cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1074
Views
0
Helpful
2
Replies

syslog messages

don.click1
Level 4
Level 4

We have quite a few switches on our network that report to a syslog server. We are getting alot of syslog notices about  ports "bouncing" with the %LINK-3-UPDOWN message.  I have read that I can add the line "no logging event link-status" to the interface to exclude it from the logs, but I am curious if that would also stop any "link flapping" from being logged?

I dont really care to see 1000+ pc's rebooting, but I do want to see if there is a port having the link flapping error.  I also dont want to do a generic/switch wide ignore, because I do want to watch for AP's, trunk ports, and a few other key devices.

Any suggestions/thoughts?

(not that it really matters, but most of my layer2 devices are either 3560G's or 3750E's at this time.)

Thanks

1 Accepted Solution

Accepted Solutions

Adam Casella
Level 1
Level 1

Hey Don,

You can turn off logging event link-status globally and then enable logging event link-status on the interfaces you want to monitor.  So for example, you would disable logging event-link status so that it would be disabled for all ports that are flapping:

switch(config)#no logging event link-status

Then if port 1/0/2 was an uplink that you must monitor you can enable link-status monitoring on a per-port basis:

switch(config-if)#logging event link-status.

This would do what you are looking to accomplish.

Thanks,

Adam

View solution in original post

2 Replies 2

Adam Casella
Level 1
Level 1

Hey Don,

You can turn off logging event link-status globally and then enable logging event link-status on the interfaces you want to monitor.  So for example, you would disable logging event-link status so that it would be disabled for all ports that are flapping:

switch(config)#no logging event link-status

Then if port 1/0/2 was an uplink that you must monitor you can enable link-status monitoring on a per-port basis:

switch(config-if)#logging event link-status.

This would do what you are looking to accomplish.

Thanks,

Adam

Thanks for the tip. I tried that on a 3750 stack (IOS 12.2(40)SE) and it didnt work. Ill have to research that a bit, but this puts me on the right track.