cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
10245
Views
0
Helpful
3
Replies

Catalyst 9300 logging

kapydan88
Level 4
Level 4

Hello for everybody.

 

I have the task - to configure logging on the 9300 switch and send logs to the log server. The logs should contain the following information: who performed actions on this switch and with which account.

 

If i understood correctly, i need to set up logging host and select the logging level - in this case 5 or 6.

 

Test-SW-121(config)#logg
Test-SW-121(config)#logging ?
Hostname or A.B.C.D IP address of the logging host
buffered Set buffered logging parameters
buginf Enable buginf logging for debugging
cns-events Set CNS Event logging level
console Set console logging parameters
count Count every log message and timestamp last occurance
delimiter Append delimiter to syslog messages
discriminator Create or modify a message discriminator
esm Set ESM filter restrictions
exception Limit size of exception flush output
facility Facility parameter for syslog messages
file Set logging file parameters
filter Specify logging filter
history Configure syslog history table
host Set syslog server IP address and parameters
message-counter Configure log message to include certain counter value
monitor Set terminal line (monitor) logging parameters
on Enable logging to all enabled destinations
origin-id Add origin ID to syslog messages
persistent Set persistent logging parameters
queue-limit Set logger message queue size
rate-limit Set messages per second limit
reload Set reload logging level
server-arp Enable sending ARP requests for syslog servers when first configured
snmp-authfail Enable logging on the message of %SNMP-3-AUTHFAIL
snmp-trap Set syslog level for sending snmp trap
source-interface Specify interface for source address in logging transactions
trap Set syslog server logging level
userinfo Enable logging of user info on privileged mode enabling

Test-SW-121(config)#logging 10.19.60.49 ?
% Unrecognized command
Test-SW-121(config)#logging 10.19.60.49
^
% Invalid input detected at '^' marker.

Test-SW-121(config)#logging host 10.19.60.49
Test-SW-121(config)#logg
Test-SW-121(config)#logging trap ?
<0-7> Logging severity level
alerts Immediate action needed (severity=1)
critical Critical conditions (severity=2)
debugging Debugging messages (severity=7)
emergencies System is unusable (severity=0)
errors Error conditions (severity=3)
informational Informational messages (severity=6)
notifications Normal but significant conditions (severity=5)
warnings Warning conditions (severity=4)
<cr> <cr>

Test-SW-121(config)#logging trap

3 Replies 3

marce1000
VIP
VIP

 

 - Besides that you also need to activate configuration change logging , the below article contains an example :

          https://www.techtutsonline.com/cisco-ios-configuration-change-logging/

 M.



-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
    When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Thanks for link.

 

But this article describes logging and storing in the device's memory.

 

 - If a syslog server  is being configured that info will also be send to the syslog-server.

 M.



-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
    When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '
Review Cisco Networking for a $25 gift card