Hi Techies ,
I have some Cisco routers sending configuration change logs integrated to Arcsight SIEM (like syslog server). The events generated per second are very low for these devices (3-4 logs in 10-15 days). We raise alerts if we do not receive logs from these devices. So if there is an issue in the connectivity between syslog server and the router, we will get to know only after waiting for 10-15 days (that also isn't a fixed duration).
I want your help to configure cisco router to send some test packets everyday (1-2 events per day) to syslog server through syslog port 514 so that we can confirm there isn't any connectivity issue. Whether a script has to be written or some kind of logging is there which I can forward? Please help.
Regards,
Mitesh Agrawal