cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5505
Views
0
Helpful
9
Replies

Count and timestamp logging messages: disabled

Hi ,

what does this setting "Count and timestamp logging messages: disabled" mean ? in "show logging" output.

I do not see the number of message lines logged ( syslog ) increasing under the "show logging" output,

Same is the case with the numbers in "Trap logging: level notifications, xxxx message line logged"

This is happening on IOS , any idea why ?

Thanks,

1 Accepted Solution

Accepted Solutions

Hello Vikram,

That is just to  count every log message.

Please do rate helpful posts.

Kind regards,

Julio


Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

View solution in original post

9 Replies 9

Julio Carvajal
VIP Alumni
VIP Alumni

Hello Vikram,

If you do not have the time-stamp configured it would be more difficult to troubleshoot, lets explain this with an example:

-One of your interfaces went down at 13:30 your local time, you have logging enabled without the time-stamp so you go to your syslog server and you look for that problem, in that case you will need to go to all the syslog messages database ( witch might be huge and the message you are looking for could be imposible to find) so if you have timestamp enable you will go directly to the 13:30 messages and find it so much easier.

Here is another explanation I found for you:

logging timestamp

This command causes the firewall to add a time stamp to each Syslog message before it is sent. The firewall should have its clock set and time synchronized to a known and accurate source.

Please rate helpful posts,

Kind regards,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Thanks for explaining Julio. How about "Count" in "Count and timestamp logging messages: disabled"

Hello Vikram,

That is just to  count every log message.

Please do rate helpful posts.

Kind regards,

Julio


Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

does this mean the numbers will not be incrementing if the logging count is not enabled. I do see this increasing on another cisco device with the timestamp and count setting for logging disabled.

"Trap logging: level notifications, xxxx message line logged"

Hello Vikram,

That is correct, the normal behavior would be like that.

Are you sure on the other device is not configured and the syslog server does not have timestamp and the count setting configured?

Regards,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

I do see the timestamps on the syslog server With "Count and timestamp logging messages: disabled" on the device.

Wondering what this setting under logging actually does

Thanks,

Vikram

Hello Vikram,

The question here is do you see it on the FWSM ?

Because some syslog servers can add their own count and timestamp.

Please do rate helpful posts

Regards,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

sorry, i was referring to the routers/swiches all the time. Yes I do see the timestamp in the logs that are buffered.

You can use this commands to enable Count and timestamp:

logging count

commands to check this configuration:

*sh logging count
*show  logg

Regards,

Felipe.

Review Cisco Networking for a $25 gift card