05-14-2012 11:52 AM - edited 03-04-2019 04:21 PM
I have an issue where my bgp logs are not being sent to a syslog server. I am getting %SYS-5-CONFIG_I: Configured from console by user on vty0 (x.x.x.x), so there is proof logging is working. Howerver, when I do a clear ip bgp A.B.C.D the following are generated and not sent to the syslog server.
May 14 18:35:32: %BGP-5-ADJCHANGE: neighbor x.x.x.x Down User reset
May 14 18:35:32: %BGP_SESSION-5-ADJCHANGE: neighbor 10.255.215.2 IPv4 Unicast topology base removed from session User reset
May 14 18:35:40: %BGP-5-ADJCHANGE: neighbor x.x.x.x Up
Since these log messages are notifications, and my config is set for notifications, I would think all notifications would be sent to the syslog server. Am I missing something, in this regard, does BGP require something else to send syslogs?
Lines from router config:
service timestamps log datetime
logging buffered 50000 notifications
logging console notifications
logging history notifications
logging trap notifications
logging facility local5
logging source-interface Loopback0
logging x.x.x.x
snmp-server enable traps syslog
bgp log-neighbor-changes
Thanks in advance!
Bret
05-14-2012 12:01 PM
Hi Bret,
Please post the output of "Show logging".
Kind Regards,
Kevin
05-14-2012 12:12 PM
Syslog logging: enabled (0 messages dropped, 2 messages rate-limited, 1 flushes, 0 overruns, xml disabled, filtering disabled)
No Active Message Discriminator.
No Inactive Message Discriminator.
Console logging: level notifications, 155 messages logged, xml disabled,
filtering disabled
Monitor logging: level debugging, 0 messages logged, xml disabled,
filtering disabled
Buffer logging: level notifications, 87 messages logged, xml disabled,
filtering disabled
Exception Logging: size (4096 bytes)
Count and timestamp logging messages: disabled
Persistent logging: disabled
Trap logging: level notifications, 54 message lines logged
Logging to 208.238.173.202 (udp port 514, audit disabled,
link up),
54 message lines logged,
0 message lines rate-limited,
0 message lines dropped-by-MD,
xml disabled, sequence number disabled
filtering disabled
Logging Source-Interface: VRF Name:
Loopback0
Log Buffer (50000 bytes):
May 14 18:43:16: %SYS-5-CONFIG_I: Configured from console by bret on vty0 (x.x.x.x)
May 14 18:55:11: %SYS-5-CONFIG_I: Configured from console by bret on vty0 (x.x.x.x)
May 14 18:55:20: %BGP-5-ADJCHANGE: neighbor x.x.x.x Down User reset
May 14 18:55:20: %BGP_SESSION-5-ADJCHANGE: neighbor x.x.x.x IPv4 Unicast topology base removed from session User reset
May 14 18:55:21: %BGP-5-ADJCHANGE: neighbor x.x.x.x Up
May 14 18:43:16: %SYS-5-CONFIG_I: Configured from console by bret on vty0 (x.x.x.x)
May 14 18:55:11: %SYS-5-CONFIG_I: Configured from console by bret on vty0 (x.x.x.x)
May 14 18:55:20: %BGP-5-ADJCHANGE: neighbor x.x.x.x Down User reset
May 14 18:55:20: %BGP_SESSION-5-ADJCHANGE: neighbor x.x.x.x IPv4 Unicast topology base removed from session User reset
May 14 18:55:21: %BGP-5-ADJCHANGE: neighbor x.x.x.x Up
05-14-2012 12:54 PM
Hi,
are there any logs sent to the server? have you got reachability to the server from this source ?
Regards.
Alain.
05-14-2012 02:24 PM
Yes I am getting logs to the syslog server.
I am able to get this log to the sysog server. %SYS-5-CONFIG_I: Configured from console by user on vty0 (x.x.x.x)
05-14-2012 01:55 PM
you would need "bgp log-neighbor-changes" command under router bgp configurations.
---
Posted by WebUser Neeraj Jagga from Cisco Support Community App
05-14-2012 02:24 PM
log-neighbor-changes is in bgp.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide