Syslog messages

[omer_babiker]

Dear All,

The ASA is configured to send the syslog messages to syslog server.

I just want to know how can I display (view) those messages from the server, and will this overload the server after some time? how can I check the load status?

Your help will be appreciated.

Thanks,

[Jon Marshall]

It depends on the syslog server you are using ie. are you using a unix server running syslog or windows running syslog. How you view them depends on the actual syslog application you are using.

As for overloading the server it can do and if there are too many syslog messages some can get dropped if you are using the standard UDP port to send the messages. You need to scale the server and just as importantly the network connections so both the server and network can handle the amount of messages being sent.

As for checking the load status that depends on the server operating system.

Note most of the above is server based ie. nothing to do with the network.

Jon

[omer_babiker]

Hi Jon,

Thanks for your reply.

The operating system running on the server is Linux.

Actually, I was using a monitoring tool (opennms) - which installed in that server - to view the syslog msgs. But recently opennms stopped woking, and I was wondering if I can view the syslogs from the server directly till that tool get fixed.