syslog help

[smahrous]

Using the syslog analysis of the Resource Manager product , and after configurng my switches to enable logging to that ip address server . I got an error message when running a standerd report "invalid record received from server ,Discarding the record .....Recomended action invalid syslog file location specified "

I checked too the file location and it is right

I need this to work , any help would be appreciated

[amritpatek]

Here are a few best practices for using Syslog server with Catalyst switches. HTH

Best Practices for Catalyst 4500/4000, 5500/5000, and 6500/6000 Series Switches Running CatOS Configuration and Management

http://www.cisco.com/en/US/products/hw/switches/ps663/products_tech_note09186a0080094713.shtml

[patrick]

I have exactly the same problem.

In my setup, the only syslog sources are an IOS

router and a PIX, plus the CiscoWorks server

itself. I'm sure that the syslog messages of

the router and the PIX are correct.

Does anybody have an idea about the nature

of the problem? Solutions?

Patrick

[georg.tresselt]

AFAIK PIX are not supported as they generate way to many syslog messages. You need CW VMS to manage PIXs.

[patrick]

You might be right, but I also get the error

message when I try to see the logs of the router specifically. Did you see any explicit

reference on Cisco.com that PIX is NOT

supported? Note that in RME there are

filters which refer to PIX-* syslog mesages!

Anyway, I will give it a try, stopping

syslog messages to be sent from the PIX.

I will let you know.

Thanks,

Patrick

[milan.kulik]

Hi,

PIX is supported!

I'm receiving syslog messages to my RME from it.

To the error message:

Haven't you tried to change the Syslog file location?

If you go to Select Resource Manager Essentials > Administration > Syslog Analysis > Change Storage Options and press the Help buttom, the on-line help says:

"Valid entries for the message source are found in the following locations:

* Windows Registry HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Crmlog\Parameters Note: If you want to change the default Syslog Message Source location, you must first set the new location in the Windows Registry and only then change the Message Source location in the Change Storage Options dialog box."

Regards,

Milan