Default syslog storage directory in ASR 1001X & ASR 9000

[jigojar]

Hi,

 By default where the syslog file will be stored in the router?

[Mark Malone]

Hi
its not by default , logging is stored in nvram but is wiped unpon reload just a buffer , thats why you point syslog to an external server to be stored incase of reloads or outages

[jigojar]

Hi Mark,can i able to read the syslog in nvram:(ASR 1001-X)

[jigojar]

Hi Mark,

Can i read the syslog in nvram:(ASR-1001X)

[Mark Malone · Accepted solution]

You can read it in show log , that's where its visible or else set a syslog external server

logging buffered 100000
logging source-interface Loopback3
logging host 172.x.x.x vrf Mgmt-vrf

theres no actual .syslog file to read in nvram

Directory of nvram:/

32769 -rw- 62116 <no date> startup-config
32770 ---- 5916 <no date> private-config
32771 -rw- 62116 <no date> underlying-config
1 ---- 447 <no date> persistent-data
2 -rw- 17 <no date> ecfm_ieee_mib
3 -rw- 522 <no date> ifIndex-table

[jigojar]

Hi,

Thanks for update.

Can i able to edit or get the actual syslog file.

[Mark Malone]

you could save it to flash locally , view it from there but to edit it I think you would need to export it to pc/server as a file then edit it

SYSLOG Writing to Flash
https://www.cisco.com/c/en/us/td/docs/ios/12_0s/feature/guide/cs_sysls.html