Cisco Nexus 5K Syslogs

[Devlin Thornicroft]

Hello all

I have been tasked with finding out what, if any, Syslogs are generated under the following circumstances on the Nexus 5K series. Have yet to find anything solid so thought I would ask here.

Does the Nexus 5K generate a Syslog if:

1. The device is reloaded

2. A new fabric extender is connected

3. A new version of NX-OS is uploaded/installed prior to reboot

4. Any attack on the system, e.g. Buffer Overflow

5. Creation of a local user

Appreciate any assistance on this one.

Thank you

[Rajeshkumar Gatti]

Answers below

1. The device is reloaded

yes. We will log the event on the switch.

2. A new fabric extender is connected

yes.

3. A new version of NX-OS is uploaded/installed prior to reboot

No.

4. Any attack on the system, e.g. Buffer Overflow

Depends. If the attack causes disruption in specific features implemented on the switch then the corresponding feature will throw out the syslog. Don't think it can explicitly detect specfic DDOS attacks.

5. Creation of a local user

Most likely no.

[Devlin Thornicroft]

Hello Rajeshkumar

Thanks for your reply, this was very useful.