05-20-2013 08:27 AM - edited 03-07-2019 01:27 PM
Hi,
We currently send all notifications (LEVEL 5) to a syslog server.
Recently the NLBs (teaming softwares) have been creating a lot of MAC flaps and as we know that the NLBs are the cause we want to exclude the '
%SW_MATM-4-MACFLAP_NOTIF:' from the notifications without lowering the LEVEL to say LEVEL 3.
EIGRP logging is important to us hence why I need to keep the log LEVEL at notifications.
Is there a way to do this on the switch IOS?
!
logging esm config
logging history notifications
logging trap debugging
logging facility local6
logging source-interface Vlan1
logging 192.168.2.105
logging 172.26.1.54
snmp-server enable traps syslog
snmp-server host 172.27.1.43 public eigrp syslog
!
Thanks
Feargail
05-20-2013 01:05 PM
Check if this IOS supports exclude pattern. If it doesn't, apply filter on the syslog server.
05-21-2013 04:52 AM
I don't want to start using exclude patterns and wondered, looking at the logging config i posted, if I could reduce the level to 3, which will remove the mac flap msg, but using snmp-server host 172.27.1.43 public eigrp syslog will overide the syslog level 3 output and continue to send level 5 EIGRP status updates?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide