06-15-2016 01:16 PM - edited 03-08-2019 06:13 AM
Hi,
We have our remote offices Core switches pointing to our syslog.
Problem is that those Core switches has servers/printers that keep going up/down through out the day , and we see ports up/down alert on syslog.
We want to stop receiving port up/down message on syslog.
one option is to disable logging of the ports with command no logging event link-status.
but it also stops logging of port up/down event in buffer, even if someone admin shutdown the port, buffer will not have that log.
How can i have logging still available for ports going up/down in buffer, but dont receive it in syslog server?
06-15-2016 01:44 PM
The answer depends on your switch model a little. Try applying this interface configuration:
interface Gigabit a/b/c
no logging event link-status
06-15-2016 01:46 PM
Oops, silly me. You specifically mention this in your post.
06-15-2016 01:49 PM
I've never used it, but perhaps checkout "logging filter ...".
http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/esm/command/esm-cr-book/esm-cr-a1.html#wp8095298280
02-01-2018 06:43 AM
One workaround it to keep using your "no logging event link-status" status on the ports, but also configure buffer/syslog logging of all configuration changes, which would record any admin shutdown port changes (along with all other config changes). We use this on our routers and switches - it will put messages in the buffer and to any remote syslog server you have configured:
archive
log config
logging enable
notify syslog content type plaintext
hidekeys
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: