cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
302
Views
0
Helpful
2
Replies

Setup Logging Facility local 6 but still getting messages on Local 0

I segregate my  routers into different syslog groups,  to that end I have setup "logging facility local6" on my Cisco 2851 Internet router. But I am still getting the following messages in my Syslog

2015-04-11 00:32:03 Local0.Alert  localhost FA: syn violations: violator 222.174.5.45 on exporter DRSINTR1

I cant see anywhere in the configuration about local0. How can I change these messages to Local6

2 Replies 2

Peter Paluch
Cisco Employee
Cisco Employee

Hi,

Are you sure that this message indeed comes from the 2851 router? It's format does not resemble the typical look of Cisco logging messages. Is it possible that your Syslog is receiving messages from another logging source?

Best regards,
Peter

Peter,

Ok perhaps you are right might be coming from Scrutinizer, I'll investigate further

Review Cisco Networking for a $25 gift card