cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Logging Origin-ID Problem

I am attempting to get my syslog messages to contain my hostname.  Below is my current config as well as a copy of the logging in the router.  Can someone explain what I am doing wrong?  I have also included my version of IOS in case that is a factor.

 

#sh run | i logg

logging buffered 51200 debugging

logging trap debugging

logging origin-id string MAS-RTR-01

logging facility local5

logging source-interface FastEthernet0/0.1

logging 192.168.x.x

 

 

Feb  7 17:50:17.598: %SYS-5-CONFIG_I: Configured from console by brandon.strode.adm on vty0

 

Cisco IOS Software, 2800 Software (C2800NM-ADVIPSERVICESK9-M), Version 12.4(25d), RELEASE SOFTWARE (fc1

13 REPLIES 13

burleyman
Collaborator
Collaborator

Are you using event manager to gather the syslog info?

Yes I am forwarding all logging to logging event manager in solarwinds.  That's one of the reasons why I want have it resolve either the hostname or the string that I put in so that when the email alerts are sent they don't contain just the IP but the name of the router as well.  I have tried logging origin-id hostname previously and that also didn't work.  See below.

 

#sh run | i logging
logging buffered 51200 debugging
logging trap debugging
logging origin-id hostname
logging facility local5
logging source-interface FastEthernet0/0.1
logging 192.168.*.*

 

Feb  9 13:56:46.723: %SYS-5-CONFIG_I: Configured from console by brandon.strode.adm on vty0

 

This was pulled just now from logging after changing the config to hostname and performing copy run start.

burleyman
Collaborator
Collaborator

Try this...

logging origin-id hostname

 

 

Mike

have you tried

 

logging origin-id ip

 

HQ(config)#logging origin
HQ(config)#logging origin-id ?
     hostname     Use origin hostname as ID
     ip                 Use origin IP address as ID
     ipv6             Use origin IPv6 address as ID
    string            Define a unique text string as ID
<cr>

HQ(config)#logging origin-id ip ?
<cr>

HQ(config)#logging origin-id ip

I have not tried that yet.  However the logging event manager is already correlating the events from the source interface IP.  I just didn't understand why the logs on my router dont contain the hostname or string that I input.  What is causing it not to add that to the logs? I believe that if the logging was correct on the router I would be receiving the proper information in LEM.