Syslog in Cisco Catalyst 4500 Swtich

[rc00000011]

Hello;

I enable logging in cisco catalyst 4500 switch to an external server . But all the logs sending to a syslog server are a console logs ( example : an administrator access via console and change config...) .

Please what should I do to enable the taffics logs in the switch ??

I will be thankful for all your helps

Thank you 

[InayathUlla Sharieff]

Hi,

Would you be please precise about what exactly you mean by Traffics logs?

Is that you mean that when traffic is high the device needs to send the msg to the syslog?

HTH

Regards

inayath

[rc00000011]

Hi,

Thank you for your response,  the problem that i found when i configured my switch to send a syslog with informational level to an external server this only message that the switch is "configured from console"

I need to view the other information about the switch the internal traffics ( the ip address that traverse the switch ....)

Thank you for your help :)

[InayathUlla Sharieff]

Hope the below links helps for what you are looking for:-

https://supportforums.cisco.com/document/24661/how-configure-logging-cisco-ios

https://supportforums.cisco.com/discussion/12001256/cisco-devices-syslog-monitoring-and-user-monitoring-tools

HTH

regards

Inayath.

**Ratings Encourage Participation! **

[rc00000011]

Hi;

Thank you very much for this link and for your cooperation.

I follow the steps in the links but without any result . Please find in the attachment the file of my config by "show conf".

I found a  this message in the syslog for loggiung to external server : %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 192.168.1.20
port 514 started - CLI initiated

This means that the syslog is stopped ?

Also only the syslog messages that i found are like showing in this file :

*Jul 06 03:33:51.219: %SYS-5-CONFIG_I: Configured from console by vty0 (192.168.1.5)
*Jul 06 03:37:49.322: %SYS-5-CONFIG_I: Configured from console by vty0 (192.168.1.5)
*Jul 06 03:43:00.911: %SYS-5-CONFIG_I: Configured from console by vty0 (192.168.1.5)

Please help me to enable the syslog in the switch cisco catalyst SW-4500 

[Richard Burts]

Clearly logging is enabled on this switch and is started (not stopped). You might change how much and what you see in the logs by changing the logging level. But I believe that the fundamental problem is that you want to see things that are not designed to be shown in syslog. You mention wanting to see the IP address that traverse the switch. Syslog is not designed to carry that information and nothing that you change about syslog will change that. If this switch supports NetFlow you might want to configure NetFlow which can show you the IP address of traffic that traverses the switch.

HTH

Rick