cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
701
Views
4
Helpful
3
Replies

TCP syslog possible with equipment CAT4500, CAT6500 and Nexus in general????

BBVAJONAS
Level 1
Level 1

Hello:

A few days ago I noticed a team CAT6509 that the processor was increasing and to give the command.

Processes show cpu sort

The process that more time was consumed in the syslog, and it disabled and under the cpu.

The question is I can enable TCP syslog, I assume this to be the syslog udp paralemos can open several roads, and it would be better if you only open a TCP connection.

It is my hypothesis, I hope and I can corroborate with their experiences.

3 Replies 3

Wilson Bonilla
Level 3
Level 3

Hola Jhoni.

If understand correctly you are saying that a 6k was having high cpu utilization caused by syslog process.. and then I don't understand what you meant, if you speak spanish I also do, I would be happy to help you with your concern.

Regards.

Wilson B.

Hola Wilson:

Efectivamente un CAT6509 estaba elevando su CPU y cuando di el comando:

show processes cpu sort

El proceso que estaba mas alto era el syslog, procedi a deshabilitarlo y el CPU bajo.

A raiz de esto quisiera poder habilitar el syslog via TCP en lugar de UDP, en base a la hipotesis de que el ser UDP el envio del syslog haya podido abrir conexiones paralelas y aumentado el proceso del CPU.

Muchas Gracias, por tus comentarios.

Saludos,

Saludos Jhoni.

Con el sgte comando usted podra hacer que syslog utilice TCP.

F340.22.22-6500-3(config)#logging host 1.1.1.1 transport tcp

Por defecto se utilizara puerto TCP 601, pero puede ser modificado con las variables que le muestro acontinuacion:

F340.22.22-6500-3(config)#logging host 1.1.1.1 transport tcp ?

  audit                 Set this host for IOS firewall audit logging

  discriminator         Specify a message discriminator indentifier for this

                        logging session

  filtered              Enable filtered logging

  port                  Specify the TCP port number (default=601)

  sequence-num-session  Include session sequence number tag in syslog message

  session-id            Specify syslog message session ID tagging

  xml                   Enable logging in XML

 

Si tiene alguna otra pregunta no dude en hacerla.

Wilson B.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Innovations in Cisco Full Stack Observability - A new webinar from Cisco