Syslogs Messages on Voice Gateways

[silvervoip]

Hello Team,

As of today, we send logs to Splunk with ''logging host X.X.X.X'' command and we have been told that Splunk team is requesting the traffic with VIPs and VIPs are in FQDN format. And this VIP includes several IPs of Splunk for redundancy purposes. Is there any way I can send logs to Splunk using FQDN format?

Example: splunkserver-emea@domain.com

[balaji.bandi]

Try :

logging origin-id string XXXXXXXX

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/esm/command/esm-cr-book/esm-cr-a1.html#wp3523355547

[silvervoip]

unfortunately did not help

[balaji.bandi]

unfortunately did not help

This very limited information we have, what did not work ? what was the output ?

why not ask splunk team to remove your oginal IP to what ever they want ?

[Roger Kallberg]

You can use FQDN with logging host, see below.

[silvervoip]

fqdn option is not available on my CUBE. what IOS version you run on the VG?

[Roger Kallberg]

It is running 17.3.5. I also checked on 17.3.4a and it is available there as well.  However we do have some SBCs that run 16.9.6 and on these it is not available. I did try to find when this got added to the command, but as usual the documentation side is left behind, so I could not find it in the command reference or in release notes.