cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

CISCO SWITCHES FOR SMALL and MEDIUM BUSINESS

Introducing the next generation of Cisco Small and Medium Business Switches. Cisco is refreshing its SMB Switch portfolio. Click here  to learn more.


734
Views
0
Helpful
2
Replies
arphilyaw
Beginner

Capture logs on SRW2024 switch

Have an SRW2024 switch and need to capture log entries.

I'd like to capture the entries on a Windows server, using syslog or

whatever method will work best.  I'm just not familiar with how to set

this up and get it working.

Is there documentation out there that outlines how to do this, or some tips anyone can offer to help out?

Thanks.

2 REPLIES 2
tcsillag83
Beginner

As i know, the current Windows Event log service does not support Unix-style syslogging. You'll need to install a syslog server on Windows, or preferably, use any kind of Linux/Unix server for this task.

Possible Windows syslog servers (never tried any of them):

http://www.windowsnetworking.com/kbase/WindowsTips/WindowsXP/AdminTips/Security/SysLogServersforNT2000XP.html

Once you have a syslog server up and running, it'll listen on UDP port 514 for syslog messages. Configure the switch with the IP of the server, and if you have a firewall, permit UDP 514. After that, it should work like fine.

Cheers,

Tamas

A free syslog server that is often used in the Windows world is Kiwi Syslog Server

You can find it here : http://www.kiwisyslog.com/kiwi-syslog-server-overview/

Configuration of the switch for logging to the server is pretty straightforward.

Regards,

Nico