cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
305
Views
0
Helpful
1
Replies

syslog reports empty

jayarun
Level 1
Level 1

Recently upgraded LMS2.5 to 2.6. Syslogs have stopped to appear in DeviceCenter/SyslogMessagesReport for all devices. Whereas it is getting logged in /var/log/syslog_info. All filter in RME/Syslog/MessageFilter disabled and changed from Drop to Keep.Restarted ciscoworks daemons.

1 Reply 1

David Stanford
Cisco Employee
Cisco Employee

The best way to troubleshoot this is to run a test while debugging syslog.

Enable debugs for syslog under RME - Admin - Preferences - Loglevel Settings

Set SyslogAnalyzer to debug

Stop SyslogCollector and SyslogAnalyzer processes (pdterm).

In the collector.properties file, set "DEBUG_LEVEL=DEBUG"

Clear the contents of the following log files:

$NMSROOT\log\SyslogCollector.log

$NMSROOT\log\SyslogAnalyzer.log

$NMSROOT\log\AnalyzerDebug.log

$NMSROOT\log\SyslogAnalyzerUI.log

Start SyslogCollector and SyslogAnalyzer processes (pdexec)

Now go a device that is managed in RME and do a conf t and exit. This should generate a config change syslog.

Make sure it hits the syslog_info and then wait a few minutes and generate a standard report for this device. Does it appear?

If not look in the 4 log files above for the device IP or hostname....what does it show?

Do the drop or invalid message counters increase?

Review Cisco Networking products for a $25 gift card