Kiwi Syslog Daemon-how to get log message from router to Kiwi Syslog server

[shahul-hameed]

Hi ALL,

This is in the lab for testing

I have installed the Kiwi Syslog Daemon and now i want to get the log messages from cisco 7500 series router.I have configured the following in the router

Router(config)#logging on

Router(config)#logging<serveripaddress>-kiwisyslogip

Router(config)#logging facility local7

Router(config)#service sequence-numbers

Router(config)#service timestamps log datetime

what else i have to configure on the router - what ip address i have to configure on the

Router(config)#logging source-interface ?

From the cisco 7500 series router ethernet 1/2 it is connected to catalyst 3500 and from there it is connected to the pc - kiwi syslog server.

Now what else i have to configure in the router and what i have to do in the kiwi syslog server to start receivng the log messages.This kiwi syslog server is new to me.So plz kindly kelp me in getting this work done successfully.(plz state the full procedures for the kiwi syslog to work and receive log successfully)

Your earlier response will be highly appreciated.

Regards,

Shahul

[konigl]

On the router, configure whatever IP address you want as the source-interface. If you have a Loopback interface defined, use the IP address of that since it's always up, and should uniquely identify the router.

On your Windows computer, if you are also running a software firewall, make sure you allow the protocols and port numbers through that your Kiwi Syslog is listening for. For example, UDP Syslog messages go to UDP port 514, TCP Syslog messages go to TCP port 1468, and SNMP Traps go to UDP port 162. (The port numbers can be changed, if necessary.) If you don't let the messages through the firewall, the Kiwi Syslog program will never receive them.

To test your configuration, you can also load Kiwi's free Syslog Message Generator (http://www.kiwisyslog.com/info_sysloggen.htm) on another machine.

[Tsasbrink]

it might allso be wise to configure :

logging buffered 4096 debugging

so you can check if te router generates any messages.

The debuging statement indicates from witch severity level it should send a syslog message. Debugging just means all messages.

[2tramsay]

You need to configure the IP address of the Syslog server as the logging host on the 7500. I run this exact setup in my environment (Kiwi Syslog server). For example, if the Syslog server is running on a machine with the IP address of 10.1.2.3, you would add the following statement:

Router(config)#logging 10.1.2.3

Hope this helps

Tom