cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1040
Views
0
Helpful
1
Replies

LMS 3.2 Syslog

dtom
Level 1
Level 1

I am trying to run syslog reports in LMS.  When I run the 24 hour syslog report nothing is found.  No data on the report.  I am trying to troubleshoot this.  How can I  tell if my traps are getting to the Ciscoworks server (10.223.241.32)?  Is there something I can look at on the Ciscoworks server?

Here is what debug shows on the router:

ms-DUNCAN#sh log
Syslog logging: enabled (0 messages dropped, 0 messages rate-limited, 109 flushe
s, 0 overruns, xml disabled, filtering disabled)

No Active Message Discriminator.

No Inactive Message Discriminator.


    Console logging: level debugging, 31006 messages logged, xml disabled,
                     filtering disabled
    Monitor logging: level debugging, 0 messages logged, xml disabled,
                     filtering disabled
    Buffer logging:  level debugging, 29155 messages logged, xml disabled,
                     filtering disabled
    Exception Logging: size (4096 bytes)
    Count and timestamp logging messages: disabled
    File logging: disabled
    Persistent logging: disabled

No active filter modules.

    Trap logging: level informational, 31 message lines logged

Log Buffer (4096 bytes):

06:53:13: SNMP: Queuing packet to 10.223.248.83
06:53:13: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.26 = 1
ccmHistoryEventEntry.4.26 = 3
ccmHistoryEventEntry.5.26 = 2
06:53:13: SNMP: Queuing packet to 10.223.231.86
06:53:13: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.26 = 1
ccmHistoryEventEntry.4.26 = 3
ccmHistoryEventEntry.5.26 = 2
06:53:13: SNMP: Queuing packet to 10.223.241.32
06:53:13: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.26 = 1
ccmHistoryEventEntry.4.26 = 3
ccmHistoryEventEntry.5.26 = 2
06:53:13: SNMP: Packet sent via UDP to 10.223.248.83
06:53:13: SNMP: Packet sent via UDP to 10.223.231.86
06:53:13: SNMP: Packet sent via UDP to 10.223.241.32
06:53:16: SNMP: Queuing packet to 10.223.248.83
06:53:16: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.27 = 1
ccmHistoryEventEntry.4.27 = 2
ccmHistoryEventEntry.5.27 = 3
06:53:16: SNMP: Queuing packet to 10.223.231.86
06:53:16: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.27 = 1
ccmHistoryEventEntry.4.27 = 2
ccmHistoryEventEntry.5.27 = 3
06:53:16: SNMP: Queuing packet to 10.223.241.32
06:53:16: SNMP: V1 Trap, ent ciscoConfigManMIB.2, addr 10.0.9.77, gentrap 6, spe
ctrap 1
ccmHistoryEventEntry.3.27 = 1
ccmHistoryEventEntry.4.27 = 2
ccmHistoryEventEntry.5.27 = 3
06:53:16: SNMP: Packet sent via UDP to 10.223.248.83
06:53:16: SNMP: Packet sent via UDP to 10.223.231.86
06:53:16: SNMP: Packet sent via UDP to 10.223.241.32
06:53:23: %LINK-5-CHANGED: Interface FastEthernet1/0/1, changed state to adminis
tratively down
06:53:28: %LINK-3-UPDOWN: Interface FastEthernet1/0/1, changed state to down
06:53:28: SNMP: Queuing packet to 10.223.248.83
06:53:28: SNMP: V1 Trap, ent ciscoSyslogMIB.2, addr 10.0.9.77, gentrap 6, spectr
ap 1
clogHistoryEntry.2.5 = LINK
clogHistoryEntry.3.5 = 4
clogHistoryEntry.4.5 = UPDOWN
clogHistoryEntry.5.5 = Interface FastEthernet1/0/1, changed state to down
clogHistoryEntry.6.5 = 2480801
06:53:28: SNMP: Queuing packet to 10.223.231.86
06:53:28: SNMP: V1 Trap, ent ciscoSyslogMIB.2, addr 10.0.9.77, gentrap 6, spectr
ap 1
clogHistoryEntry.2.5 = LINK
clogHistoryEntry.3.5 = 4
clogHistoryEntry.4.5 = UPDOWN
clogHistoryEntry.5.5 = Interface FastEthernet1/0/1, changed state to down
clogHistoryEntry.6.5 = 2480801
06:53:28: SNMP: Queuing packet to 10.223.241.32
06:53:28: SNMP: V1 Trap, ent ciscoSyslogMIB.2, addr 10.0.9.77, gentrap 6, spectr
ap 1
clogHistoryEntry.2.5 = LINK
clogHistoryEntry.3.5 = 4
clogHistoryEntry.4.5 = UPDOWN
clogHistoryEntry.5.5 = Interface FastEthernet1/0/1, changed state to down
clogHistoryEntry.6.5 = 2480801
06:53:28: SNMP: Packet sent via UDP to 10.223.248.83
06:53:28: SNMP: Packet sent via UDP to 10.223.231.86
06:53:28: SNMP: Packet sent via UDP to 10.223.241.32
06:53:41: %SYS-5-CONFIG_I: Configured from console by micros on vty0 (10.194.32.
88)

1 Reply 1

Jia Liu
Cisco Employee
Cisco Employee

You can run a packet capture on the Ciscoworks server to see if it's getting any traffic from the router.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card