cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
276
Views
0
Helpful
1
Replies

Cisco switch log forwarding Wazuh

fatimazulfigarii
Beginner
Beginner

We receive up/down logs of ports from switches. But we cannot get the device names and IPs of the switches in those logs at Wazuh. Wazuh experts wrote that "i think that this could help you:
https://community.cisco.com/t5/switching/hostname-in-syslog/td-p/3605024 As i see at cisco community , you need to add the origin-id string to your log naming them as the host name." but I cant figure out. Who has any idea for fixing this problem?

cisco ss.png

1 Reply 1

Richard Burts
Hall of Fame Guru Hall of Fame Guru
Hall of Fame Guru

I do not have experience with this particular feature, but have found several references that suggest something like:

#conf t

#logging origin-id string <device_hostname/>

HTH

Rick
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers