Message Discriminator.


Console logging: level informational, 180 messages logged, xml disabled,
filtering disabled
Monitor logging: level informational, 20 messages logged, xml disabled,
filtering disabled
Buffer logging: level informational, 180 messages logged, xml disabled,
filtering disabled
Exception Logging: size (4096 bytes)
Count and timestamp logging messages: disabled
Persistent logging: disabled

No active filter modules.

ESM: 0 messages dropped

Trap logging: level informational, 184 message lines logged
Logging to 1.1.1.1 (udp port 514, audit disabled,
link up),
184 message lines logged,
0 message lines rate-limited,
0 message lines dropped-by-MD,
xml disabled, sequence number disabled
filtering disabled
Logging to 1.1.1.2 (udp port 514, audit disabled,
link up),
184 message lines logged,
0 message lines rate-limited,
0 message lines dropped-by-MD,
xml disabled, sequence number disabled
filtering disabled
Logging to 10.10.10.1 (udp port 514, audit disabled,
link up),
184 message lines logged,
0 message lines rate-limited,
0 message lines dropped-by-MD,
xml disabled, sequence number disabled
filtering disabled
Logging to 10.10.10.2 (udp port 514, audit disabled,
link up),
184 message lines logged,
0 message lines rate-limited,
0 message lines dropped-by-MD,
xml disabled, sequence number disabled
filtering disabled
Logging to 192.168.1.100 (udp port 514, audit disabled,
link up),
184 message lines logged,
0 message lines rate-limited,
0 message lines dropped-by-MD,
xml disabled, sequence number disabled
filtering disabled
Logging Source-Interface: VRF Name:
Vlan2

 

 

but you dont answer me, are you config aaa account ?

It not matter how long the device up and running, if the device working as expected and there no logs generated what you seeing correct. what device is this - post show run and also show logging config

Console logging: level informational  - as per your log only information logs are passed to buffer and syslog server.

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

myasirt
Level 1
Level 1

 yes! we use AAA 

this is normal, when aaa account start/stop  log message.
it normal.

AAA is different the start and stop Logging information go to radius/tacacs.

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help