Logging locally on IOS Routers

[ciscobigcat]

How in this world do I configure logging? I want to be able to login to the routers I manage and do "sh log" and be able to see all the logs locally. I do not have a syslog server for now, so I need to depend on the buffered logs.

I read that if I do "sh term" and "Capabilities: none" is in the restuls, that logging is not enabled on the router. But how do I enable it when I have the following when I do a "show run | i logg":?

logging message-counter syslog
logging buffered 4096
logging synchronous

Every time I login to the router, and I do "sh log", nothing really comes out in the output.

Thank you in advanced

[Peter Paluch]

Hello,

The buffered logging seems to be configured correctly. Perhaps there is simply nothing to log. Can that be the case? Try simply entering the global configuration mode using the configure terminal command and leave it immediately without actually modifying anything. The show logging should then contain the following line at its end (may not be identical but should be similar):

Log Buffer (4096 bytes):
         
*Mar 14 12:47:34.703: %SYS-5-CONFIG_I: Configured from console by console

Can you make this simple test?

Best regards,

Peter

[ciscobigcat]

yeah, it does. But nothing else gets logged. why is that? If I shut down an interface that also gets logged, but what about other stuff? I'd like to log everything

[Haris P]

Try logging buffered debug

Each logging level also will enable the logging level below it ,so logging buffered debug will enable all lofg messges

Debugging messages                (severity=7) ,so u can also use " logging buffered 7 "

Regards

Haris

[glen.grant]

Also increase the logging buffer to a number considerably larger than 4096.  I would say at least 100K .  Most devices will handle thamn size without issues.

[Leo Laohoo]

What is the appliance?  A router of a L2/L3 switch like a 4000/4500 or 6000/6500?

DO you want to see logs when interface(s) goes up/down?  Then add the command "logging event link-status" in every interface you want.

[ciscobigcat]

When I do "show terminal", sometimes I get the "Capabilities: none" and sometimes I get the other one: "Capabilities: logs being received (or some message like that)"

I can't really determine why sometimes I get one and sometimes the other message.

What I just want is logging. I know I have no syslog server, so this is why I am dependent on the buffered logs. Currently, we are fine with that, we can live with that... but the problem is that this thing is so cryptic to get it up and running. We have an 1841 router

. Again, when I do "sh run | i logg", this is what the router shows:

logging message-counter syslog
logging buffered 4096
logging synchronous

I've now changed it to

logging message-counter syslog
logging buffered 512000
logging synchronous

Is the number a Bytes, KB or MB?

Again, just couple of days ago after entering the "sh term" command I saw the "Capabilities: receives (something... )" which according to some research is an indication that logs are being captured. But  now I see the "Capabilities: none" again....

How can I get the 1841 router to properly log activity just like any other vendor router which they do it by plain default?

[Sebastian Fernandez]

Although logging is on by default. But make sure to add below lines.

logging on

logging buff debugging

Let me know if this helps.

regards,

Sebastian