Using Network Switch for log server

[WangSteven02215]

Hi, I don't have network expertise.  

I've been trying to transmit the log to the cyber security operation center.

For further explanation, both servers and PCs shown in the figure are Windows OS, and agent will be installed on them to transmit Windows event logs, and Network Switch will transmit syslog. 

I would like to use the Cisco Switch to the security control center as shown in the figure. If network switch will be connected like the picture, is there no problem in sending the log? If I just connect Cisco switch, does it work well? 

Is there need to change configuration (Network Switch Configuration) or do anything else that needs work?

[Reza Sharifi]

Hi,

I would like to use the Cisco Switch to the security control center as shown in the figure. If network switch will be connected like the picture, is there no problem in sending the log? If I just connect Cisco switch, does it work well? 

It depends on your environment. If the existing switches are all in one vlan and you want to add a new switch to "Network Operation Center" you can simply extend the vlan to this new switch. If you have multiple vlans and want to put this new switch in multiple vlans as well then you need to trunk the new switch to one of the existing ones and add all the necessary vlan to it.

HTH

[WangSteven02215]

Hi, 

Thank you very much indeed! As you explained, I have registered all VLANs on the trunk port, but the ping is not sent to the syslog server. 

I don't know what's wrong, Could you please help me? For effective explanation, I uploaded the packet tracer file.