06-15-2016 01:16 PM - edited 03-08-2019 06:13 AM
Hi,
We have our remote offices Core switches pointing to our syslog.
Problem is that those Core switches has servers/printers that keep going up/down through out the day , and we see ports up/down alert on syslog.
We want to stop receiving port up/down message on syslog.
one option is to disable logging of the ports with command no logging event link-status.
but it also stops logging of port up/down event in buffer, even if someone admin shutdown the port, buffer will not have that log.
How can i have logging still available for ports going up/down in buffer, but dont receive it in syslog server?
06-15-2016 01:44 PM
The answer depends on your switch model a little. Try applying this interface configuration:
interface Gigabit a/b/c
no logging event link-status
06-15-2016 01:46 PM
Oops, silly me. You specifically mention this in your post.
06-15-2016 01:49 PM
I've never used it, but perhaps checkout "logging filter ...".
http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/esm/command/esm-cr-book/esm-cr-a1.html#wp8095298280
02-01-2018 06:43 AM
One workaround it to keep using your "no logging event link-status" status on the ports, but also configure buffer/syslog logging of all configuration changes, which would record any admin shutdown port changes (along with all other config changes). We use this on our routers and switches - it will put messages in the buffer and to any remote syslog server you have configured:
archive
log config
logging enable
notify syslog content type plaintext
hidekeys
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide